RepoMirrors/selinux
1
0
Fork 0
mirror of https://github.com/SELinuxProject/selinux synced 2024-12-30 10:02:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,642 Commits 4 Branches 723 Tags 22 MiB
b1b3467a47
Commit Graph

2 Commits

Author SHA1 Message Date
Christian Göttsche
1d2073557d libsepol/fuzz: more strict fuzzing of binary policies 
Validate policy after optimizing.

Run policy assertion check, ignoring any assertions.

Abort on failures writing the parsed policy, as writing should not fail on
validated policies.

Set close-on-exec flag in case of any sibling thread.

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: James Carter <jwcart2@gmail.com>
 2023-07-12 13:01:15 -04:00
Christian Göttsche
82438341f7 libsepol: add libfuzz based fuzzer for reading binary policies 
Introduce a libfuzz[1] based fuzzer testing the parsing of a binary
policy.

Build the fuzzer in the oss-fuzz script.

[1]: https://llvm.org/docs/LibFuzzer.html

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
 2021-12-15 12:48:28 -05:00