platform_build/core/fuzz_test.mk

###########################################
## A thin wrapper around BUILD_EXECUTABLE
## Common flags for fuzz tests are added.
###########################################
$(call record-module-type,FUZZ_TEST)

ifdef LOCAL_SDK_VERSION
    $(error $(LOCAL_PATH): $(LOCAL_MODULE): NDK fuzz tests are not supported.)
endif

my_fuzzer:=libFuzzer
ifdef LOCAL_FUZZ_ENGINE
    my_fuzzer:=$(LOCAL_FUZZ_ENGINE)
else ifdef TARGET_FUZZ_ENGINE
    my_fuzzer:=$(TARGET_FUZZ_ENGINE)
endif

LOCAL_SANITIZE += fuzzer

ifeq ($(my_fuzzer),libFuzzer)
LOCAL_STATIC_LIBRARIES += libFuzzer
else
$(call pretty-error, Unknown fuzz engine $(my_fuzzer))
endif

ifdef LOCAL_MODULE_PATH
$(error $(LOCAL_PATH): Do not set LOCAL_MODULE_PATH when building test $(LOCAL_MODULE))
endif

ifdef LOCAL_MODULE_PATH_32
$(error $(LOCAL_PATH): Do not set LOCAL_MODULE_PATH_32 when building test $(LOCAL_MODULE))
endif

ifdef LOCAL_MODULE_PATH_64
$(error $(LOCAL_PATH): Do not set LOCAL_MODULE_PATH_64 when building test $(LOCAL_MODULE))
endif

LOCAL_MODULE_PATH_64 := $(TARGET_OUT_DATA_NATIVE_TESTS)/fuzzers/$(my_fuzzer)/$(LOCAL_MODULE)
LOCAL_MODULE_PATH_32 := $($(TARGET_2ND_ARCH_VAR_PREFIX)TARGET_OUT_DATA_NATIVE_TESTS)/fuzzers/$(my_fuzzer)/$(LOCAL_MODULE)

ifndef LOCAL_STRIP_MODULE
LOCAL_STRIP_MODULE := keep_symbols
endif

include $(BUILD_EXECUTABLE)
Add BUILD(_HOST)?_FUZZ_TEST. These are tests that use LLVM's libFuzzer for testing with a sanitizer. Bug: http://b/22850550 Change-Id: I6eeaff7877b7dd0c30f8910c6f27f5278b27a83d 2015-07-31 01:56:30 +02:00			`###########################################`
			`## A thin wrapper around BUILD_EXECUTABLE`
			`## Common flags for fuzz tests are added.`
			`###########################################`
Record module type statistics Creates a build_system_stats.txt build artifact that contains statistics on how many BUILD_* modules are defined in a build. Also writes out information about the Soong module types sent from the Soong build. Merged-In: Iaf0c7062f542dc6942b5349854f3d49267cac4a5 Change-Id: Iaf0c7062f542dc6942b5349854f3d49267cac4a5 2016-07-26 01:03:53 +02:00			`$(call record-module-type,FUZZ_TEST)`
Add BUILD(_HOST)?_FUZZ_TEST. These are tests that use LLVM's libFuzzer for testing with a sanitizer. Bug: http://b/22850550 Change-Id: I6eeaff7877b7dd0c30f8910c6f27f5278b27a83d 2015-07-31 01:56:30 +02:00
			`ifdef LOCAL_SDK_VERSION`
			`$(error $(LOCAL_PATH): $(LOCAL_MODULE): NDK fuzz tests are not supported.)`
			`endif`

Add support for honggfuzz to BUILD_FUZZ_TEST Change-Id: I38f70d1a57649635be95c59187da05ba22fcf687 2017-12-21 23:04:03 +01:00			`my_fuzzer:=libFuzzer`
			`ifdef LOCAL_FUZZ_ENGINE`
			`my_fuzzer:=$(LOCAL_FUZZ_ENGINE)`
			`else ifdef TARGET_FUZZ_ENGINE`
			`my_fuzzer:=$(TARGET_FUZZ_ENGINE)`
			`endif`

Fix fuzzer builds. - Updates the fuzzer builds to use SANITIZE_TARGET='fuzzer' instead of 'coverage'. - Removed an old dependency that made fuzzer builds without ASan an error. - Fixed up the build flags to allow fuzzers to be built. Previously, the coverage flags were manually provided. As the toolchain has moved on, these flags are no longer compatible with libFuzzer, and so I've updated them to use the correct, compatible flags. Bug: 121042685 Test: With all patches in the bug merged, build a fuzzer using 'SANITIZE_TARGET=fuzzer mmma <your_fuzzer>'. Change-Id: I86e6a26d27c22b3622cf6ea8760f502f607df6f0 2019-05-01 23:37:33 +02:00			`LOCAL_SANITIZE += fuzzer`
Add support for honggfuzz to BUILD_FUZZ_TEST Change-Id: I38f70d1a57649635be95c59187da05ba22fcf687 2017-12-21 23:04:03 +01:00
			`ifeq ($(my_fuzzer),libFuzzer)`
Update fuzz_test makefile. Update the fuzz_test makefile to link against the new libFuzzer library and update the coverage flags to the new version. Test: built a fuzzer and verified correct linking. Change-Id: Ie6e6da9a202a258abf805dbdc8cdd3490fcb2406 2017-04-19 19:56:45 +02:00			`LOCAL_STATIC_LIBRARIES += libFuzzer`
Add support for honggfuzz to BUILD_FUZZ_TEST Change-Id: I38f70d1a57649635be95c59187da05ba22fcf687 2017-12-21 23:04:03 +01:00			`else`
			`$(call pretty-error, Unknown fuzz engine $(my_fuzzer))`
			`endif`
Add BUILD(_HOST)?_FUZZ_TEST. These are tests that use LLVM's libFuzzer for testing with a sanitizer. Bug: http://b/22850550 Change-Id: I6eeaff7877b7dd0c30f8910c6f27f5278b27a83d 2015-07-31 01:56:30 +02:00
			`ifdef LOCAL_MODULE_PATH`
			`$(error $(LOCAL_PATH): Do not set LOCAL_MODULE_PATH when building test $(LOCAL_MODULE))`
			`endif`

			`ifdef LOCAL_MODULE_PATH_32`
			`$(error $(LOCAL_PATH): Do not set LOCAL_MODULE_PATH_32 when building test $(LOCAL_MODULE))`
			`endif`

			`ifdef LOCAL_MODULE_PATH_64`
			`$(error $(LOCAL_PATH): Do not set LOCAL_MODULE_PATH_64 when building test $(LOCAL_MODULE))`
			`endif`

Move fuzzers to include fuzz engine in pathname, default to 64-bit Old: /data/nativetest64/fuzzers/ID3_fuzzer/ID3_fuzzer New: /data/nativetest64/fuzzers/libFuzzer/ID3_fuzzer This allows having both the honggfuzz and libFuzzer variants built and flashed at the same time. It also means we don't have to rely on 'strings' to determine which type a given fuzzer is. Test: SANITIZE_TARGET=address mmma vendor/google/tools/security/fuzzers/libFuzzer/sanitycheck_fuzzer \ && test -e $ANDROID_PRODUCT_OUT/data/nativetest64/fuzzers/libFuzzer/sanitycheck_fuzzer Change-Id: Ic0899fe8f471cc63d11d810e5fd16b6c6f621bc1 2018-03-26 21:47:31 +02:00			`LOCAL_MODULE_PATH_64 := $(TARGET_OUT_DATA_NATIVE_TESTS)/fuzzers/$(my_fuzzer)/$(LOCAL_MODULE)`
			`LOCAL_MODULE_PATH_32 := $($(TARGET_2ND_ARCH_VAR_PREFIX)TARGET_OUT_DATA_NATIVE_TESTS)/fuzzers/$(my_fuzzer)/$(LOCAL_MODULE)`
Add BUILD(_HOST)?_FUZZ_TEST. These are tests that use LLVM's libFuzzer for testing with a sanitizer. Bug: http://b/22850550 Change-Id: I6eeaff7877b7dd0c30f8910c6f27f5278b27a83d 2015-07-31 01:56:30 +02:00
Add the honggfuzz binary as a dependency and keep symbols This way honggfuzz is rebuilt if it has changed, when building a fuzzer. Separately, keeping the symbols in the fuzzer binary is useful for crash triage. Change-Id: I2fc5ca64ccf66d084158580da74e5397aa61c250 2018-01-03 20:32:14 +01:00			`ifndef LOCAL_STRIP_MODULE`
			`LOCAL_STRIP_MODULE := keep_symbols`
			`endif`

Add BUILD(_HOST)?_FUZZ_TEST. These are tests that use LLVM's libFuzzer for testing with a sanitizer. Bug: http://b/22850550 Change-Id: I6eeaff7877b7dd0c30f8910c6f27f5278b27a83d 2015-07-31 01:56:30 +02:00			`include $(BUILD_EXECUTABLE)`