-
Notifications
You must be signed in to change notification settings - Fork 191
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
libgit2: upgrade to golang-with-libgit2 v0.1.4 #842
Conversation
54140a2
to
8005dae
Compare
The new TAG needs to be changed in 2 other places: |
2b21d3b
to
f42e430
Compare
We need to update the fuzzer logic to use the libgit2-only binary: https://github.com/fluxcd/source-controller/blob/main/tests/fuzz/oss_fuzz_build.sh#L31 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just added two comments on changes we need to include as part of this PR.
2d1e524
to
b1f741b
Compare
e3cbb2a
to
5e3a2ee
Compare
5e3a2ee
to
f489805
Compare
go-fuzz -tags gofuzz -func="${function}" -o "${fuzzer}.a" . | ||
${CXX} ${CXXFLAGS} ${LIB_FUZZING_ENGINE} -o "${OUT}/${fuzzer}" \ | ||
"${fuzzer}.a" \ | ||
"${TARGET_DIR}/lib/libgit2.a" "${TARGET_DIR}/lib/libssh2.a" \ | ||
"${TARGET_DIR}/lib/libz.a" "${TARGET_DIR}/lib64/libssl.a" \ | ||
"${TARGET_DIR}/lib64/libcrypto.a" \ | ||
"${fuzzer}.a" "${TARGET_DIR}/lib/libgit2.a" \ | ||
-fsanitize="${SANITIZER}" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
By the byte, now we don't need to embed the entire dependency chain, we may be able to revert back to the Vanilla tooling from the CIFuzz. Let's revisit this in a future/separate PR.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
thanks @aryan9600 🙇
Upgrade to golang-with-libgit2 v0.1.4 and use libgit2 which is compiled without being linked to libssh2 and openssl. Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
Signed-off-by: Sanskar Jaiswal <jaiswalsanskar078@gmail.com>
f489805
to
bd37bc3
Compare
Upgrade to golang-with-libgit2 v0.1.4 and use libgit2 which is compiled
without being linked to libssh2 and openssl.
Relates to: #782
Fixes: #762
Signed-off-by: Sanskar Jaiswal jaiswalsanskar078@gmail.com