CodeIntelligenceTesting / jazzer

Coverage-guided, in-process fuzzing for the JVM
https://code-intelligence.com
Other
1.03k stars 137 forks source link

Use Jazzer with private Maven repository. #682

Closed dmgping closed 1 year ago

dmgping commented 1 year ago

All my jars are stored in a private maven repo, to avoid mounting my project to the docker container everytime I want to fuzz, how can I pass jazzer a repo location from which to pull jar files?

freedom1b2830 commented 1 year ago

(I'm not a jazzer developer)!

For already downloaded jar files

Project written and tested on linux (only)

Good day. i have a project that uses a jar file in a directory. Gets class signatures and starts jazzer with these targets

repo https://github.com/publicLibs/continuous-Jazzer build mvn clean install

Run:

java -jar continuousJazzer-agent-main-SNAPSHOT-jar-with-dependencies.jar LIST dir/with/jar

1) The program looks for jar files 2) Get signatures 3) Writes to the config

java -jar continuousJazzer-agent-main-SNAPSHOT-jar-with-dependencies.jar FUZZ config.yaml

1)Creates jazzer start arguments 2)Starts

latest release

https://github.com/publicLibs/continuous-Jazzer/releases/tag/jazzer-0.16.1-format_pom

bertschneider commented 1 year ago

I assume you're referring to cifuzz/jazzer-autofuzz, correct? That image uses Coursier to fetch dependencies and external repositories can be configured through the available Coursier repository settings. Something like:

docker run -e "COURSIER_REPOSITORIES=https://my.re.po -it cifuzz/jazzer-autofuzz [...]

Does this help?

fmeum commented 1 year ago

Please open a new issue if https://github.com/CodeIntelligenceTesting/jazzer/issues/682#issuecomment-1498690104 didn't help.