search

google / clusterfuzz

Scalable fuzzing infrastructure.
https://google.github.io/clusterfuzz
Apache License 2.0
5.27k stars 551 forks source link

Fix centipede exceptions #4187

Open jonathanmetzman opened 3 weeks ago

jonathanmetzman commented 3 weeks ago

It's exceptioning all over the place in oss-fuzz. https://github.com/google/clusterfuzz/pull/4040 seems broken becuase it's having oss-fuzz run fuzzers for builds that aren't happening. I think projects aren't being built with centipede by default on oss-fuzz.

jonathanmetzman commented 3 weeks ago

https://pantheon.corp.google.com/errors/detail/CKOVw8L-wf7nKQ;time=P30D;locations=global?e=-13802955&mods=logs_tg_prod&project=clusterfuzz-external

jonathanmetzman commented 3 weeks ago

See gs://clusterfuzz-builds-centipede/hwloc/ or fftw3. I think we should talk about whether we want to force centipede on new projects at this point, so I'm not sure the right move is to enable the builds on the oss-fuzz side. I imagine this will cause many build fails. But for now, since builds on the oss-fuzz side are opt-in, making this opt-out is not helping anyone. I will revert for now. Sorry, but I want to see a more accurate picture of the health of oss-fuzz before I go on vacation.

jonathanmetzman commented 3 weeks ago

Skia noticed this caused weird behavior where the old build (from April 2023) was used https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71292 causing bugs to be filed for extremely old builds.

jonathanmetzman commented 3 weeks ago

About 50 bugs were opened in the past few days for centipede, 17 of which are security bugs (usually there none) I think all of these are suspect.