[pull] master from google:master - #192
Merged
Merged
Conversation
Updates LLVM usage to match [6d1ace547c9f](llvm/llvm-project@6d1ace547c9f) Indexer-PiperOrigin-RevId: 956634975
The build source map records Apache Thrift as https://github.com/apache/thrift.git, while `project.yaml` used the equivalent URL without `.git`. ClusterFuzz compares these URLs exactly when selecting the main component; the mismatch made it fall back to alphabetical ordering and report Ruzzy’s revision as the tested/regressed revision. Using the canonical .git URL lets ClusterFuzz prioritize Apache Thrift and report its revision correctly. https://oss-fuzz.com/testcase-detail/4583322718896128 <img width="2296" height="408" alt="CleanShot 2026-07-30 at 11 59 09@2x" src="https://github.com/user-attachments/assets/0ab1b338-2196-4eb1-b34d-531141601cbb" />
Update jsoup's CSS/HTML fuzzer to treat selector validation failures as rejected inputs. jsoup now normalizes re2j runtime pattern-complexity errors into `ValidationException`. The fuzzer should ignore these expected validation failures alongside selector parse errors. Validation: - `python3 infra/helper.py check_build jsoup CssHtmlFuzzer`
This PR updates the compiler used when building the fuzzers to be the one provided by the underlying ubuntu image. Prior to this PR, the build process would use Envoy's hermetic LLVM to build the fuzzers. However, the required glibc version by the LLVM is incompatible with the one provided by the underlying image. We get the following error: ``` Step #3 - "compile-honggfuzz-address-x86_64": # Execution platform: @@internal_platforms_do_not_use//host:host Step #3 - "compile-honggfuzz-address-x86_64": external/llvm_toolchain_llvm/bin/clang: /lib/x86_64-linux-gnu/libstdc++.so.6: version `GLIBCXX_3.4.29' not found (required by external/llvm_toolchain_llvm/bin/clang) Step #3 - "compile-honggfuzz-address-x86_64": external/llvm_toolchain_llvm/bin/clang: /lib/x86_64-linux-gnu/libstdc++.so.6: version `GLIBCXX_3.4.30' not found (required by external/llvm_toolchain_llvm/bin/clang) Step #3 - "compile-honggfuzz-address-x86_64": external/llvm_toolchain_llvm/bin/clang: /lib/x86_64-linux-gnu/libstdc++.so.6: version `CXXABI_1.3.13' not found (required by external/llvm_toolchain_llvm/bin/clang) Step #3 - "compile-honggfuzz-address-x86_64": external/llvm_toolchain_llvm/bin/clang: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.32' not found (required by external/llvm_toolchain_llvm/bin/clang) Step #3 - "compile-honggfuzz-address-x86_64": external/llvm_toolchain_llvm/bin/clang: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.33' not found (required by external/llvm_toolchain_llvm/bin/clang) Step #3 - "compile-honggfuzz-address-x86_64": external/llvm_toolchain_llvm/bin/clang: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.34' not found (required by external/llvm_toolchain_llvm/bin/clang) ``` We tried to upgrade the underlying ubuntu image to v24.04, however other version incompatibilities were observed.
Add Paul Moore (@pcmoore) and Jason Zaman (@perfinion), both active SELinux maintainers, to the cc list. These addresses are allegedly Google mail accounts despite not being @gmail.com; let us know if these won't work and we will provide gmail ones. Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )