e55889afa7Wallet status bridge: strict typed JSON wire, bounded channel, and no-mutation status surface. Includes the wallet_status_json fuzzer with a seed corpus (duplicate method keys, escaped duplicates, malformed surrogates, nested duplicates, out-of-range requests, unknown fields, and valid request/response shapes) and the wallet_status_bridge unit suite. Layer 3 of the reviewed Glove wallet-status stack; status-only, disabled by default, and no capability advertisement. Validation: dev CTest, ASan/UBSan, TSan, and libFuzzer 10,000 units on the final stacked tree (see workflow184 layer records).
199 lines
8 KiB
CMake
199 lines
8 KiB
CMake
if(NOT CMAKE_CXX_COMPILER_ID MATCHES "Clang")
|
|
message(FATAL_ERROR "GLOVE_BUILD_FUZZERS requires Clang libFuzzer support")
|
|
endif()
|
|
|
|
set(GLOVE_FUZZER_COMPILE_FLAG "-fsanitize=fuzzer")
|
|
set(GLOVE_FUZZER_LINK_FLAG "-fsanitize=fuzzer")
|
|
set(GLOVE_FUZZER_RUNTIME_LIBRARIES)
|
|
if(CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_CXX_FLAGS MATCHES "-stdlib=libc\\+\\+")
|
|
# Ubuntu packages libFuzzer with libstdc++, while Glove uses libc++ there
|
|
# for complete C++23 support. Place the runtime before its ABI dependency;
|
|
# Clang's automatic insertion otherwise puts it after all user libraries.
|
|
set(GLOVE_FUZZER_COMPILE_FLAG "-fsanitize=fuzzer-no-link")
|
|
set(GLOVE_FUZZER_LINK_FLAG)
|
|
set(glove_fuzzer_runtime_name
|
|
"libclang_rt.fuzzer-${CMAKE_SYSTEM_PROCESSOR}.a"
|
|
)
|
|
execute_process(
|
|
COMMAND ${CMAKE_CXX_COMPILER} -print-file-name=${glove_fuzzer_runtime_name}
|
|
OUTPUT_VARIABLE glove_fuzzer_runtime
|
|
OUTPUT_STRIP_TRAILING_WHITESPACE
|
|
RESULT_VARIABLE glove_fuzzer_runtime_result
|
|
)
|
|
execute_process(
|
|
COMMAND ${CMAKE_CXX_COMPILER} -print-file-name=libstdc++.so
|
|
OUTPUT_VARIABLE glove_fuzzer_libstdcxx
|
|
OUTPUT_STRIP_TRAILING_WHITESPACE
|
|
RESULT_VARIABLE glove_fuzzer_libstdcxx_result
|
|
)
|
|
if(NOT glove_fuzzer_runtime_result EQUAL 0 OR NOT EXISTS "${glove_fuzzer_runtime}")
|
|
message(FATAL_ERROR "unable to locate ${glove_fuzzer_runtime_name}")
|
|
endif()
|
|
if(NOT glove_fuzzer_libstdcxx_result EQUAL 0 OR NOT EXISTS "${glove_fuzzer_libstdcxx}")
|
|
message(FATAL_ERROR "unable to locate libstdc++.so")
|
|
endif()
|
|
list(APPEND GLOVE_FUZZER_RUNTIME_LIBRARIES
|
|
"$<LINK_LIBRARY:WHOLE_ARCHIVE,${glove_fuzzer_runtime}>"
|
|
"${glove_fuzzer_libstdcxx}"
|
|
)
|
|
endif()
|
|
|
|
function(glove_configure_fuzzer target)
|
|
target_compile_options(${target} PRIVATE "${GLOVE_FUZZER_COMPILE_FLAG}")
|
|
if(GLOVE_FUZZER_LINK_FLAG)
|
|
target_link_options(${target} PRIVATE "${GLOVE_FUZZER_LINK_FLAG}")
|
|
endif()
|
|
if(GLOVE_FUZZER_RUNTIME_LIBRARIES)
|
|
target_link_libraries(${target} PRIVATE ${GLOVE_FUZZER_RUNTIME_LIBRARIES})
|
|
endif()
|
|
endfunction()
|
|
|
|
add_library(glove_mcp_codec_fuzz_support STATIC
|
|
${CMAKE_SOURCE_DIR}/src/mcp/codec.cpp
|
|
)
|
|
target_link_libraries(glove_mcp_codec_fuzz_support PUBLIC glove_options)
|
|
target_link_libraries(glove_mcp_codec_fuzz_support PRIVATE glaze::glaze)
|
|
target_include_directories(glove_mcp_codec_fuzz_support
|
|
PUBLIC
|
|
$<BUILD_INTERFACE:${CMAKE_SOURCE_DIR}/include>
|
|
PRIVATE
|
|
$<BUILD_INTERFACE:${CMAKE_SOURCE_DIR}>
|
|
)
|
|
target_compile_options(glove_mcp_codec_fuzz_support PRIVATE -fsanitize=fuzzer-no-link)
|
|
|
|
add_executable(glove_mcp_codec_fuzzer mcp_codec_fuzzer.cpp)
|
|
target_link_libraries(
|
|
glove_mcp_codec_fuzzer
|
|
PRIVATE glove_mcp_codec_fuzz_support glaze::glaze
|
|
)
|
|
target_include_directories(glove_mcp_codec_fuzzer PRIVATE
|
|
$<BUILD_INTERFACE:${CMAKE_SOURCE_DIR}>
|
|
)
|
|
glove_configure_fuzzer(glove_mcp_codec_fuzzer)
|
|
|
|
add_library(glove_policy_jsonpath_fuzz_support STATIC
|
|
${CMAKE_SOURCE_DIR}/src/policy/jsonpath_engine.cpp
|
|
)
|
|
target_link_libraries(glove_policy_jsonpath_fuzz_support PUBLIC glove_options)
|
|
target_link_libraries(glove_policy_jsonpath_fuzz_support PRIVATE glaze::glaze)
|
|
target_include_directories(glove_policy_jsonpath_fuzz_support
|
|
PUBLIC
|
|
$<BUILD_INTERFACE:${CMAKE_SOURCE_DIR}/include>
|
|
)
|
|
target_compile_options(glove_policy_jsonpath_fuzz_support PRIVATE -fsanitize=fuzzer-no-link)
|
|
|
|
add_executable(glove_policy_jsonpath_fuzzer policy_jsonpath_fuzzer.cpp)
|
|
target_link_libraries(
|
|
glove_policy_jsonpath_fuzzer
|
|
PRIVATE glove_policy_jsonpath_fuzz_support glaze::glaze
|
|
)
|
|
glove_configure_fuzzer(glove_policy_jsonpath_fuzzer)
|
|
|
|
add_library(glove_change_manifest_fuzz_support STATIC
|
|
${CMAKE_SOURCE_DIR}/src/supervisor/change_manifest.cpp
|
|
)
|
|
target_link_libraries(glove_change_manifest_fuzz_support PUBLIC glove_options)
|
|
target_link_libraries(glove_change_manifest_fuzz_support PRIVATE glaze::glaze glove_digest)
|
|
target_include_directories(glove_change_manifest_fuzz_support
|
|
PUBLIC
|
|
$<BUILD_INTERFACE:${CMAKE_SOURCE_DIR}/include>
|
|
)
|
|
target_compile_options(glove_change_manifest_fuzz_support PRIVATE -fsanitize=fuzzer-no-link)
|
|
|
|
add_executable(glove_change_manifest_fuzzer change_manifest_fuzzer.cpp)
|
|
target_link_libraries(
|
|
glove_change_manifest_fuzzer
|
|
PRIVATE glove_change_manifest_fuzz_support glaze::glaze glove_digest
|
|
)
|
|
glove_configure_fuzzer(glove_change_manifest_fuzzer)
|
|
|
|
add_library(glove_session_plan_fuzz_support STATIC
|
|
${CMAKE_SOURCE_DIR}/src/supervisor/session_plan.cpp
|
|
)
|
|
target_link_libraries(glove_session_plan_fuzz_support PUBLIC glove_options)
|
|
target_link_libraries(glove_session_plan_fuzz_support PRIVATE glaze::glaze glove_supervisor)
|
|
target_include_directories(glove_session_plan_fuzz_support
|
|
PUBLIC
|
|
$<BUILD_INTERFACE:${CMAKE_SOURCE_DIR}/include>
|
|
)
|
|
target_compile_options(glove_session_plan_fuzz_support PRIVATE -fsanitize=fuzzer-no-link)
|
|
|
|
add_executable(glove_session_plan_fuzzer session_plan_fuzzer.cpp)
|
|
target_link_libraries(
|
|
glove_session_plan_fuzzer
|
|
PRIVATE glove_session_plan_fuzz_support glove_supervisor glaze::glaze
|
|
)
|
|
glove_configure_fuzzer(glove_session_plan_fuzzer)
|
|
|
|
add_library(glove_change_apply_journal_fuzz_support STATIC
|
|
${CMAKE_SOURCE_DIR}/src/supervisor/change_apply_journal.cpp
|
|
)
|
|
target_link_libraries(glove_change_apply_journal_fuzz_support PUBLIC glove_options)
|
|
target_link_libraries(
|
|
glove_change_apply_journal_fuzz_support
|
|
PRIVATE glaze::glaze glove_digest
|
|
)
|
|
target_include_directories(glove_change_apply_journal_fuzz_support
|
|
PUBLIC
|
|
$<BUILD_INTERFACE:${CMAKE_SOURCE_DIR}/include>
|
|
)
|
|
target_compile_options(glove_change_apply_journal_fuzz_support PRIVATE -fsanitize=fuzzer-no-link)
|
|
|
|
add_executable(glove_change_apply_journal_fuzzer change_apply_journal_fuzzer.cpp)
|
|
target_link_libraries(
|
|
glove_change_apply_journal_fuzzer
|
|
PRIVATE glove_change_apply_journal_fuzz_support glaze::glaze glove_digest
|
|
)
|
|
glove_configure_fuzzer(glove_change_apply_journal_fuzzer)
|
|
|
|
add_library(glove_library_bundle_fuzz_support STATIC
|
|
${CMAKE_SOURCE_DIR}/src/supervisor/library_bundle.cpp
|
|
)
|
|
target_link_libraries(glove_library_bundle_fuzz_support PUBLIC glove_options)
|
|
target_link_libraries(glove_library_bundle_fuzz_support PRIVATE glove_digest)
|
|
target_include_directories(glove_library_bundle_fuzz_support
|
|
PUBLIC
|
|
$<BUILD_INTERFACE:${CMAKE_SOURCE_DIR}/include>
|
|
)
|
|
target_compile_options(glove_library_bundle_fuzz_support PRIVATE -fsanitize=fuzzer-no-link)
|
|
|
|
add_executable(glove_library_bundle_fuzzer library_bundle_fuzzer.cpp)
|
|
target_link_libraries(
|
|
glove_library_bundle_fuzzer
|
|
PRIVATE glove_library_bundle_fuzz_support glove_digest
|
|
)
|
|
glove_configure_fuzzer(glove_library_bundle_fuzzer)
|
|
|
|
add_executable(glove_apple_container_stats_fuzzer apple_container_stats_fuzzer.cpp)
|
|
target_link_libraries(
|
|
glove_apple_container_stats_fuzzer
|
|
PRIVATE glove_control glaze::glaze
|
|
)
|
|
target_include_directories(glove_apple_container_stats_fuzzer PRIVATE
|
|
$<BUILD_INTERFACE:${CMAKE_SOURCE_DIR}/src/control>
|
|
)
|
|
glove_configure_fuzzer(glove_apple_container_stats_fuzzer)
|
|
|
|
add_library(glove_wallet_status_json_fuzz_support STATIC
|
|
${CMAKE_SOURCE_DIR}/src/control/wallet_status_bridge.cpp
|
|
${CMAKE_SOURCE_DIR}/src/control/wallet_status_json.cpp
|
|
)
|
|
target_link_libraries(glove_wallet_status_json_fuzz_support PUBLIC glove_options)
|
|
target_link_libraries(glove_wallet_status_json_fuzz_support PRIVATE glaze::glaze)
|
|
target_include_directories(glove_wallet_status_json_fuzz_support
|
|
PUBLIC
|
|
$<BUILD_INTERFACE:${CMAKE_SOURCE_DIR}/include>
|
|
PRIVATE
|
|
$<BUILD_INTERFACE:${CMAKE_SOURCE_DIR}/src/control>
|
|
)
|
|
target_compile_options(glove_wallet_status_json_fuzz_support PRIVATE -fsanitize=fuzzer-no-link)
|
|
|
|
add_executable(glove_wallet_status_json_fuzzer wallet_status_json_fuzzer.cpp)
|
|
target_link_libraries(
|
|
glove_wallet_status_json_fuzzer
|
|
PRIVATE glove_wallet_status_json_fuzz_support
|
|
)
|
|
target_include_directories(glove_wallet_status_json_fuzzer PRIVATE
|
|
$<BUILD_INTERFACE:${CMAKE_SOURCE_DIR}>
|
|
)
|
|
glove_configure_fuzzer(glove_wallet_status_json_fuzzer)
|