ARVO reproducer for OSS-Fuzz Merging by n132 · Pull Request #6 · n132/ARVO

n132 · 2025-05-13T19:20:27Z

New Feat:
ARVO reproducer for OSS-Fuzz

Done:

Initial Version of Reproducer

Todo:

Tests

… positive database

oliverchang

thanks! some surface level / style comments for now, will take a closer look!

Can you please also use yapf to format these files (using
https://github.com/google/oss-fuzz/blob/master/.style.yapf for the style config?)

oliverchang · 2025-05-14T01:32:39Z

oss-fuzz/arvo_reproducer.py

+    'BuildData', ['project_name', 'engine', 'sanitizer', 'architecture'])
+warnings.filterwarnings("ignore", category=UserWarning, module="google.auth._default")
+logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')
+class DfTool():


nit: I assume this is a Df is short for Dockerfile?

Could we please rename this DockerfileModifier to be clearer?

nit: I assume this is a Df is short for Dockerfile?

Could we please rename this DockerfileModifier to be clearer?

I fixed the naming issue at c499d6

oliverchang · 2025-05-14T01:33:00Z

oss-fuzz/arvo_reproducer.py

+            return new/self.name
+        except:
+            return False
+    def getRecentCommit(self,commits_list,time_seconds=3600*24*(2.5)):


can we consistently rename functions to have snake_case ?

can we consistently rename functions to have snake_case ?

The scripts' naming style is changed in b2541b

oliverchang · 2025-05-14T01:55:18Z

oss-fuzz/arvo_reproducer.py

+        else:
+            return False
+    return tmp
+class GitTool():


nit: this is more like a VersionControlTool instead of just GitTool right?

nit: this is more like a VersionControlTool instead of just GitTool right?

The naming issue is fixed at 2f3f6e

oliverchang · 2025-05-14T01:56:12Z

oss-fuzz/arvo_reproducer.py

+    if res['project'] == "NOTFOUND":
+        res['project'] = res['job_type'].split("_")[-1]
+    return res
+def fetchIssue(localId):


can you add a TODO here to replace this with proper issue tracker API calls?

can you add a TODO here to replace this with proper issue tracker API calls?

Issue was fixed in a1c8d5

oliverchang · 2025-05-14T01:56:47Z

oss-fuzz/arvo_reproducer.py

+    if not file.exists():
+        return True
+    dft = DfTool(file)
+    if   pname == "uwebsockets":


does it make sense to put this inside arvo_data.py instead so we have a single place for these one-off replacements?

I refactored the structure of the reproducer and move project hacks to arvo_data:

1b7339,7c21ba,ef70c3,3611e1,0f533c

oliverchang · 2025-05-14T01:57:30Z

oss-fuzz/arvo_reproducer.py

+    dft.replaceOnce(r'RUN apt',"RUN apt update -y && apt install git ca-certificates -y && git config --global http.sslVerify false && git config --global --add safe.directory '*'\nRUN apt")
+    dft.strReplaceAll(globalStrReplace)
+
+    if project == "lcms":


same comment here -- can we add these per-project hacks in arvo_data.py ?

Same as the previous issue, I solved them in

1b7339
7c21ba
ef70c3
3611e1
0f533c

…emove unecessary funcs

n132 · 2025-05-14T22:32:12Z

thanks! some surface level / style comments for now, will take a closer look!

Can you please also use yapf to format these files (using https://github.com/google/oss-fuzz/blob/master/.style.yapf for the style config?)

Thanks so much for the code review; I really appreciate it! And I am sorry for the mental damage caused by my code since I just made the code run, but not for reading. I was kind of too busy to refactor it, but I cleaned it a bit now, and I'll reply to each comment with related updates.

For the style issue, I fixed it at 10a0b0.

n132 · 2025-05-15T00:33:37Z

Add unitTests and reproducing tests

Dev

fix: an obsolete feat

oliverchang

thank you for addressing the comments!

I have some more suggestions to make the code a bit more readable and maintainable.

Do you also want to move this PR over to the main oss-fuzz repo ?

I think we can create it under infra/experimental/contrib/arvo.

oss-fuzz/arvo_data.py

Dev

…pply styling

This adds fuzzing support for Arvo under the experimental contrib directory. Original work from: n132/ARVO#6

079035 · 2025-08-31T00:14:51Z

Thanks for the review! I've moved this PR to the main oss-fuzz repo at google/oss-fuzz#13897. Signed the CLA form.

Please Let us know if there are more action items needed from our end.

P.S. I had some trouble figuring out email problems with CLA form due to commit history. Inspired by this, I decided to change all my commit's username/email to a single one. No files changed for the last push.

"Add ARVO fuzzing infrastructure This adds ARVO under the experimental contrib directory. Original work from: n132/ARVO#6 Paper: https://arxiv.org/abs/2408.02153" --------- Co-authored-by: Oliver Chang <oliverchang@users.noreply.github.com>

n132 added 4 commits May 8, 2025 00:00

feat: enhance submodule handling and logging in build process

39e4911

fix: add false_positive.db to .gitignore to prevent tracking of false…

4d876db

… positive database

chore: fix minor bugs

86517fb

feat: ARVO reproducer for OSS-Fuzz Merging

e2aa913

oliverchang reviewed May 14, 2025

View reviewed changes

n132 added 13 commits May 14, 2025 12:05

style: apply oss-fuzz yapf

663322c

chore: rename dockerfile processing class to DockerfileModifier and r…

e6d5d91

…emove unecessary funcs

chore: rename the functions and vars

3bc68a6

chore: rename GitTool to VersionControlTool

ca9639c

chore: add TODO for fetch_issue

1b1e3d2

refactor: removing debugging code for update_revision_info

cdcb1d4

refactor: removing debugging code for update_revision_info

a80efd3

style: improved the output style

d3d8be3

refactor: move infra function to utils

2013015

refactor: move maintaining required data to arvo_data

a62f79f

fix: a typo

4da7508

doc: improve comments

533c3b8

action: remove pr from CI before the ci is fixed

9540ae5

n132 added 2 commits May 14, 2025 15:44

fix: ci fixing

065652c

test: add test for arvo reproducer

cd021bc

n132 added 8 commits May 14, 2025 17:50

ci: add test to CI

6755c3c

ci: remove test since no gcloud support

df34558

chore: using a faster mirrow

cc9ad8e

fix: bug that can't trace the component with new url

f05d68c

fix: wolfssl

d67a3b0

rule: update rules based on new failures

2406a94

rule: update free type2

9aa0301

rule: boost is consider a generic case

473d438

n132 and others added 12 commits August 17, 2025 17:25

chore: new rules make better IO

7a990a6

chore: more robutness

f2a4476

Merge pull request #26 from n132/dev

1906bd9

Dev

feat: submodule track fix

d8f0c0d

feat: submodule bisect

0509ac0

Merge pull request #27 from n132/dev

89aef6d

Dev

fix: an obsolete feat

c86d281

Merge pull request #28 from n132/dev

75b35c2

fix: an obsolete feat

feat: support eval

01dce2f

ignore: local files for eval testing

691808e

chore: improve simplicity

635366c

Merge branch 'main' into ARVO-OSS-Fuzz

106a826

oliverchang reviewed Aug 27, 2025

View reviewed changes

oss-fuzz/arvo_data.py Outdated Show resolved Hide resolved

oss-fuzz/arvo_data.py Outdated Show resolved Hide resolved

oss-fuzz/arvo_data.py Outdated Show resolved Hide resolved

oss-fuzz/arvo_data.py Outdated Show resolved Hide resolved

n132 and others added 10 commits August 28, 2025 12:48

chore: change the timezone back

43a9554

chore: Remove debugging code

8a341d1

chore: change the style

bfe3d9b

Merge pull request #29 from n132/dev

c65dff1

Dev

refactor(oss-fuzz): moved constant variables to arvo_utils.py

34bcf17

refactor(arvo_data): using tuple for constant no_operation

0a130d8

refactor(oss-fuzz): move project specific hacks to hacks folder and a…

3590675

…pply styling

Merge branch 'main' into ARVO-OSS-Fuzz

9ef019e

fix(data-analysis): accidental push

b0298c4

fix(ignore): data analysis added

d7ff392

079035 pushed a commit to 079035/oss-fuzz that referenced this pull request Aug 29, 2025

Add Arvo fuzzing infrastructure

b7297ca

This adds fuzzing support for Arvo under the experimental contrib directory. Original work from: n132/ARVO#6

This was referenced Aug 29, 2025

Add Arvo fuzzing infrastructure google/oss-fuzz#13886

Closed

Add ARVO Contribution google/oss-fuzz#13897

Merged

079035 force-pushed the ARVO-OSS-Fuzz branch from d5e30da to d7ff392 Compare August 30, 2025 23:52

Merge branch 'main' into ARVO-OSS-Fuzz

82010a5

Conversation

n132 commented May 13, 2025

Uh oh!

oliverchang left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

n132 commented May 14, 2025

Uh oh!

n132 commented May 15, 2025

Uh oh!

oliverchang left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

079035 commented Aug 31, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

oliverchang left a comment •

edited

Loading