On Thu, 05 Jun 2025 13:35:09 +0200, Ahmad Fatoum wrote:
> We have a number of security-sensitive parsers in barebox that process
> untrusted input, even in secure boot systems, e.g. the FIT parser, but
> also the partition parser.
>
> This series adds fuzzing tests for a number of these parsers based on
> libfuzzer.
>
> [...]
Applied, thanks!
[01/21] pbl: add provision for architectures without piggy loader
https://git.pengutronix.de/cgit/barebox/commit/?id=f188bd7651d7 (link
may not be stable)
[02/21] firmware: make Layerscape FMan firmware proper-only
https://git.pengutronix.de/cgit/barebox/commit/?id=095a7670a274 (link
may not be stable)
[03/21] mci: sdhci: support compiling common SDHCI code for sandbox PBL
https://git.pengutronix.de/cgit/barebox/commit/?id=de9d003b5347 (link
may not be stable)
[04/21] kbuild: define and use more generic symlink command
https://git.pengutronix.de/cgit/barebox/commit/?id=125b9f671a99 (link
may not be stable)
[05/21] kbuild: collect compatibility symlink creation in symlink-y
https://git.pengutronix.de/cgit/barebox/commit/?id=a1f893cc16e6 (link
may not be stable)
[06/21] kbuild: allow customizing barebox proper binary
https://git.pengutronix.de/cgit/barebox/commit/?id=fb2b03c00323 (link
may not be stable)
[07/21] sandbox: make available all CONFIG_ symbols to OS glue code
https://git.pengutronix.de/cgit/barebox/commit/?id=30047fe2da73 (link
may not be stable)
[08/21] sandbox: switch to using PBL
https://git.pengutronix.de/cgit/barebox/commit/?id=2aba0017c95a (link
may not be stable)
[09/21] kbuild: populate non-host CXX variables
https://git.pengutronix.de/cgit/barebox/commit/?id=f478c579a65b (link
may not be stable)
[10/21] string: add fortify source support
https://git.pengutronix.de/cgit/barebox/commit/?id=4aaaed53fec4 (link
may not be stable)
[11/21] sandbox: populate UNAME_M variable
https://git.pengutronix.de/cgit/barebox/commit/?id=aeed44d3d083 (link
may not be stable)
[12/21] Add fuzzing infrastructure
https://git.pengutronix.de/cgit/barebox/commit/?id=3e0963489879 (link
may not be stable)
[13/21] filetype: add fuzz target
https://git.pengutronix.de/cgit/barebox/commit/?id=08b8143838ea (link
may not be stable)
[14/21] block: mark underlying cdev with DEVFS_IS_BLOCK_DEV
https://git.pengutronix.de/cgit/barebox/commit/?id=a6410cfa9aff (link
may not be stable)
[15/21] block: add lightweight ramdisk support
https://git.pengutronix.de/cgit/barebox/commit/?id=cf4b60803b61 (link
may not be stable)
[16/21] fuzz: add support for passing fuzz data as r/o ramdisk
https://git.pengutronix.de/cgit/barebox/commit/?id=323b4062fca3 (link
may not be stable)
[17/21] partitions: add partition table parser fuzz target
https://git.pengutronix.de/cgit/barebox/commit/?id=532358a9f4f5 (link
may not be stable)
[18/21] fdt: add fuzz test
https://git.pengutronix.de/cgit/barebox/commit/?id=68d5c01480d2 (link
may not be stable)
[19/21] fit: add fuzz test
https://git.pengutronix.de/cgit/barebox/commit/?id=30c0d7117909 (link
may not be stable)
[20/21] Documentation: add LLVM libfuzzer documentation
https://git.pengutronix.de/cgit/barebox/commit/?id=46a839f7c848 (link
may not be stable)
[21/21] sandbox: add support for coverage info generation
https://git.pengutronix.de/cgit/barebox/commit/?id=4db442561229 (link
may not be stable)
Best regards,
--
Sascha Hauer <s.ha...@pengutronix.de>
