[qemu-xen staging] gitlab-ci.yml: Add oss-fuzz build tests

[patchbot@xxxxxxx]

commit 48eac1019769ebc4647ba380a828c25d8014be37
Author:     Alexander Bulekov <alxndr@xxxxxx>
AuthorDate: Thu Jul 16 12:33:30 2020 -0400
Commit:     Thomas Huth <thuth@xxxxxxxxxx>
CommitDate: Tue Jul 21 07:21:54 2020 +0200

    gitlab-ci.yml: Add oss-fuzz build tests
    
    This tries to build and run the fuzzers with the same build-script used
    by oss-fuzz. This doesn't guarantee that the builds on oss-fuzz will
    also succeed, since oss-fuzz provides its own compiler and fuzzer vars,
    but it can catch changes that are not compatible with the the
    ./scripts/oss-fuzz/build.sh script.
    The strange way of finding fuzzer binaries stems from the method used by
    oss-fuzz:
    
https://github.com/google/oss-fuzz/blob/master/infra/base-images/base-runner/targets_list
    
    Signed-off-by: Alexander Bulekov <alxndr@xxxxxx>
    Message-Id: <20200720073223.22945-1-thuth@xxxxxxxxxx>
    [thuth: Tweak the "script" to make it work, exclude slirp test, etc.]
    Signed-off-by: Thomas Huth <thuth@xxxxxxxxxx>
---
 .gitlab-ci.yml | 22 ++++++++++------------
 1 file changed, 10 insertions(+), 12 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 41597c3603..362e5ee755 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -164,22 +164,20 @@ build-clang:
       ppc-softmmu s390x-softmmu arm-linux-user
     MAKE_CHECK_ARGS: check
 
-build-fuzzer:
+build-oss-fuzz:
   <<: *native_build_job_definition
   variables:
     IMAGE: fedora
   script:
-    - mkdir build
-    - cd build
-    - ../configure --cc=clang --cxx=clang++ --enable-fuzzing
-                   --enable-sanitizers --target-list=x86_64-softmmu
-    - make -j"$JOBS" all check-build x86_64-softmmu/fuzz
-    - make check
-    - for fuzzer in i440fx-qos-fork-fuzz i440fx-qos-noreset-fuzz
-        i440fx-qtest-reboot-fuzz virtio-scsi-flags-fuzz virtio-scsi-fuzz ; do
-          echo Testing ${fuzzer} ... ;
-          x86_64-softmmu/qemu-fuzz-x86_64 --fuzz-target=${fuzzer} -runs=1000
-            || exit 1 ;
+    - mkdir build-oss-fuzz
+    - CC="clang" CXX="clang++" CFLAGS="-fsanitize=address"
+      ./scripts/oss-fuzz/build.sh
+    - for fuzzer in $(find ./build-oss-fuzz/DEST_DIR/ -executable -type f
+                      | grep -v slirp); do
+        grep "LLVMFuzzerTestOneInput" ${fuzzer} > /dev/null 2>&1 || continue ;
+        echo Testing ${fuzzer} ... ;
+        ASAN_OPTIONS="fast_unwind_on_malloc=0"
+         "${fuzzer}" -runs=1000 -seed=1 || exit 1 ;
       done
 
 build-tci:
--
generated by git-patchbot for /home/xen/git/qemu-xen.git#staging