DO NOT MERGE [WIP]

[ci skip]

Signed-off-by: Christian Göttsche <[email protected]>

.gitignore

@@ -25,3 +25,8 @@ cscope.*
 .*.swp
 # Failsafes
 !.gitignore
+
+/corpus_dir/
+/out/
+/DESTDIR/
+/fuzz-*.log

checkpolicy/fuzz/checkpolicy-fuzzer.c

@@ -120,6 +120,19 @@ static int read_source_policy(policydb_t *p, const uint8_t *data, size_t size)
  return 0;
 }
 
+static int check_level(hashtab_key_t key, hashtab_datum_t datum, void *arg __attribute__ ((unused)))
+{
+ const level_datum_t *levdatum = (level_datum_t *) datum;
+
+ if (!levdatum->isalias && !levdatum->defined) {
+ fprintf(stderr,
+ "Error: sensitivity %s was not used in a level definition!\n",
+ key);
+ abort();
+ }
+ return 0;
+}
+
 static int write_binary_policy(policydb_t *p, FILE *outfp)
 {
  struct policy_file pf;
@@ -170,6 +183,8 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
  if (read_source_policy(&parsepolicydb, data, size))
  goto exit;
 
+ (void) hashtab_map(parsepolicydb.p_levels.table, check_level, NULL);
+
  if (hierarchy_check_constraints(NULL, &parsepolicydb))
  goto exit;
 

scripts/oss-fuzz.sh

@@ -32,10 +32,10 @@ SANITIZER=${SANITIZER:-address}
 flags="-O1 -fno-omit-frame-pointer -gline-tables-only -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fsanitize=$SANITIZER -fsanitize=fuzzer-no-link"
 
 export CC=${CC:-clang}
-export CFLAGS="${CFLAGS:-$flags} -I$DESTDIR/usr/include -D_GNU_SOURCE -D_FILE_OFFSET_BITS=64"
+export CFLAGS="${CFLAGS:-$flags} -I$DESTDIR/usr/include -D_GNU_SOURCE -D_FILE_OFFSET_BITS=64 -Wall -Wextra -Wfloat-equal -Winit-self -Wmissing-format-attribute -Wmissing-noreturn -Wnull-dereference -Wpointer-arith -Wshadow -Wstrict-prototypes -Wundef -Wunused -Wwrite-strings"
 
 export CXX=${CXX:-clang++}
-export CXXFLAGS=${CXXFLAGS:-$flags}
+export CXXFLAGS="${CXXFLAGS:-$flags} -Wall -Wextra"
 
 export OUT=${OUT:-$(pwd)/out}
 mkdir -p "$OUT"