Skip to content

Add h2o cve #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
sciencemanx wants to merge 21 commits into from
Closed

Add h2o cve #2

Show file tree
Hide file tree
Changes from 12 commits
Commits
Show all changes
21 commits
Select commit Hold shift + click to select a range
7336e67
Add basic h2o mayhem target
sciencemanx Jun 1, 2020
d1ab6b2
Add remaining fuzz targets to h2o
sciencemanx Jun 2, 2020
c4e07c0
Add base image name and fix standalone cmd path
sciencemanx Jun 2, 2020
439d55d
Remove alternate fuzzers (just keep h2o binary)
sciencemanx Jun 3, 2020
1a8c4f2
Add starting corpus and crashing poc
sciencemanx Jun 3, 2020
0bf53fd
Simplify dockerfile
sciencemanx Jun 3, 2020
90c3578
Add readme for h2o
sciencemanx Jun 3, 2020
54eea77
Use multistage build for docker image
sciencemanx Jun 3, 2020
8675655
Change mayhemfile baseimage to use forallsecure dockerhub
sciencemanx Jun 3, 2020
cd708a5
Move push logic from docker_publish to external script in .github
sciencemanx Jun 3, 2020
9228e5e
Add h2o cve to docker_publish.yml
sciencemanx Jun 3, 2020
eb47ebe
Add shebang and set ex to push.sh
sciencemanx Jun 3, 2020
d9f1113
Remove now-unused modified CMakeLists.txt
sciencemanx Jun 3, 2020
5db463b
Fix indentation in docker_publish
sciencemanx Jun 3, 2020
b18d3ee
Remove unnecessary env specification in mayhemfile
sciencemanx Jun 3, 2020
4519c28
Update ubuntu base image to specify version tag
sciencemanx Jun 3, 2020
86d82b5
Improve readme intro with more detail (thanks david)
sciencemanx Jun 3, 2020
be1fadc
Add credit to Marlies Ruck to readme
sciencemanx Jun 3, 2020
597a7d3
Update note markdown to match formatting
sciencemanx Jun 3, 2020
1adb6e3
Remove envtest string from project name in mayhemfile
sciencemanx Jun 5, 2020
65d4fd9
Merge branch 'master' into add-h2o-cve
sciencemanx Jun 8, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 24 additions & 0 deletions .github/push.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
#! /bin/bash
Comment thread
sciencemanx marked this conversation as resolved.
Outdated
# Pushes image to logged in docker registry (tagged with github ref)

set -xe

IMAGE_ID=$1

# Change all uppercase to lowercase
IMAGE_ID=$(echo $IMAGE_ID | tr '[A-Z]' '[a-z]')

# Strip git ref prefix from version
VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')

# Strip "v" prefix from tag name
[[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION | sed -e 's/^v//')

# Use docker `latest` tag convention
[ "$VERSION" == "master" ] && VERSION=latest

echo IMAGE_ID=$IMAGE_ID
echo VERSION=$VERSION

docker tag $IMAGE_ID $IMAGE_ID:$VERSION
docker push $IMAGE_ID:$VERSION
55 changes: 13 additions & 42 deletions .github/workflows/docker_publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: Published on Dockerhub
name: Publish on Dockerhub

on:
push:
Expand All @@ -7,11 +7,8 @@ on:
branches: [ master ]

jobs:

openssl-cve-2014-0160:

runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v2
- name: Build the Docker image
Expand All @@ -21,29 +18,9 @@ jobs:
run: echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u ${{ secrets.DOCKER_USERNAME }} --password-stdin

- name: Push the docker image
run: |
IMAGE_ID=forallsecure/openssl-cve-2014-0160

# Change all uppercase to lowercase
IMAGE_ID=$(echo $IMAGE_ID | tr '[A-Z]' '[a-z]')

# Strip git ref prefix from version
VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')

# Strip "v" prefix from tag name
[[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION | sed -e 's/^v//')

# Use docker `latest` tag convention
[ "$VERSION" == "master" ] && VERSION=latest

echo IMAGE_ID=$IMAGE_ID
echo VERSION=$VERSION

docker tag $IMAGE_ID $IMAGE_ID:$VERSION
docker push $IMAGE_ID:$VERSION
run: ./.github/push.sh forallsecure/openssl-cve-2014-0160

cereal-cve-2020-11104-11105:

runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
Expand All @@ -54,23 +31,17 @@ jobs:
run: echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u ${{ secrets.DOCKER_USERNAME }} --password-stdin

- name: Push the docker image
run: |
IMAGE_ID=forallsecure/cereal-cve-2020-11104-11105

# Change all uppercase to lowercase
IMAGE_ID=$(echo $IMAGE_ID | tr '[A-Z]' '[a-z]')

# Strip git ref prefix from version
VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')

# Strip "v" prefix from tag name
[[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION | sed -e 's/^v//')
run: ./.github/push.sh forallsecure/cereal-cve-2020-11104-11105

# Use docker `latest` tag convention
[ "$VERSION" == "master" ] && VERSION=latest
h2o-cve-2018-0608:
Comment thread
sciencemanx marked this conversation as resolved.
Outdated
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: Build the Docker image
run: ./mayhemit.sh --build h2o-cve-2018-0608

echo IMAGE_ID=$IMAGE_ID
echo VERSION=$VERSION
- name: Log into the registry
run: echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u ${{ secrets.DOCKER_USERNAME }} --password-stdin

docker tag $IMAGE_ID $IMAGE_ID:$VERSION
docker push $IMAGE_ID:$VERSION
- name: Push the docker image
run: ./.github/push.sh forallsecure/h2o-cve-2018-0608
Loading