This is an archive of the discontinued Mercurial Phabricator instance.

Differential D5092

fuzz: try *even harder* to prevent Python from looking up usernames
ClosedPublic

Authored by durin42 on Oct 14 2018, 4:11 AM.

Details

Reviewers
None
Group Reviewers
hg-reviewers
Commits
rHG170cd2a5a1da: fuzz: try *even harder* to prevent Python from looking up usernames

Diff Detail

Repository
rHG Mercurial
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.

Event Timeline

durin42 created this revision.Oct 14 2018, 4:11 AM
Closed by commit rHG170cd2a5a1da: fuzz: try *even harder* to prevent Python from looking up usernames (authored by durin42). · Explain WhyOct 14 2018, 5:28 AM
This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

PathPackages
Mcontrib/fuzz/manifest.cc (2 lines)

Diff 12109

contrib/fuzz/manifest.cc

getcwd(wd, 8192); getcwd(wd, 8192);
pypath = std::string(wd) + subdir; pypath = std::string(wd) + subdir;
} else { } else {
pypath = selfpath.substr(0, pos) + subdir; pypath = selfpath.substr(0, pos) + subdir;
} }
strncpy(cpypath, pypath.c_str(), pypath.size()); strncpy(cpypath, pypath.c_str(), pypath.size());
setenv("PYTHONPATH", cpypath, 1); setenv("PYTHONPATH", cpypath, 1);
setenv("PYTHONNOUSERSITE", "1", 1); setenv("PYTHONNOUSERSITE", "1", 1);
/* prevent Python from looking up users in the fuzz environment */
setenv("PYTHONUSERBASE", cpypath, 1);
Py_SetPythonHome(cpypath); Py_SetPythonHome(cpypath);
Py_InitializeEx(0); Py_InitializeEx(0);
return 0; return 0;
} }
int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size)
{ {
initparsers(); initparsers();