Re: [PATCH 00/21] sandbox: add libfuzzer-based fuzzing

[Sascha Hauer <s.hauer@pengutronix.de>]

On Thu, 05 Jun 2025 13:35:09 +0200, Ahmad Fatoum wrote:
> We have a number of security-sensitive parsers in barebox that process
> untrusted input, even in secure boot systems, e.g. the FIT parser, but
> also the partition parser.
> 
> This series adds fuzzing tests for a number of these parsers based on
> libfuzzer.
> 
> [...]

Applied, thanks!

[01/21] pbl: add provision for architectures without piggy loader
        https://git.pengutronix.de/cgit/barebox/commit/?id=f188bd7651d7 (link may not be stable)
[02/21] firmware: make Layerscape FMan firmware proper-only
        https://git.pengutronix.de/cgit/barebox/commit/?id=095a7670a274 (link may not be stable)
[03/21] mci: sdhci: support compiling common SDHCI code for sandbox PBL
        https://git.pengutronix.de/cgit/barebox/commit/?id=de9d003b5347 (link may not be stable)
[04/21] kbuild: define and use more generic symlink command
        https://git.pengutronix.de/cgit/barebox/commit/?id=125b9f671a99 (link may not be stable)
[05/21] kbuild: collect compatibility symlink creation in symlink-y
        https://git.pengutronix.de/cgit/barebox/commit/?id=a1f893cc16e6 (link may not be stable)
[06/21] kbuild: allow customizing barebox proper binary
        https://git.pengutronix.de/cgit/barebox/commit/?id=fb2b03c00323 (link may not be stable)
[07/21] sandbox: make available all CONFIG_ symbols to OS glue code
        https://git.pengutronix.de/cgit/barebox/commit/?id=30047fe2da73 (link may not be stable)
[08/21] sandbox: switch to using PBL
        https://git.pengutronix.de/cgit/barebox/commit/?id=2aba0017c95a (link may not be stable)
[09/21] kbuild: populate non-host CXX variables
        https://git.pengutronix.de/cgit/barebox/commit/?id=f478c579a65b (link may not be stable)
[10/21] string: add fortify source support
        https://git.pengutronix.de/cgit/barebox/commit/?id=4aaaed53fec4 (link may not be stable)
[11/21] sandbox: populate UNAME_M variable
        https://git.pengutronix.de/cgit/barebox/commit/?id=aeed44d3d083 (link may not be stable)
[12/21] Add fuzzing infrastructure
        https://git.pengutronix.de/cgit/barebox/commit/?id=3e0963489879 (link may not be stable)
[13/21] filetype: add fuzz target
        https://git.pengutronix.de/cgit/barebox/commit/?id=08b8143838ea (link may not be stable)
[14/21] block: mark underlying cdev with DEVFS_IS_BLOCK_DEV
        https://git.pengutronix.de/cgit/barebox/commit/?id=a6410cfa9aff (link may not be stable)
[15/21] block: add lightweight ramdisk support
        https://git.pengutronix.de/cgit/barebox/commit/?id=cf4b60803b61 (link may not be stable)
[16/21] fuzz: add support for passing fuzz data as r/o ramdisk
        https://git.pengutronix.de/cgit/barebox/commit/?id=323b4062fca3 (link may not be stable)
[17/21] partitions: add partition table parser fuzz target
        https://git.pengutronix.de/cgit/barebox/commit/?id=532358a9f4f5 (link may not be stable)
[18/21] fdt: add fuzz test
        https://git.pengutronix.de/cgit/barebox/commit/?id=68d5c01480d2 (link may not be stable)
[19/21] fit: add fuzz test
        https://git.pengutronix.de/cgit/barebox/commit/?id=30c0d7117909 (link may not be stable)
[20/21] Documentation: add LLVM libfuzzer documentation
        https://git.pengutronix.de/cgit/barebox/commit/?id=46a839f7c848 (link may not be stable)
[21/21] sandbox: add support for coverage info generation
        https://git.pengutronix.de/cgit/barebox/commit/?id=4db442561229 (link may not be stable)

Best regards,
-- 
Sascha Hauer <s.hauer@pengutronix.de>