6 files changed, 228 insertions, 0 deletions

diff --git a/.travis/build-linux-clang b/.travis/build-linux-clang
new file mode 100644
index 0000000..8938461
--- /dev/null
+++ b/.travis/build-linux-clang
@@ -0,0 +1,22 @@
+#!/bin/sh -eux
+
+${CC} --version
+
+# Check exports.
+(cd src && ./diff_exports.sh)
+
+# Build and install libcbor.
+git clone git://github.com/pjk/libcbor
+cd libcbor
+git checkout v0.5.0
+mkdir build
+(cd build && cmake ..)
+make -C build
+sudo make -C build install
+cd ..
+
+# Build, analyze, and install libfido2.
+mkdir build
+(cd build && scan-build cmake -DCMAKE_BUILD_TYPE=Debug ..)
+scan-build --status-bugs make -C build
+sudo make -C build install
diff --git a/.travis/build-linux-gcc b/.travis/build-linux-gcc
new file mode 100644
index 0000000..be1e0a9
--- /dev/null
+++ b/.travis/build-linux-gcc
@@ -0,0 +1,19 @@
+#!/bin/sh -eux
+
+${CC} --version
+
+# Build and install libcbor.
+git clone git://github.com/pjk/libcbor
+cd libcbor
+git checkout v0.5.0
+mkdir build
+(cd build && cmake ..)
+make -C build
+sudo make -C build install
+cd ..
+
+# Build and install libfido2.
+mkdir build
+(cd build && cmake -DCMAKE_BUILD_TYPE=Debug ..)
+make -C build
+sudo make -C build install
diff --git a/.travis/build-linux-mingw b/.travis/build-linux-mingw
new file mode 100644
index 0000000..c88ddca
--- /dev/null
+++ b/.travis/build-linux-mingw
@@ -0,0 +1,47 @@
+#!/bin/sh -eux
+
+# XXX defining CC and cross-compiling confuses OpenSSL's build.
+unset CC
+
+sudo mkdir /fakeroot
+sudo chmod 755 /fakeroot
+
+cat << EOF > /tmp/mingw.cmake
+SET(CMAKE_SYSTEM_NAME Windows)
+SET(CMAKE_C_COMPILER i686-w64-mingw32-gcc)
+SET(CMAKE_CXX_COMPILER i686-w64-mingw32-g++)
+SET(CMAKE_RC_COMPILER i686-w64-mingw32-windres)
+SET(CMAKE_FIND_ROOT_PATH /fakeroot)
+SET(CMAKE_FIND_ROOT_PATH_MODE_PROGRAM NEVER)
+SET(CMAKE_FIND_ROOT_PATH_MODE_LIBRARY ONLY)
+SET(CMAKE_FIND_ROOT_PATH_MODE_INCLUDE ONLY)
+EOF
+
+# Build and install libcbor.
+git clone git://github.com/pjk/libcbor
+cd libcbor
+git checkout v0.5.0
+mkdir build
+(cd build && cmake -DCMAKE_TOOLCHAIN_FILE=/tmp/mingw.cmake \
+        -DCMAKE_INSTALL_PREFIX=/fakeroot ..)
+make -C build
+sudo make -C build install
+cd ..
+
+# Build and install OpenSSL 1.1.0j.
+git clone git://github.com/openssl/openssl
+cd openssl
+git checkout OpenSSL_1_1_0j
+./Configure mingw --prefix=/fakeroot --openssldir=/fakeroot/openssl \
+        --cross-compile-prefix=i686-w64-mingw32-
+make
+sudo make install_sw
+cd ..
+
+# Build and install libfido2.
+export PKG_CONFIG_PATH=/fakeroot/lib/pkgconfig
+mkdir build
+(cd build && cmake -DCMAKE_TOOLCHAIN_FILE=/tmp/mingw.cmake \
+        -DCMAKE_BUILD_TYPE=Debug -DCMAKE_INSTALL_PREFIX=/fakeroot ..)
+make -C build
+sudo make -C build install
diff --git a/.travis/build-osx-clang b/.travis/build-osx-clang
new file mode 100644
index 0000000..69a784c
--- /dev/null
+++ b/.travis/build-osx-clang
@@ -0,0 +1,24 @@
+#!/bin/sh -eux
+
+${CC} --version
+
+# Build and install libcbor.
+git clone git://github.com/pjk/libcbor
+cd libcbor
+git checkout v0.5.0
+mkdir build
+(cd build && cmake ..)
+make -C build
+sudo make -C build install
+cd ..
+
+# Install mandoc from Homebrew.
+brew install mandoc
+
+# Build and install libfido2.
+export PKG_CONFIG_PATH=/usr/local/opt/openssl@1.1/lib/pkgconfig
+mkdir build
+(cd build && cmake -DCMAKE_BUILD_TYPE=Debug ..)
+make -C build
+make -C build man_symlink_html
+sudo make -C build install
diff --git a/.travis/fuzz-linux-asan b/.travis/fuzz-linux-asan
new file mode 100644
index 0000000..0a0aebb
--- /dev/null
+++ b/.travis/fuzz-linux-asan
@@ -0,0 +1,58 @@
+#!/bin/sh -eux
+
+${CC} --version
+
+FAKEROOT=/fakeroot
+sudo mkdir ${FAKEROOT}
+sudo chmod 755 ${FAKEROOT}
+
+# Build and install libcbor.
+git clone git://github.com/pjk/libcbor
+cd libcbor
+patch -p0 < ../fuzz/README
+mkdir build
+cd build
+cmake -DCMAKE_C_FLAGS_DEBUG="-g2 -fno-omit-frame-pointer" \
+        -DCMAKE_C_COMPILER=clang -DCMAKE_BUILD_TYPE=Debug \
+        -DCMAKE_INSTALL_PREFIX=${FAKEROOT} -DSANITIZE=ON \
+        -DCMAKE_INSTALL_LIBDIR=lib ..
+make
+sudo make install
+cd ../..
+
+# Build and install OpenSSL 1.1.1b.
+git clone git://github.com/openssl/openssl
+cd openssl
+git checkout OpenSSL_1_1_1b
+./Configure linux-x86_64-clang enable-asan --prefix=${FAKEROOT} \
+         --openssldir=${FAKEROOT}/openssl
+make clean
+make
+sudo make install_sw
+cd ..
+
+# Build libfido2.
+mkdir build
+cd build
+export PKG_CONFIG_PATH=/fakeroot/lib/pkgconfig
+cmake -DFUZZ=1 -DLIBFUZZER=1 -DASAN=1 -DUBSAN=1 -DCMAKE_C_COMPILER=clang \
+        -DCRYPTO_INCLUDE_DIRS=${FAKEROOT}/include \
+        -DCRYPTO_LIBRARY_DIRS=${FAKEROOT}/lib \
+        -DCBOR_INCLUDE_DIRS=${FAKEROOT}/include \
+        -DCBOR_LIBRARY_DIRS=${FAKEROOT}/lib \
+        -DCMAKE_BUILD_TYPE=Debug ..
+make
+
+# Fuzz with ASAN.
+mkdir corpus
+tar -C corpus -zxf ../fuzz/corpus.tgz
+fuzz/fuzz_cred -use_value_profile=1 -reload=30 -print_pcs=1 \
+        -print_funcs=30 -timeout=10 -max_len=17408 -runs=1 corpus/fuzz_cred
+fuzz/fuzz_assert -use_value_profile=1 -reload=30 -print_pcs=1 \
+        -print_funcs=30 -timeout=10 -max_len=17408 -runs=1 corpus/fuzz_assert
+fuzz/fuzz_credman -use_value_profile=1 -reload=30 -print_pcs=1 \
+        -print_funcs=30 -timeout=10 -max_len=17408 -runs=1 corpus/fuzz_credman
+fuzz/fuzz_mgmt -use_value_profile=1 -reload=30 -print_pcs=1 \
+        -print_funcs=30 -timeout=10 -max_len=17408 -runs=1 corpus/fuzz_mgmt
+fuzz/fuzz_bio -use_value_profile=1 -reload=30 -print_pcs=1 \
+        -print_funcs=30 -timeout=10 -max_len=17408 -runs=1 corpus/fuzz_bio
diff --git a/.travis/fuzz-linux-msan b/.travis/fuzz-linux-msan
new file mode 100644
index 0000000..fd7b2ac
--- /dev/null
+++ b/.travis/fuzz-linux-msan
@@ -0,0 +1,58 @@
+#!/bin/sh -eux
+
+${CC} --version
+
+FAKEROOT=/fakeroot
+sudo mkdir ${FAKEROOT}
+sudo chmod 755 ${FAKEROOT}
+
+# Build and install libcbor.
+git clone git://github.com/pjk/libcbor
+cd libcbor
+patch -p0 < ../fuzz/README
+mkdir build
+cd build
+cmake -DCMAKE_C_FLAGS_DEBUG="-fsanitize=memory,undefined -g2 -fno-omit-frame-pointer" \
+        -DCMAKE_C_COMPILER=clang -DCMAKE_BUILD_TYPE=Debug \
+        -DCMAKE_INSTALL_PREFIX=${FAKEROOT} -DSANITIZE=OFF \
+        -DCMAKE_INSTALL_LIBDIR=lib ..
+make
+sudo make install
+cd ../..
+
+# Build and install OpenSSL 1.1.1b.
+git clone git://github.com/openssl/openssl
+cd openssl
+git checkout OpenSSL_1_1_1b
+./Configure linux-x86_64-clang enable-msan --prefix=${FAKEROOT} \
+         --openssldir=${FAKEROOT}/openssl
+make clean
+make
+sudo make install_sw
+cd ..
+
+# Build libfido2.
+mkdir build
+cd build
+export PKG_CONFIG_PATH=/fakeroot/lib/pkgconfig
+cmake -DFUZZ=1 -DLIBFUZZER=1 -DMSAN=1 -DUBSAN=1 -DCMAKE_C_COMPILER=clang \
+        -DCRYPTO_INCLUDE_DIRS=${FAKEROOT}/include \
+        -DCRYPTO_LIBRARY_DIRS=${FAKEROOT}/lib \
+        -DCBOR_INCLUDE_DIRS=${FAKEROOT}/include \
+        -DCBOR_LIBRARY_DIRS=${FAKEROOT}/lib \
+        -DCMAKE_BUILD_TYPE=Debug ..
+make
+
+# Fuzz with MSAN.
+mkdir corpus
+tar -C corpus -zxf ../fuzz/corpus.tgz
+fuzz/fuzz_cred -use_value_profile=1 -reload=30 -print_pcs=1 \
+        -print_funcs=30 -timeout=10 -max_len=17408 -runs=1 corpus/fuzz_cred
+fuzz/fuzz_assert -use_value_profile=1 -reload=30 -print_pcs=1 \
+        -print_funcs=30 -timeout=10 -max_len=17408 -runs=1 corpus/fuzz_assert
+fuzz/fuzz_credman -use_value_profile=1 -reload=30 -print_pcs=1 \
+        -print_funcs=30 -timeout=10 -max_len=17408 -runs=1 corpus/fuzz_credman
+fuzz/fuzz_mgmt -use_value_profile=1 -reload=30 -print_pcs=1 \
+        -print_funcs=30 -timeout=10 -max_len=17408 -runs=1 corpus/fuzz_mgmt
+fuzz/fuzz_bio -use_value_profile=1 -reload=30 -print_pcs=1 \
+        -print_funcs=30 -timeout=10 -max_len=17408 -runs=1 corpus/fuzz_bio