Add ARVO Contribution #13897
Add ARVO Contribution #13897
Conversation
This adds fuzzing support for Arvo under the experimental contrib directory.
|
This branch is ready for further review. Thanks @oliverchang ! |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| # ARVO Implementation: https://github.com/n132/ARVO | ||
| # Neil — May 5, 2025 — Seattle, USA | ||
| # Jordi — July 30, 2025 | ||
| """ARVO reproducer module. |
There was a problem hiding this comment.
I think I saw ARVO in the context of various automated repair benchmarks so just out of curiosity I wonder whether the plan is to produce artifacts by analogy with things like https://github.com/n132/ARVO-Meta/releases/download/v2.0.0/arvo.db and the environments it links to on the OSS-Fuzz side eventually or is it going to be the part reproducing issues only integrated into OSS-Fuzz somehow?
There was a problem hiding this comment.
Thanks for the question.
The whole ARVO Infra involves other work supports massive reproducing and patch locating: locate the patch commit for each vulnerability, keep it running for several month, and finally generate arvo.db. Those parts (locator, dataset management, cache management) are not included in this PR.
The PR is the first core part of ARVO (reproducer): after meging this feature, OSS-Fuzz can reproduce/recompile arbitrary reproducible issue on its vulnerable/fixed version. It's our first step to merge ARVO features to OSS-Fuzz and we'll discuss with OSS-Fuzz team about the other components of ARVO.
"Add ARVO fuzzing infrastructure
This adds ARVO under the experimental contrib directory.
Original work from: n132/ARVO#6
Paper: https://arxiv.org/abs/2408.02153"