63 Commits

Author SHA1 Message Date
bmc-msft
52f83b5b26
add EventScalesetResizeScheduled (#1047) 2021-07-07 14:15:26 -04:00
bmc-msft
a43f693761
Provide minimized stack lines (#993)
Using the function name only method for minimization results in a
function with two different malloc related bugs to get bucketed
together.

This provides a minimized stack without function address of stack depth.

For entries without source information, such as:
`# 34 0xf19113f in ChromeMain+0x13f (C:\\clusterfuzz\\bot\\builds\\chrome-test-builds_media_win32-release\\revisions\\asan-win32-release-335593\\chrome_child.dll+0x113f)`
users will see this:
`ChromeMain+0x13f`

For entries with source information, such as:
`# 20 0x58bd3bb in v8::internal::Builtin_Impl_HandleApiCall(v8::internal::BuiltinArguments, v8::internal::Isolate*) ../../v8/src/builtins/builtins-api.cc:137:5`
users will see this:
`v8::internal::Builtin_Impl_HandleApiCall(v8::internal::BuiltinArguments, v8::internal::Isolate*) builtins-api.cc:137:5`
2021-07-01 21:14:31 +00:00
bmc-msft
29dda54b83
instance wide configuration (#1010)
TODO:
* [x] add setting initial set of admins during deployment
2021-06-30 21:13:58 +00:00
bmc-msft
0d709ed5f8
fix markdown link (#989) 2021-06-14 16:40:04 -04:00
Cheick Keita
93cfedbd2e
fix scaleset identity name in the documentation (#987) 2021-06-14 16:10:14 -04:00
Joe Ranweiler
2c72bd590f
Add generic coverage task (#763)
**Todo:**
- [x] Finalize format for coverage file(s)
- [x] Add service support
- [x] Integration test
- [x] Merge #926 
- [x] Merge #929
2021-06-03 23:36:00 +00:00
bmc-msft
a4bb670fb2
add proxy_state_updated events (#908) 2021-05-21 12:47:54 -04:00
nharper285
2f81c44f01
Refactoring proxy lifetime to only shutdown when proxy is out-of-date. (#839)
## Summary of the Pull Request

_What is this about?_
We'd like to refactor the proxy lifecycle to only delete when the proxy is out-of-date - i.e. when the proxy is older than 7 days or a mismatched version. I've changed two files, proxy.py and timer_daily\init.py to check for the version and timestamp before stopping a live proxy. 

## PR Checklist
* [ ] Applies to work item: #xxx
* [ ] CLA signed. If not, go over [here](https://cla.opensource.microsoft.com/microsoft/onefuzz) and sign the CLI.
* [ ] Tests added/passed
* [ ] Requires documentation to be updated
* [x] I've discussed this with core contributors already. If not checked, I'm ready to accept this work might be rejected in favor of a different grand plan. Issue number where discussion took place: #xxx

## Info on Pull Request

_What does this include?_
Changes to two files: 
proxy.py: 
- get_or_create() edited to check if timestamp is >7 days.
- Created is_outdated() to check version and timestamp for out-of-date proxy. 
timer_daily/init.py
- Proxy check now includes is_outdated() before determining if a proxy should be shutdown. 

## Validation Steps Performed
Deploying test instance to determine if proxy lives past a single day.
2021-05-20 14:33:29 +00:00
bmc-msft
2b67c7b02f
add setup_dir to generator task (#901)
fixes #848
2021-05-19 16:10:13 +00:00
Cheick Keita
3c0f6f56a7
Azure AD entities description (#896)
Added a description of the configuration of azure AD entities

closes #875
2021-05-17 12:44:45 +00:00
bmc-msft
cb5e786bcd
add event for scaleset state updates (#882)
This moves all scaleset state updates through `Scaleset.set_state` and adds a new event EventScalesetStateUpdated.
2021-05-13 21:23:02 +00:00
bmc-msft
b599aea5cd
allow extra fields in Events (#805) 2021-04-14 13:09:21 -04:00
bmc-msft
46b8bdccbc
add TaskConfig to crash_reported and regression_reported events (#793)
resolves #757 and #758
2021-04-13 10:24:12 +00:00
bmc-msft
3096f99e86
enable using ephemeral disks by default (#461) 2021-03-30 18:48:44 -04:00
bmc-msft
e80b658a1a
expose new minimized stack fields in the crash report model (#719) 2021-03-23 12:29:08 -04:00
bmc-msft
516b1e000e
expose minimized_stack_depth functionality in the CLI/API (#715) 2021-03-23 10:09:34 -04:00
bmc-msft
e38281face
rename salvo telemetry to "upcoming feature" (#693)
Until salvo is released, this should be "upcoming feature" to avoid questions.
2021-03-19 14:59:08 +00:00
bmc-msft
769b614367
add git-bisect howto (#691) 2021-03-19 14:26:20 +00:00
bmc-msft
6e60a8cf10
add regression testing tasks (#664) 2021-03-18 15:37:19 -04:00
bmc-msft
ff3e80fca5
Add salvo telemetry (#619)
Adds telemetry fields for Salvo.

This PR should not be merged until approved by CELA.

Note: This PR includes #586
2021-03-12 23:39:42 +00:00
bmc-msft
19a3805130
include version and software role to Microsoft collected telemetry (#586)
NOTE: This should not be merged until the privacy review has completed.

Ref: reltrack-4150
2021-03-12 14:50:15 +00:00
bmc-msft
07f7f6fa48
Add input file sha256 placeholder (#641) 2021-03-11 20:27:58 -05:00
Joe Ranweiler
67435e7883
Simplify module/symbol filter definition format, impl (#628)
Update the filter rule format and implementation to be simpler and user-predictable. In particular, we remove an accidental dependence of rule application on hash map iteration order.
2021-03-09 12:45:01 -08:00
bmc-msft
0a3812d8bc
Add job stopped task info (#648) 2021-03-09 10:06:06 -05:00
bmc-msft
157a14d003
fix markdown link error (#637) 2021-03-05 19:20:00 -05:00
bmc-msft
1c09caedc5
add howto guide to understand the libfuzzer_coverage task (#631) 2021-03-05 19:21:11 +00:00
bmc-msft
7fc725d012
add non-x86_64 architecture libfuzzer target support using qemu-user (#600) 2021-03-03 19:06:50 -05:00
nharper285
ec33531870
Add Threat Model documentation (#482)
This PR includes a [Threat Model](https://aka.ms/tmt) for OneFuzz.
2021-03-03 19:30:56 +00:00
bmc-msft
4489036d9f
add node & task heartbeat events (#621)
This adds node & task heartbeats and makes the event data available as a structured data in the logs.
2021-03-02 22:04:39 +00:00
bmc-msft
e3c73d7a10
Update command variable expansion (#561)
* Documents `crashes_account` and `crashes_container`
* Adds `reports_dir` and support for `unique_reports`, `reports`, and `no_repro` containers to the generic analysis task
* Adds `microsoft_telemetry_key` and `instance_telemetry_key` to generic supervisor, generator, and analysis tasks
2021-02-26 20:58:09 +00:00
bmc-msft
6a049db3a3
Renames application insights keys to be more clear (#587)
* renames `telemetry_key` to `microsoft_telemetry_key`
* renames `instrumentation_key` to `instance_telemetry_key`
* renames `can_share` to `can_share_with_microsoft`
* renames the `applicationinsights-rs` instances to `internal` and `microsoft` respective of the keys used during construction.

This clarifies the underlying use of Application Insights keys and uses struct tuple to ensure the keys are used correctly via rust's type checker.
2021-02-26 17:04:49 +00:00
bmc-msft
305c23a4d9
add instance information to webhooks (#577)
Fixes #574
2021-02-19 21:00:51 +00:00
bmc-msft
4992b494f1
add task config to all task events (#580) 2021-02-19 14:10:48 -05:00
bmc-msft
933fe6850c
libfuzzer-dotnet integration (#535) 2021-02-11 17:30:24 -05:00
bmc-msft
bdcab6eb08
handle tokens from x-ms-token-aad-id-token (#531) 2021-02-10 12:41:15 -05:00
bmc-msft
cdfdc2be84
split telemetry into it's own crate (#501)
Splits out telemetry crate such that it can be reused by other components (specifically the proxy-manager) easily.
2021-02-04 14:46:35 +00:00
bmc-msft
5acb59e5b9
Add task_id & job_id to variable expansion (#481)
Fixes #479 

Note, this is built on top of #480
2021-01-29 15:35:59 +00:00
bmc-msft
a46f7b4193
expose supervisor tasks that are fully self-contained fuzzing tasks in the service (#474)
Exposes the functionality added in #454 to the service & CLI.

Fixes #439
2021-01-29 00:01:59 +00:00
bmc-msft
07760bf967
Update expansion documentation to describe nested options as implemented (#475)
This expands the documentation to demonstrate how nested lists are handled in practice, as well as to provide examples for how to deal with the nested list expansion.
2021-01-28 17:12:48 +00:00
nharper285
24685ca8df
Updating Windows Default Image from RS5-Pro to 20H2-Pro (#469)
RS5-Pro is no longer updated in the Azure Marketplace. In order to ensure the Windows 10 VMs are regularly updated, we need to switch the default image to 20H2-Pro, which is regularly maintained.
2021-01-27 13:46:46 +00:00
bmc-msft
165257e989
update python prereqs (#427)
Updates the following libraries in the service:
* azure-core
* azure-functions
* azure-identity
* azure-keyvault-keys
* azure-keyvault-secrets
* azure-mgmt-compute
* azure-mgmt-core
* azure-mgmt-loganalytics
* azure-mgmt-network
* azure-mgmt-resource
* azure-mgmt-storage
* azure-mgmt-subscription
* azure-storage-blob
* azure-storage-queue
* pydantic
* requests
* jsonpatch

Removes the following libraries in the service:
* azure-cli-core
* azure-cli-nspkg
* azure-mgmt-cosmosdb
* azure-servicebus

Updates the following libraries in the CLI:
* requests
* semver
* asciimatics
* pydantic
* tenacity

Updates the following libraries in onefuzztypes:
* pydantic

The primary "legacy" libraries are [azure-graphrbac](https://pypi.org/project/azure-graphrbac/) and azure-cosmosdb-table.  The former has not been updated to use azure-identity yet. The later is being rewritten as [azure-data-tables](https://pypi.org/project/azure-data-tables/), but is still in early beta.
2021-01-25 20:53:40 +00:00
bmc-msft
7e6415b15f
ensure consistency in doc generation by always sorting json keys (#449) 2021-01-21 15:28:11 +00:00
bmc-msft
efaa381899
Add missing prerequisites to the Getting Started guide (#435)
Fixes #434
2021-01-16 09:07:13 +00:00
Cheick Keita
a89065f882
adding {setup_dir} to variable expansion (#417)
## Summary of the Pull Request

Adds a new placeholder {setup_dir} for the setup directory 

## PR Checklist
* [x] Applies to work item: #221
* [x] CLA signed. If not, go over [here](https://cla.opensource.microsoft.com/microsoft/onefuzz) and sign the CLI.
* [x] Requires documentation to be updated
* [x] I've discussed this with core contributors already. If not checked, I'm ready to accept this work might be rejected in favor of a different grand plan. Issue number where discussion took place: #xxx

## Info on Pull Request

_What does this include?_

## Validation Steps Performed

_How does someone test & validate?_
2021-01-13 00:39:59 +00:00
bmc-msft
513d1f52c9
Unify Dashboard & Webhook events (#394)
This change unifies the previously adhoc SignalR events and Webhooks into a single event format.
2021-01-11 21:43:09 +00:00
bmc-msft
c1a50f6f6c
Colocate tasks (#402)
Enables co-locating multiple tasks in a given work-set.

Tasks are bucketed by the following:
* OS
* job id
* setup container
* VM SKU & image (used in pre-1.0 style tasks)
* pool name (used in 1.0+ style tasks)
* if the task needs rebooting after the task setup script executes.

Additionally, a task will end up in a unique bucket if any of the following are true:
* The task is set to run on more than one VM
* The task is missing the `task.config.colocate` flag (all tasks created prior to this functionality) or the value is False

This updates the libfuzzer template to make use of colocation.  Users can specify co-locating all of the tasks *or* co-locating the secondary tasks.
2021-01-06 13:49:15 +00:00
bmc-msft
37f06bb324
handle libfuzzer fuzzing non-zero exits better (#381)
When running libfuzzer in 'fuzzing' mode, we expect the following on exit.

If the exit code is zero, crashing input isn't required.  This happens if the user specifies '-runs=N'

If the exit code is non-zero, then crashes are expected.  In practice, there are two causes to non-zero exits.
1. If the binary can't execute for some reason, like a missing prerequisite
2. If the binary _can_ execute, sometimes the sanitizers are put in such a bad place that they are unable to record the input that caused the crash.

This PR enables handling these two non-zero exit cases.

1. Optionally verify the libfuzzer target loads appropriately using `target_exe -help=1`.  This allows failing faster in the common issues, such a missing prerequisite library.
2. Optionally allow non-zero exits without crashes to be a warning, rather than a task failure.
2021-01-05 14:40:15 +00:00
bmc-msft
56090cb01d
Demonstrate a more complex template management (#366)
Add a job_template example that demonstrates customization of the arguments to the job. 

This example demonstrates setting the Area and Iteration paths for Azure Devops work items.
2020-12-05 12:30:37 +00:00
Cheick Keita
f1b4efc5ff
Add troubleshooting guide for the registration issue at deployment (#362) 2020-12-02 18:54:29 -05:00
bmc-msft
fd131c63bf
Document managing declarative templates (#361) 2020-12-02 14:18:45 -05:00