From 4c1b10fd4c7c68127391506ef322d6f91b8b31ac Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Tue, 13 Jan 2026 16:50:04 -0800 Subject: [PATCH 01/17] Disable BUILD_TESTING option in build_boringssl_h3_tools.sh Disable testing during the build process for both shared and static libraries. --- tools/build_boringssl_h3_tools.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/tools/build_boringssl_h3_tools.sh b/tools/build_boringssl_h3_tools.sh index 2bfd8932a07..66002e01cfd 100755 --- a/tools/build_boringssl_h3_tools.sh +++ b/tools/build_boringssl_h3_tools.sh @@ -149,7 +149,8 @@ cmake \ -DCMAKE_CXX_FLAGS='-Wno-error=ignored-attributes -UBORINGSSL_HAVE_LIBUNWIND' \ -DCMAKE_C_FLAGS=${BSSL_C_FLAGS} \ -DCMAKE_POSITION_INDEPENDENT_CODE=ON \ - -DBUILD_SHARED_LIBS=1 + -DBUILD_SHARED_LIBS=1 \ + -DBUILD_TESTING=OFF cmake \ -B build-static \ -DGO_EXECUTABLE=${GO_BINARY_PATH} \ @@ -158,7 +159,8 @@ cmake \ -DCMAKE_CXX_FLAGS='-Wno-error=ignored-attributes -UBORINGSSL_HAVE_LIBUNWIND' \ -DCMAKE_C_FLAGS="${BSSL_C_FLAGS}" \ -DCMAKE_POSITION_INDEPENDENT_CODE=ON \ - -DBUILD_SHARED_LIBS=0 + -DBUILD_SHARED_LIBS=0 \ + -DBUILD_TESTING=OFF cmake --build build-shared -j ${num_threads} cmake --build build-static -j ${num_threads} sudo cmake --install build-shared From 860a9042c502a83802fc87bcfa0affc123248f7d Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Tue, 13 Jan 2026 17:06:32 -0800 Subject: [PATCH 02/17] Add workflow_dispatch trigger to CIFuzz workflow --- .github/workflows/cifuzz.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml index 710c75a421e..21796325827 100644 --- a/.github/workflows/cifuzz.yml +++ b/.github/workflows/cifuzz.yml @@ -2,6 +2,7 @@ name: CIFuzz on: schedule: - cron: '0 0 * * 0' + workflow_dispatch: permissions: {} jobs: Fuzzing: From faf95fe21f56b6a69f6bbe9d790a2a8aea000a66 Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Tue, 13 Jan 2026 17:11:15 -0800 Subject: [PATCH 03/17] Update cifuzz.yml --- .github/workflows/cifuzz.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml index 21796325827..dc102ffa1d1 100644 --- a/.github/workflows/cifuzz.yml +++ b/.github/workflows/cifuzz.yml @@ -3,6 +3,9 @@ on: schedule: - cron: '0 0 * * 0' workflow_dispatch: + push: + branches: + - 'shukitchan-patch-30' permissions: {} jobs: Fuzzing: From 82149dee258796cc93dc4eec776dac5521cec216 Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Wed, 14 Jan 2026 11:09:49 -0800 Subject: [PATCH 04/17] Update cifuzz.yml --- .github/workflows/cifuzz.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml index dc102ffa1d1..9f06df3d617 100644 --- a/.github/workflows/cifuzz.yml +++ b/.github/workflows/cifuzz.yml @@ -15,12 +15,12 @@ jobs: steps: - name: Build Fuzzers id: build - uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master + uses: shukitchan/oss-fuzz/infra/cifuzz/actions/build_fuzzers@shukitchan-patch-12 with: oss-fuzz-project-name: 'trafficserver' language: c++ - name: Run Fuzzers - uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master + uses: shukitchan/oss-fuzz/infra/cifuzz/actions/run_fuzzers@shukitchan-patch-12 with: oss-fuzz-project-name: 'trafficserver' language: c++ From 9ada1890104a3a656065b0be44ad85ca58f335e8 Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Thu, 15 Jan 2026 13:25:23 -0800 Subject: [PATCH 05/17] Pin libc-ares-dev package version to 1.16.0 --- tests/fuzzing/oss-fuzz.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/fuzzing/oss-fuzz.sh b/tests/fuzzing/oss-fuzz.sh index 601fe308755..30d84c449a4 100644 --- a/tests/fuzzing/oss-fuzz.sh +++ b/tests/fuzzing/oss-fuzz.sh @@ -26,7 +26,7 @@ unset CXXFLAGS unset RUSTFLAGS export AFL_NOOPT=1 -apt-get install -y libev-dev libjemalloc-dev python2-dev libxml2-dev libpython2-dev libc-ares-dev libsystemd-dev libevent-dev libjansson-dev zlib1g-dev sudo autoconf libtool pkg-config +apt-get install -y libev-dev libjemalloc-dev python2-dev libxml2-dev libpython2-dev libc-ares-dev=1.16.0 libsystemd-dev libevent-dev libjansson-dev zlib1g-dev sudo autoconf libtool pkg-config curl https://sh.rustup.rs -sSf | sh -s -- -y --default-toolchain=nightly export PATH="/root/.cargo/bin:${PATH}" From 2537f8c4de1ea3a541a956e089e965061a1f192c Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Thu, 15 Jan 2026 13:40:25 -0800 Subject: [PATCH 06/17] Update oss-fuzz.sh --- tests/fuzzing/oss-fuzz.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/fuzzing/oss-fuzz.sh b/tests/fuzzing/oss-fuzz.sh index 30d84c449a4..43f758e5107 100644 --- a/tests/fuzzing/oss-fuzz.sh +++ b/tests/fuzzing/oss-fuzz.sh @@ -26,7 +26,7 @@ unset CXXFLAGS unset RUSTFLAGS export AFL_NOOPT=1 -apt-get install -y libev-dev libjemalloc-dev python2-dev libxml2-dev libpython2-dev libc-ares-dev=1.16.0 libsystemd-dev libevent-dev libjansson-dev zlib1g-dev sudo autoconf libtool pkg-config +apt-get install -y libev-dev libjemalloc-dev python2-dev libxml2-dev libpython2-dev libc-ares-dev=1.18.1 libsystemd-dev libevent-dev libjansson-dev zlib1g-dev sudo autoconf libtool pkg-config curl https://sh.rustup.rs -sSf | sh -s -- -y --default-toolchain=nightly export PATH="/root/.cargo/bin:${PATH}" From 88e3a90622a3f5f25c2900b2b7cc495f5995ce41 Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Thu, 15 Jan 2026 13:48:22 -0800 Subject: [PATCH 07/17] Update oss-fuzz.sh --- tests/fuzzing/oss-fuzz.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/fuzzing/oss-fuzz.sh b/tests/fuzzing/oss-fuzz.sh index 43f758e5107..601fe308755 100644 --- a/tests/fuzzing/oss-fuzz.sh +++ b/tests/fuzzing/oss-fuzz.sh @@ -26,7 +26,7 @@ unset CXXFLAGS unset RUSTFLAGS export AFL_NOOPT=1 -apt-get install -y libev-dev libjemalloc-dev python2-dev libxml2-dev libpython2-dev libc-ares-dev=1.18.1 libsystemd-dev libevent-dev libjansson-dev zlib1g-dev sudo autoconf libtool pkg-config +apt-get install -y libev-dev libjemalloc-dev python2-dev libxml2-dev libpython2-dev libc-ares-dev libsystemd-dev libevent-dev libjansson-dev zlib1g-dev sudo autoconf libtool pkg-config curl https://sh.rustup.rs -sSf | sh -s -- -y --default-toolchain=nightly export PATH="/root/.cargo/bin:${PATH}" From 2f6955f0ecf9f5f61a6fa15bbec35bf59452574d Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Thu, 15 Jan 2026 14:12:21 -0800 Subject: [PATCH 08/17] Update Python version in oss-fuzz.sh script --- tests/fuzzing/oss-fuzz.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/fuzzing/oss-fuzz.sh b/tests/fuzzing/oss-fuzz.sh index 601fe308755..9d397702bc1 100644 --- a/tests/fuzzing/oss-fuzz.sh +++ b/tests/fuzzing/oss-fuzz.sh @@ -26,7 +26,7 @@ unset CXXFLAGS unset RUSTFLAGS export AFL_NOOPT=1 -apt-get install -y libev-dev libjemalloc-dev python2-dev libxml2-dev libpython2-dev libc-ares-dev libsystemd-dev libevent-dev libjansson-dev zlib1g-dev sudo autoconf libtool pkg-config +apt-get install -y libev-dev libjemalloc-dev python3-dev libxml2-dev libpython3-dev libc-ares-dev libsystemd-dev libevent-dev libjansson-dev zlib1g-dev sudo autoconf libtool pkg-config curl https://sh.rustup.rs -sSf | sh -s -- -y --default-toolchain=nightly export PATH="/root/.cargo/bin:${PATH}" From c2ac63d6c8d4a975678ca2934b80f69fce0090dc Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Thu, 15 Jan 2026 14:33:36 -0800 Subject: [PATCH 09/17] Update oss-fuzz.sh --- tests/fuzzing/oss-fuzz.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/fuzzing/oss-fuzz.sh b/tests/fuzzing/oss-fuzz.sh index 9d397702bc1..6d8211e6dfe 100644 --- a/tests/fuzzing/oss-fuzz.sh +++ b/tests/fuzzing/oss-fuzz.sh @@ -26,7 +26,7 @@ unset CXXFLAGS unset RUSTFLAGS export AFL_NOOPT=1 -apt-get install -y libev-dev libjemalloc-dev python3-dev libxml2-dev libpython3-dev libc-ares-dev libsystemd-dev libevent-dev libjansson-dev zlib1g-dev sudo autoconf libtool pkg-config +apt-get install -y libev-dev libjemalloc-dev python3-dev libxml2-dev libpython3-dev libpsl-dev libc-ares-dev libsystemd-dev libevent-dev libjansson-dev zlib1g-dev sudo autoconf libtool pkg-config curl https://sh.rustup.rs -sSf | sh -s -- -y --default-toolchain=nightly export PATH="/root/.cargo/bin:${PATH}" From 68b2d04ecc6fa59ec07f564cc6bdb163d2ef6937 Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Wed, 21 Jan 2026 14:46:04 -0800 Subject: [PATCH 10/17] Update CI to use Ubuntu 24.04 for fuzzing --- .github/workflows/cifuzz.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml index 9f06df3d617..00d0b2ab2ab 100644 --- a/.github/workflows/cifuzz.yml +++ b/.github/workflows/cifuzz.yml @@ -9,7 +9,7 @@ on: permissions: {} jobs: Fuzzing: - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 permissions: security-events: write steps: From d93f195950eae76eabb81f13b7cd7b1f1994c22d Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Tue, 27 Jan 2026 15:52:22 -0800 Subject: [PATCH 11/17] Update CIFuzz workflow actions to latest version Updated CIFuzz workflow to use the latest actions from Google OSS-Fuzz. --- .github/workflows/cifuzz.yml | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml index 00d0b2ab2ab..3f050041cf1 100644 --- a/.github/workflows/cifuzz.yml +++ b/.github/workflows/cifuzz.yml @@ -2,10 +2,6 @@ name: CIFuzz on: schedule: - cron: '0 0 * * 0' - workflow_dispatch: - push: - branches: - - 'shukitchan-patch-30' permissions: {} jobs: Fuzzing: @@ -15,12 +11,12 @@ jobs: steps: - name: Build Fuzzers id: build - uses: shukitchan/oss-fuzz/infra/cifuzz/actions/build_fuzzers@shukitchan-patch-12 + uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master with: oss-fuzz-project-name: 'trafficserver' language: c++ - name: Run Fuzzers - uses: shukitchan/oss-fuzz/infra/cifuzz/actions/run_fuzzers@shukitchan-patch-12 + uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master with: oss-fuzz-project-name: 'trafficserver' language: c++ From 7ef5e9e1b7782e5b74ae6ddf8ee2d58ae254a6d3 Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Tue, 27 Jan 2026 16:01:11 -0800 Subject: [PATCH 12/17] Update BoringSSL checkout and CMake configuration Updated the BoringSSL checkout commit and modified CMake flags for building shared and static libraries. --- tools/build_boringssl_h3_tools.sh | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) diff --git a/tools/build_boringssl_h3_tools.sh b/tools/build_boringssl_h3_tools.sh index 66002e01cfd..aa2d4ff28a1 100755 --- a/tools/build_boringssl_h3_tools.sh +++ b/tools/build_boringssl_h3_tools.sh @@ -121,7 +121,7 @@ GO_BINARY_PATH=${BASE}/go/bin/go if [ ! -d boringssl ]; then git clone https://boringssl.googlesource.com/boringssl cd boringssl - git checkout 45b2464158379f48cec6e35a1ef503ddea1511a6 + git checkout 02bc0949e5cac0e1ee82c6f365f5a6c3cfd0cfa9 cd .. fi cd boringssl @@ -146,21 +146,25 @@ cmake \ -DGO_EXECUTABLE=${GO_BINARY_PATH} \ -DCMAKE_INSTALL_PREFIX=${BASE}/boringssl \ -DCMAKE_BUILD_TYPE=Release \ - -DCMAKE_CXX_FLAGS='-Wno-error=ignored-attributes -UBORINGSSL_HAVE_LIBUNWIND' \ + -DCMAKE_CXX_FLAGS='-Wno-error=character-conversion -Wno-error=ignored-attributes -UBORINGSSL_HAVE_LIBUNWIND' \ -DCMAKE_C_FLAGS=${BSSL_C_FLAGS} \ -DCMAKE_POSITION_INDEPENDENT_CODE=ON \ - -DBUILD_SHARED_LIBS=1 \ - -DBUILD_TESTING=OFF + -DBUILD_TESTING=0 \ + -DCMAKE_THREAD_LIBS_INIT="-lpthread" \ + -DTHREADS_PREFER_PTHREAD_FLAG=ON \ + -DBUILD_SHARED_LIBS=1 cmake \ -B build-static \ -DGO_EXECUTABLE=${GO_BINARY_PATH} \ -DCMAKE_INSTALL_PREFIX=${BASE}/boringssl \ -DCMAKE_BUILD_TYPE=Release \ - -DCMAKE_CXX_FLAGS='-Wno-error=ignored-attributes -UBORINGSSL_HAVE_LIBUNWIND' \ + -DCMAKE_CXX_FLAGS='-Wno-error=character-conversion -Wno-error=ignored-attributes -UBORINGSSL_HAVE_LIBUNWIND' \ -DCMAKE_C_FLAGS="${BSSL_C_FLAGS}" \ -DCMAKE_POSITION_INDEPENDENT_CODE=ON \ - -DBUILD_SHARED_LIBS=0 \ - -DBUILD_TESTING=OFF + -DBUILD_TESTING=0 \ + -DCMAKE_THREAD_LIBS_INIT="-lpthread" \ + -DTHREADS_PREFER_PTHREAD_FLAG=ON \ + -DBUILD_SHARED_LIBS=0 cmake --build build-shared -j ${num_threads} cmake --build build-static -j ${num_threads} sudo cmake --install build-shared From b4c58cd6d8312d1c484ac926e6558fb72c2520ec Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Tue, 27 Jan 2026 16:03:22 -0800 Subject: [PATCH 13/17] Update Go version to 1.24.12 --- tools/build_boringssl_h3_tools.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/build_boringssl_h3_tools.sh b/tools/build_boringssl_h3_tools.sh index aa2d4ff28a1..286e5d15098 100755 --- a/tools/build_boringssl_h3_tools.sh +++ b/tools/build_boringssl_h3_tools.sh @@ -112,7 +112,7 @@ else OS="linux" fi -go_version=1.24.1 +go_version=1.24.12 wget https://go.dev/dl/go${go_version}.${OS}-${ARCH}.tar.gz rm -rf ${BASE}/go && tar -C ${BASE} -xf go${go_version}.${OS}-${ARCH}.tar.gz rm go${go_version}.${OS}-${ARCH}.tar.gz From ab91be7db0ed26fc08c90b04df90fd251295edab Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Tue, 27 Jan 2026 16:07:39 -0800 Subject: [PATCH 14/17] Create symbolic links for libswoc libraries Add symbolic links for libswoc shared libraries --- tests/fuzzing/oss-fuzz.sh | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/tests/fuzzing/oss-fuzz.sh b/tests/fuzzing/oss-fuzz.sh index 6d8211e6dfe..c9df600b377 100644 --- a/tests/fuzzing/oss-fuzz.sh +++ b/tests/fuzzing/oss-fuzz.sh @@ -63,6 +63,10 @@ cp /opt/h3-tools-boringssl/boringssl/lib/libssl.so $OUT/lib/ cp /opt/h3-tools-boringssl/boringssl/lib/libcrypto.so $OUT/lib/ cp /opt/h3-tools-boringssl/quiche/lib/libquiche.so $OUT/lib/ cp /opt/h3-tools-boringssl/quiche/lib/libquiche.so $OUT/lib/libquiche.so.0 + +ln -s $OUT/lib/libswoc.so.1.5.15 libswoc.so.1 +ln -s $OUT/lib/libswoc.so.1.5.15 libswoc.so + export LD_LIBRARY_PATH=$OUT/lib/ ldconfig From 2ae8f8623e5626920767308b4d6df56b774e7f13 Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Tue, 27 Jan 2026 17:00:08 -0800 Subject: [PATCH 15/17] Update symbolic links for libswoc in oss-fuzz.sh --- tests/fuzzing/oss-fuzz.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/fuzzing/oss-fuzz.sh b/tests/fuzzing/oss-fuzz.sh index c9df600b377..d5461315320 100644 --- a/tests/fuzzing/oss-fuzz.sh +++ b/tests/fuzzing/oss-fuzz.sh @@ -64,8 +64,8 @@ cp /opt/h3-tools-boringssl/boringssl/lib/libcrypto.so $OUT/lib/ cp /opt/h3-tools-boringssl/quiche/lib/libquiche.so $OUT/lib/ cp /opt/h3-tools-boringssl/quiche/lib/libquiche.so $OUT/lib/libquiche.so.0 -ln -s $OUT/lib/libswoc.so.1.5.15 libswoc.so.1 -ln -s $OUT/lib/libswoc.so.1.5.15 libswoc.so +ln -sf $OUT/lib/libswoc.so.1.5.15 libswoc.so.1 +ln -sf $OUT/lib/libswoc.so.1.5.15 libswoc.so export LD_LIBRARY_PATH=$OUT/lib/ ldconfig From 19e7897722a0be1a8b54b0c0629dd533c01ea90e Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Wed, 28 Jan 2026 14:59:07 -0800 Subject: [PATCH 16/17] Fix symlink creation for libswoc in oss-fuzz.sh --- tests/fuzzing/oss-fuzz.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/fuzzing/oss-fuzz.sh b/tests/fuzzing/oss-fuzz.sh index d5461315320..9ffacc7f12c 100644 --- a/tests/fuzzing/oss-fuzz.sh +++ b/tests/fuzzing/oss-fuzz.sh @@ -64,8 +64,8 @@ cp /opt/h3-tools-boringssl/boringssl/lib/libcrypto.so $OUT/lib/ cp /opt/h3-tools-boringssl/quiche/lib/libquiche.so $OUT/lib/ cp /opt/h3-tools-boringssl/quiche/lib/libquiche.so $OUT/lib/libquiche.so.0 -ln -sf $OUT/lib/libswoc.so.1.5.15 libswoc.so.1 -ln -sf $OUT/lib/libswoc.so.1.5.15 libswoc.so +ln -sf $OUT/lib/libswoc.so.1.5.15 $OUT/lib/libswoc.so.1 +ln -sf $OUT/lib/libswoc.so.1.5.15 $OUT/lib/libswoc.so export LD_LIBRARY_PATH=$OUT/lib/ ldconfig From ac0baf58695c9460081087ef6687588034ef441c Mon Sep 17 00:00:00 2001 From: Kit Chan Date: Wed, 28 Jan 2026 15:38:39 -0800 Subject: [PATCH 17/17] Fix symlink creation for libswoc in oss-fuzz.sh Change directory to $OUT/lib before creating symlinks for libswoc. --- tests/fuzzing/oss-fuzz.sh | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/tests/fuzzing/oss-fuzz.sh b/tests/fuzzing/oss-fuzz.sh index 9ffacc7f12c..d02521d8665 100644 --- a/tests/fuzzing/oss-fuzz.sh +++ b/tests/fuzzing/oss-fuzz.sh @@ -64,8 +64,9 @@ cp /opt/h3-tools-boringssl/boringssl/lib/libcrypto.so $OUT/lib/ cp /opt/h3-tools-boringssl/quiche/lib/libquiche.so $OUT/lib/ cp /opt/h3-tools-boringssl/quiche/lib/libquiche.so $OUT/lib/libquiche.so.0 -ln -sf $OUT/lib/libswoc.so.1.5.15 $OUT/lib/libswoc.so.1 -ln -sf $OUT/lib/libswoc.so.1.5.15 $OUT/lib/libswoc.so +cd $OUT/lib +ln -sf libswoc.so.1.5.15 libswoc.so.1 +ln -sf libswoc.so.1.5.15 libswoc.so export LD_LIBRARY_PATH=$OUT/lib/ ldconfig