[pull] master from google:master

infra/indexer/frontend/ast_visitor.cc

@@ -36,11 +36,11 @@
 #include "clang/AST/PrettyPrinter.h"
 #include "clang/AST/TemplateBase.h"
 #include "clang/AST/Type.h"
+#include "clang/Basic/BuiltinTraits.h"
 #include "clang/Basic/FileEntry.h"
 #include "clang/Basic/OperatorKinds.h"
 #include "clang/Basic/SourceLocation.h"
 #include "clang/Basic/Specifiers.h"
-#include "clang/Basic/TypeTraits.h"
 #include "clang/Sema/Lookup.h"
 #include "clang/Sema/Sema.h"
 #include "llvm/ADT/APSInt.h"

projects/envoy/Dockerfile

@@ -30,7 +30,12 @@ RUN apt-get update && apt-get -y install  \
     golang          \
     rsync           \
     python3         \
-    libtinfo5
+    libtinfo5       \
+    libunwind-dev   \
+    libclang-dev
+
+RUN ln -s /usr/lib/x86_64-linux-gnu/libunwind.a /usr/local/lib/libunwind.a && \
+    ln -s /usr/lib/llvm-10/lib/libclang.so /usr/local/lib/libclang.so
 
 RUN git clone https://github.com/envoyproxy/envoy.git
 WORKDIR $SRC/envoy/

projects/envoy/build.sh

@@ -33,13 +33,17 @@ declare -r EXTRA_BAZEL_FLAGS="$(
 # Disabling layering_check because it breaks the abseil build. See
 # https://github.com/google/oss-fuzz/blob/f0fa8b5cd3f99b5905e91b336d07a870ca1bc2e3/projects/abseil-cpp/build.sh#L17-L21.
 echo "--features=-layering_check"
+echo "--repo_env=BAZEL_LLVM_PATH=/usr/local"
+echo "--repo_env=BAZEL_USE_LIBSTDCPP=True"
+echo "--copt=-Wno-nullability-completeness"
 if [ -n "$CC" ]; then
   echo "--action_env=CC=${CC}"
 fi
 if [ -n "$CXX" ]; then
   echo "--action_env=CXX=${CXX}"
 fi
 echo "--host_action_env=CC=gcc"
+echo "--host_action_env=CXX=g++"
 echo "--copt=-gz=zlib"
 echo "--linkopt=-Wl,--compress-debug-sections=zlib"
 echo "--linkopt=-Wl,--icf=all"

projects/jsoup/CssHtmlFuzzer.java

@@ -23,16 +23,15 @@
 
 public class CssHtmlFuzzer {
     public static void fuzzerTestOneInput(FuzzedDataProvider data) {
-        String css = data.consumeString(100);
-        Evaluator query;
         try {
-            query = Selector.evaluatorOf(css);
+            String css = data.consumeString(100);
+            Evaluator query = Selector.evaluatorOf(css);
+
+            String html = data.consumeRemainingAsString();
+            Document doc = Jsoup.parse(html, "https://example.com");
+            doc.select(query);
         } catch (ValidationException | Selector.SelectorParseException ignored) {
-            return;
+            // invalid or overly complex selector
         }
-
-        String html = data.consumeRemainingAsString();
-        Document doc = Jsoup.parse(html, "https://example.com");
-        doc.select(query);
     }
 }

projects/selinux/project.yaml

@@ -12,6 +12,8 @@ auto_ccs:
   - jwcart2@gmail.com
   - cgzones@googlemail.com
   - stephen.smalley.work@gmail.com
+  - paul@paul-moore.com
+  - jason@perfinion.com
 main_repo: 'https://github.com/SELinuxProject/selinux'
 
 fuzzing_engines:

projects/thrift-rb/project.yaml

@@ -9,4 +9,4 @@ fuzzing_engines:
 sanitizers:
   - address
 
-main_repo: "https://github.com/apache/thrift"
+main_repo: "https://github.com/apache/thrift.git"