tarantool: support luzer-based testing

sudo python infra/helper.py build_fuzzers tarantool
sudo python infra/helper.py check_build tarantool decimal_new_test
sudo python infra/helper.py run_fuzzer tarantool decimal_new_test

Depends on google#13929
Depends on ligurio/lunapark#163
Depends on ligurio/luzer#73
Depends on ligurio/luzer#76
Depends on tarantool/tarantool#12097

Author: ligurio

projects/tarantool/Dockerfile

@@ -30,3 +30,4 @@ RUN rm -rf test/static
 RUN git clone https://github.com/ligurio/tarantool-corpus test/static
 
 COPY build.sh $SRC/
+COPY compile_lua_fuzzer $SRC/

projects/tarantool/build.sh

@@ -48,7 +48,11 @@ fi
 : ${LDFLAGS:="${CXXFLAGS}"}  # to make sure we link with sanitizer runtime
 
 cmake_args=(
-    # Specific to Tarantool
+    # Specific to Tarantool.
+    # Tarantool executable binary is needed for running Lua tests,
+    # it should not have any dependencies.
+    -DBUILD_STATIC=ON
+    # XXX: Sysprof requires ENABLE_BACKTRACE=ON.
     -DENABLE_BACKTRACE=OFF
     -DENABLE_FUZZER=ON
     -DOSS_FUZZ=ON
@@ -82,18 +86,22 @@ cmake_args=(
 
 # To deal with a host filesystem from inside of container.
 git config --global --add safe.directory '*'
+git pull --rebase
+
+# Required by luzer and tarantool.
+export OSS_FUZZ=1
 
 # Build the project and fuzzers.
 [[ -e build ]] && rm -rf build
 cmake "${cmake_args[@]}" -S . -B build
-cmake --build build --target fuzzers --parallel --verbose
+cmake --build build --target fuzzers --target tarantool --parallel --verbose
 
 # Archive and copy to $OUT seed corpus if the build succeeded.
 # Postfix `_fuzzer` is used in Tarantool, postfix `_test` is
-# used in Lua C API tests [1].
+# used in additional tests [1].
 #
 # 1. https://github.com/ligurio/lunapark
-cp test/static/*.dict test/static/*.options $OUT/
+# cp test/static/*.dict test/static/*.options $OUT/
 for f in $(find build/test/fuzz/ \( -name '*_fuzzer' -o -name '*_test' \) -type f);
 do
   name=$(basename $f);
@@ -105,3 +113,31 @@ do
     zip --quiet -j $OUT/"$name"_seed_corpus.zip $corpus_dir/*
   fi
 done
+
+# Finish execution if libFuzzer is not used, because luzer
+# is libFuzzer-based, UndefinedSanitizer is not supported.
+if [[ "$FUZZING_ENGINE" != libfuzzer ]] ||
+   [[ "$SANITIZER" == "undefined" ]]; then
+  exit
+fi
+
+LUA_RUNTIME_NAME=tarantool
+TARANTOOL_PATH=build/src/$LUA_RUNTIME_NAME
+LUA_MODULES_DIR=lua_modules
+
+apt install -y luarocks liblua5.1-0 liblua5.1-0-dev liblua5.1-0-dbg lua5.1
+
+luarocks install --lua-version 5.1 --server=https://luarocks.org/dev --tree=$LUA_MODULES_DIR luzer
+
+cp build/test/fuzz/lua-tests/src/tests/lapi/lib.lua "$OUT"
+# Copying luzer-based tests to build/luzer_tests.
+cmake --build build --parallel --verbose --target copy_tests
+# Generating test wrappers for luzer-based tests.
+for test_file in $(find build/luzer_tests -name "*.lua" -type f);
+do
+  "$SRC/compile_lua_fuzzer" "$LUA_RUNTIME_NAME" $(basename "$test_file")
+  cp "$test_file" "$OUT/"
+done
+
+cp $TARANTOOL_PATH "$OUT/$LUA_RUNTIME_NAME"
+cp -R $LUA_MODULES_DIR "$OUT/"

projects/tarantool/compile_lua_fuzzer

@@ -0,0 +1,36 @@
+#!/bin/bash -eu
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+
+# The Lua runtime name.
+lua_runtime=$1
+# Path to the fuzz target source file relative to the project's root.
+fuzz_target=$2
+
+fuzzer_basename=$(basename -s .lua "$fuzz_target")
+
+# Create an execution wrapper that executes luzer with the correct
+# arguments.
+echo "#!/bin/bash
+
+# LLVMFuzzerTestOneInput so that the wrapper script is recognized
+# as a fuzz target for 'check_build'.
+project_dir=\$(dirname \"\$0\")
+eval \$(luarocks --lua-version 5.1 --tree lua_modules path)
+ASAN_OPTIONS=\$ASAN_OPTIONS:symbolize=1:external_symbolizer_path=\$project_dir/llvm-symbolizer:detect_leaks=0 \
+\$project_dir/$lua_runtime \$project_dir/$fuzz_target \$@" > "$OUT/$fuzzer_basename"
+
+chmod +x "$OUT/$fuzzer_basename"