Re: [PATCH v5 02/16] fuzz: Add general virtual-device fuzzer

2020-10-21 Thread Alexander Bulekov
On 201021 1444, Paolo Bonzini wrote: > On 21/10/20 03:07, Alexander Bulekov wrote: > > +static GString *generic_fuzz_cmdline(FuzzTarget *t) >^^^ > > > +{ > > +GString *cmd_line = g_string_new(TARGET_NAME); > > +if (!getenv("QEMU_FUZZ_ARGS")) { > > +usage();

Re: [PATCH v5 02/16] fuzz: Add general virtual-device fuzzer

2020-10-21 Thread Paolo Bonzini
On 21/10/20 03:07, Alexander Bulekov wrote: > +static GString *generic_fuzz_cmdline(FuzzTarget *t) ^^^ > +{ > +GString *cmd_line = g_string_new(TARGET_NAME); > +if (!getenv("QEMU_FUZZ_ARGS")) { > +usage(); > +} > +g_string_append_printf(cmd_line, "

[PATCH v5 02/16] fuzz: Add general virtual-device fuzzer

2020-10-20 Thread Alexander Bulekov
This is a generic fuzzer designed to fuzz a virtual device's MemoryRegions, as long as they exist within the Memory or Port IO (if it exists) AddressSpaces. The fuzzer's input is interpreted into a sequence of qtest commands (outb, readw, etc). The interpreted commands are separated by a magic