motorhead/qemu
1
0
Fork 0
mirror of https://github.com/Motorhead1991/qemu.git synced 2025-08-22 09:32:40 -06:00
Code Issues Projects Releases Packages Wiki Activity Actions

fuzz/virtio-net: remove fork-based fuzzer

Browse source 
Signed-off-by: Alexander Bulekov <alxndr@bu.edu>
Reviewed-by: Darren Kenny <darren.kenny@oracle.com>
This commit is contained in:
Alexander Bulekov 2023-02-04 23:29:47 -05:00
parent 5d3c73e27e
commit 5f47d07fd8
1 changed files with 5 additions and 49 deletions
Download patch file Download diff file Expand all files Collapse all files

50
tests/qtest/fuzz/virtio_net_fuzz.c
View file

@ -16,7 +16,6 @@
#include "tests/qtest/libqtest.h" #include "tests/qtest/libqtest.h"
#include "tests/qtest/libqos/virtio-net.h" #include "tests/qtest/libqos/virtio-net.h"
#include "fuzz.h" #include "fuzz.h"
#include "fork_fuzz.h"
#include "qos_fuzz.h" #include "qos_fuzz.h"
@ -115,36 +114,18 @@ static void virtio_net_fuzz_multi(QTestState *s,
} }
} }
static void virtio_net_fork_fuzz(QTestState *s,
const unsigned char *Data, size_t Size)
{
if (fork() == 0) {
virtio_net_fuzz_multi(s, Data, Size, false);
flush_events(s);
_Exit(0);
} else {
flush_events(s);
wait(NULL);
}
}
static void virtio_net_fork_fuzz_check_used(QTestState *s, static void virtio_net_fuzz_check_used(QTestState *s,
const unsigned char *Data, size_t Size) const unsigned char *Data, size_t Size)
{ {
if (fork() == 0) {
virtio_net_fuzz_multi(s, Data, Size, true); virtio_net_fuzz_multi(s, Data, Size, true);
flush_events(s); flush_events(s);
_Exit(0); fuzz_reset(s);
} else {
flush_events(s);
wait(NULL);
}
} }
static void virtio_net_pre_fuzz(QTestState *s) static void virtio_net_pre_fuzz(QTestState *s)
{ {
qos_init_path(s); qos_init_path(s);
counter_shm_init();
} }
static void *virtio_net_test_setup_socket(GString *cmd_line, void *arg) static void *virtio_net_test_setup_socket(GString *cmd_line, void *arg)
@ -158,23 +139,8 @@ static void *virtio_net_test_setup_socket(GString *cmd_line, void *arg)
return arg; return arg;
} }
static void *virtio_net_test_setup_user(GString *cmd_line, void *arg)
{
g_string_append_printf(cmd_line, " -netdev user,id=hs0 ");
return arg;
}
static void register_virtio_net_fuzz_targets(void) static void register_virtio_net_fuzz_targets(void)
{ {
fuzz_add_qos_target(&(FuzzTarget){
.name = "virtio-net-socket",
.description = "Fuzz the virtio-net virtual queues. Fuzz incoming "
"traffic using the socket backend",
.pre_fuzz = &virtio_net_pre_fuzz,
.fuzz = virtio_net_fork_fuzz,},
"virtio-net",
&(QOSGraphTestOptions){.before = virtio_net_test_setup_socket}
);
fuzz_add_qos_target(&(FuzzTarget){ fuzz_add_qos_target(&(FuzzTarget){
.name = "virtio-net-socket-check-used", .name = "virtio-net-socket-check-used",
@ -182,20 +148,10 @@ static void register_virtio_net_fuzz_targets(void)
"descriptors to be used. Timeout may indicate improperly handled " "descriptors to be used. Timeout may indicate improperly handled "
"input", "input",
.pre_fuzz = &virtio_net_pre_fuzz, .pre_fuzz = &virtio_net_pre_fuzz,
.fuzz = virtio_net_fork_fuzz_check_used,}, .fuzz = virtio_net_fuzz_check_used,},
"virtio-net", "virtio-net",
&(QOSGraphTestOptions){.before = virtio_net_test_setup_socket} &(QOSGraphTestOptions){.before = virtio_net_test_setup_socket}
); );
fuzz_add_qos_target(&(FuzzTarget){
.name = "virtio-net-slirp",
.description = "Fuzz the virtio-net virtual queues with the slirp "
" backend. Warning: May result in network traffic emitted from the "
" process. Run in an isolated network environment.",
.pre_fuzz = &virtio_net_pre_fuzz,
.fuzz = virtio_net_fork_fuzz,},
"virtio-net",
&(QOSGraphTestOptions){.before = virtio_net_test_setup_user}
);
} }
fuzz_target_init(register_virtio_net_fuzz_targets); fuzz_target_init(register_virtio_net_fuzz_targets);