]> git.baikalelectronics.ru Git - uboot.git/commit
projects / uboot.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4aa7f9d) | patch
fuzz: virtio: Add fuzzer for vring
authorAndrew Scull <ascull@google.com>
Mon, 30 May 2022 10:00:13 +0000 (10:00 +0000)
committerTom Rini <trini@konsulko.com>
Thu, 23 Jun 2022 16:58:19 +0000 (12:58 -0400)
commitd95c42de7df57d45668b7830496f406385433ee1
tree7a942f93d9884d9c1fd7b905c1a2078f8207d18btree | snapshot
parent4aa7f9d940a5b009287af25de54c9b70e7a2848ccommit | diff
fuzz: virtio: Add fuzzer for vring

Add a fuzzer to test the vring handling code against unexpected
mutations from the virtio device.

After building the sandbox with CONFIG_FUZZ=y, the fuzzer can be invoked
with by:

   UBOOT_SB_FUZZ_TEST=fuzz_vring ./u-boot

This fuzzer finds unvalidated inputs in the vring driver that allow a
buggy or malicious device to make the driver chase wild pointers.

Signed-off-by: Andrew Scull <ascull@google.com>
test/fuzz/Makefile diff | blob | history
test/fuzz/virtio.c [new file with mode: 0644] blob
"Das U-Boot" Source Tree.