diff mbox series

[v4,15/16] fuzz: register predefined general-fuzz configs

Message ID 20201015134137.205958-16-alxndr@bu.edu
State New
Headers show
Series Add a General Virtual Device Fuzzer | expand

Commit Message

Alexander Bulekov Oct. 15, 2020, 1:41 p.m. UTC 
We call get_general_fuzz_configs, which fills an array with
predefined {name, args, objects} triples. For each of these, we add a
new FuzzTarget, that uses a small wrapper to set
QEMU_FUZZ_{ARGS,OBJECTS} to the corresponding predefined values.

Signed-off-by: Alexander Bulekov <alxndr@bu.edu>
---
 tests/qtest/fuzz/general_fuzz.c | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
diff mbox series

Patch

diff --git a/tests/qtest/fuzz/general_fuzz.c b/tests/qtest/fuzz/general_fuzz.c
index 22884512a3..04c4550694 100644
--- a/tests/qtest/fuzz/general_fuzz.c
+++ b/tests/qtest/fuzz/general_fuzz.c
@@ -26,6 +26,7 @@ 
 #include "hw/qdev-core.h"
 #include "hw/pci/pci.h"
 #include "hw/boards.h"
+#include "general_fuzz_configs.h"
 
 /*
  * SEPARATOR is used to separate "operations" in the fuzz input
@@ -902,6 +903,17 @@  static GString *general_fuzz_cmdline(FuzzTarget *t)
     return cmd_line;
 }
 
+static GString *general_fuzz_predefined_config_cmdline(FuzzTarget *t)
+{
+    general_fuzz_config *config;
+    g_assert(t->opaque);
+
+    config = t->opaque;
+    setenv("QEMU_FUZZ_ARGS", config->args, 1);
+    setenv("QEMU_FUZZ_OBJECTS", config->objects, 1);
+    return general_fuzz_cmdline(t);
+}
+
 static void register_general_fuzz_targets(void)
 {
     fuzz_add_target(&(FuzzTarget){
@@ -912,6 +924,25 @@  static void register_general_fuzz_targets(void)
             .fuzz = general_fuzz,
             .crossover = general_fuzz_crossover
     });
+
+    GString *name;
+    general_fuzz_config *config;
+    GArray *predefined_configs = get_general_fuzz_configs();
+
+    for (int i = 0; i < predefined_configs->len; i++) {
+        config = &g_array_index(predefined_configs, general_fuzz_config, i);
+        name = g_string_new("general-fuzz");
+        g_string_append_printf(name, "-%s", config->name);
+        fuzz_add_target(&(FuzzTarget){
+                .name = name->str,
+                .description = "Predefined general-fuzz config.",
+                .get_init_cmdline = general_fuzz_predefined_config_cmdline,
+                .pre_fuzz = general_pre_fuzz,
+                .fuzz = general_fuzz,
+                .crossover = general_fuzz_crossover,
+                .opaque = config
+        });
+    }
 }
 
 fuzz_target_init(register_general_fuzz_targets);