mirrors/crosvm
1
0
Fork 0
mirror of https://chromium.googlesource.com/crosvm/crosvm synced 2024-11-28 17:44:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
crosvm/fuzz/Cargo.toml

74 lines
1.3 KiB
TOML
Raw Normal View History

Add kernel_loader fuzzing Add a top level fuzz directory. Other fuzz tests will be added here in subsequent commits. For now fuzzing must be run manually. Soon there will be a way to extract the fuzz artifacts and upload them to cluster fuzz. Change-Id: Iddfb55af78af6f412927b2221f22acb882069d36 Signed-off-by: Dylan Reid <dgreid@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/850851 Reviewed-by: Zach Reizner <zachr@chromium.org>
2018-01-04 18:28:32 +00:00
[package]
name = "crosvm-fuzz"
version = "0.0.1"
fuzz: Move fuzzers to standard `cargo fuzz` location This simplifies `cargo fuzz` usage. Fuzzers can be built with `cargo fuzz build` without any other arguments. BUG=b:279217867 TEST=`cargo fuzz build` Change-Id: I11b8a8ba4c2b3e2d1a42973699e4d9c3920635b6 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/4540001 Commit-Queue: Dennis Kempin <denniskempin@google.com> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2023-05-16 17:19:30 +00:00
publish = false
crosvm: migrate to Rust 2021 edition BUG=none TEST=cq Change-Id: I0059c970879b78bfd40b6ce58b10debcf154b50f Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3508322 Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Commit-Queue: Anton Romanov <romanton@google.com>
2022-03-08 01:16:09 +00:00
edition = "2021"
Add kernel_loader fuzzing Add a top level fuzz directory. Other fuzz tests will be added here in subsequent commits. For now fuzzing must be run manually. Soon there will be a way to extract the fuzz artifacts and upload them to cluster fuzz. Change-Id: Iddfb55af78af6f412927b2221f22acb882069d36 Signed-off-by: Dylan Reid <dgreid@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/850851 Reviewed-by: Zach Reizner <zachr@chromium.org>
2018-01-04 18:28:32 +00:00
crosvm-fuzz: Migrate crosvm-fuzz to cargo fuzz Fuzzer targets can be ran with cargo +nightly fuzz run --fuzz-dir crosvm-fuzz --features upstream-fuzz <target> This should enable us to move fuzzing to anywhere including ClusterFuzz while maintain compatibility with cros infra. TEST=`cargo fuzz` won't crash in first 30s, `USE="asan fuzzer" emerge-hatch crosvm` builds, `/build/hatch/usr/libexec/fuzzers/crosvm_qcow_fuzzer` won't crash in first 30s FIXED=b:245007212 BUG=b:244631591 Change-Id: I4b262ee1a6a90247dea96347c55a3849af793bec Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3905095 Auto-Submit: Zihan Chen <zihanchen@google.com> Commit-Queue: Dennis Kempin <denniskempin@google.com> Reviewed-by: Dennis Kempin <denniskempin@google.com>
2022-09-21 01:34:10 +00:00
[package.metadata]
cargo-fuzz = true
Add kernel_loader fuzzing Add a top level fuzz directory. Other fuzz tests will be added here in subsequent commits. For now fuzzing must be run manually. Soon there will be a way to extract the fuzz artifacts and upload them to cluster fuzz. Change-Id: Iddfb55af78af6f412927b2221f22acb882069d36 Signed-off-by: Dylan Reid <dgreid@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/850851 Reviewed-by: Zach Reizner <zachr@chromium.org>
2018-01-04 18:28:32 +00:00
[dependencies]
fuzz: Add qcow fuzzing Fuzz using the data as a qcow image with an offset and value to write to the image. Change-Id: Iff8f2971ba716c93d978e33338ad62b5d487c115 Signed-off-by: Dylan Reid <dgreid@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/871132 Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org>
2019-03-13 21:24:18 +00:00
devices = { path = "../devices" }
disk: move qcow into disk crate Move qcow from being its own crate into a module of the disk crate, similar to the composite disk module. This will allow use of qcow from disk and vice versa without introducing a circular crate dependency. BUG=None TEST=./build_test.py TEST=USE='asan fuzzer' emerge-nami crosvm Change-Id: I77512bbe4b94faff1b5460f9796ee56505135580 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1972477 Reviewed-by: Cody Schuffelen <schuffelen@google.com> Reviewed-by: Zach Reizner <zachr@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Commit-Queue: Daniel Verkamp <dverkamp@chromium.org>
2019-12-18 01:04:58 +00:00
disk = { path = "../disk" }
fuse: extract FUSE as a crate from virtio/fs The current crate still require some work to be really reusable as a regular FUSE, i.e. with a new reader/writer against /dev/fuse. This change intends to focus on creating the crate, without trying to find the optimal interface, and still keep virtio/fs working. BUG=b:168305155 TEST=./build_test TEST=USE='asan fuzzer' emerge-hatch crosvm Change-Id: I8b623c9262221113b720c10125a6770763f14dc8 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2466484 Tested-by: Victor Hsieh <victorhsieh@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org> Commit-Queue: Victor Hsieh <victorhsieh@chromium.org>
2020-10-08 20:13:32 +00:00
fuse = { path = "../fuse" }
crosvm-fuzz: add hypervisor dependency for block_fuzzer https://crrev.com/c/3330204 changed the block fuzzer to depend on hypervisor but did not add the necessary reference to Cargo.toml. Add it to fix the fuzzer build. BUG=None TEST=Build crosvm ebuild with USE=fuzzer Fixes: 00f1c9fd468d ("Update to the latest pKVM ABI.") Change-Id: Ic90c6bdd29f87af1c78093a970056467e9c4c36e Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3364963 Reviewed-by: Dmitry Torokhov <dtor@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Commit-Queue: Daniel Verkamp <dverkamp@chromium.org>
2022-01-05 19:23:45 +00:00
hypervisor = { path = "../hypervisor" }
fuzz: update to use new cros fuzzing There is now infrastructure for running fuzzers in cros, use it. Change-Id: I53ec9e195b7062fdcc38b5186c1f3194031037f3 Signed-off-by: Dylan Reid <dgreid@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/1521667 Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org>
2019-03-13 21:21:44 +00:00
kernel_loader = { path = "../kernel_loader" }
Cargo.toml: avoid "*" versions for external crates Ensure that every Cargo.toml dependency on a third-party crates.io crate specifies at least a major version, or a minor version for 0.x crates, to ensure that if a new major version is published, it cannot cause API breaks. The versions are selected to match the ones already in Cargo.lock, so this should have no functional change, but it will help prevent new "*" versions from being introduced via copy-and-paste. For rationale, see the Cargo FAQ: <https://doc.rust-lang.org/cargo/faq.html#can-libraries-use--as-a-version-for-their-dependencies> `minijail`, `audio_streams`, and `cras` are left as "*" for now, since they have unusual situations (imported from a submodule and/or replaced at build time with ebuild magic). BUG=None TEST=tools/dev_container tools/presubmit TEST=verify Cargo.lock is unchanged Change-Id: Ifa18199f812f01d2d10bfb4146b3353c1a76527c Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/5555656 Reviewed-by: Frederick Mayle <fmayle@google.com> Commit-Queue: Daniel Verkamp <dverkamp@chromium.org>
2024-05-21 22:37:42 +00:00
libc = "0.2"
cros-fuzz: upgrade to rand_core 0.6 This is the version used by rand 0.8.x (and the latest available version as of this writing), so this allows us to upgrade crosvm-fuzz to rand 0.8 as well. BUG=b:236978141 TEST=tools/dev_container tools/run_tests --target=host TEST=USE='asan fuzzer' emerge-amd64-generic crosvm Change-Id: I297f6c17114b2b8e8f12d5dd9d35b071b91d6780 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3722780 Reviewed-by: Dennis Kempin <denniskempin@google.com> Commit-Queue: Daniel Verkamp <dverkamp@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com>
2022-06-23 23:06:24 +00:00
rand = "0.8"
Refactoring: Move common/base into base Executes the script in https://crrev.com/c/3530502 BUG=b:223206469 TEST=presubmit Change-Id: Ibeffdc8de0b2270f070e60bb2de8d9fdc78a2a6d Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3530503 Reviewed-by: Vikram Auradkar <auradkar@google.com> Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2022-03-16 19:16:04 +00:00
base = { path = "../base" }
crosvm: switch to upstream tempfile crate Use the crates.io implementation of tempfile instead of our own version. Our reimplementation is kept in the tree for now in case of dependencies outside of the crosvm tree; it can be removed later once those are fully switched over to the crates.io implementation. BUG=b:199204746 TEST=emerge-hatch crosvm Change-Id: I07d3404239302ab9a17f4ddc82a9479b256e4eb4 Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/3209839 Reviewed-by: Dennis Kempin <denniskempin@google.com> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Commit-Queue: Daniel Verkamp <dverkamp@chromium.org>
2021-09-22 20:10:11 +00:00
tempfile = "3"
fuzz: add USB descriptor parsing fuzzer The new USB descriptor parsing code is a nice candidate for a fuzzer, since it takes an arbitrary stream of bytes as input and parses it. BUG=chromium:987833 TEST=`USE='asan fuzzer' emerge-nami crosvm` Cq-Depend: chromium:1863465 Change-Id: I3bbdbf081e9a9dd590c781467f8bd44fa1dcab64 Signed-off-by: Daniel Verkamp <dverkamp@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1862117 Reviewed-by: Zach Reizner <zachr@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com>
2019-10-15 17:06:09 +00:00
usb_util = { path = "../usb_util" }
fuzzer: Add vm_memory to fuzzer Cargo After vm_memory was added, the dependency wasn't added. So it caused crosvm-fuzz fail to build. This patch adds the dependency. BUG=chromium:1110970 TEST=USE="asan fuzzer" emerge-amd64-generic crosvm Change-Id: Ic71243365ed8603928ba30bce7b7361ca368bf1c Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2327870 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Reviewed-by: Zach Reizner <zachr@chromium.org> Reviewed-by: Dylan Reid <dgreid@chromium.org> Tested-by: Daniel Verkamp <dverkamp@chromium.org> Commit-Queue: Tiancong Wang <tcwang@google.com>
2020-07-29 20:51:50 +00:00
vm_memory = { path = "../vm_memory" }
Cargo.toml: avoid "*" versions for external crates Ensure that every Cargo.toml dependency on a third-party crates.io crate specifies at least a major version, or a minor version for 0.x crates, to ensure that if a new major version is published, it cannot cause API breaks. The versions are selected to match the ones already in Cargo.lock, so this should have no functional change, but it will help prevent new "*" versions from being introduced via copy-and-paste. For rationale, see the Cargo FAQ: <https://doc.rust-lang.org/cargo/faq.html#can-libraries-use--as-a-version-for-their-dependencies> `minijail`, `audio_streams`, and `cras` are left as "*" for now, since they have unusual situations (imported from a submodule and/or replaced at build time with ebuild magic). BUG=None TEST=tools/dev_container tools/presubmit TEST=verify Cargo.lock is unchanged Change-Id: Ifa18199f812f01d2d10bfb4146b3353c1a76527c Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/5555656 Reviewed-by: Frederick Mayle <fmayle@google.com> Commit-Queue: Daniel Verkamp <dverkamp@chromium.org>
2024-05-21 22:37:42 +00:00
p9 = "0.2"
fuzz: Move cros-fuzz into crosvm-fuzz We no longer need to share cros-fuzz with ChromeOS. So we can consolidate our fuzzing code and reorganize it to work well with `cargo fuzz`. BUG=b:279217867 TEST=cargo +nightly fuzz build --fuzz-dir=crosvm-fuzz -O Change-Id: I75653961c6cbf251af9e54f894d6f20ea1218b53 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/4539922 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2023-05-16 17:07:20 +00:00
rand_core = {version = "0.6", features = ["std"]}
cfg-if = "1.0"
[target.'cfg(fuzzing)'.dependencies]
libfuzzer-sys = "=0.4.4"
Add kernel_loader fuzzing Add a top level fuzz directory. Other fuzz tests will be added here in subsequent commits. For now fuzzing must be run manually. Soon there will be a way to extract the fuzz artifacts and upload them to cluster fuzz. Change-Id: Iddfb55af78af6f412927b2221f22acb882069d36 Signed-off-by: Dylan Reid <dgreid@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/850851 Reviewed-by: Zach Reizner <zachr@chromium.org>
2018-01-04 18:28:32 +00:00
cros-fuzz: enable qcow feature A feature was recently added to allow qcow support to be disabled. Add that feature to the fuzzer default list, since qcow is one of the fuzzer targets. BUG=None TEST=cd crosvm-fuzz/; cargo build Change-Id: I5ba86e907201eac8ed1a1db420bdb42eea9815ec Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/3873273 Reviewed-by: Junichi Uekawa <uekawa@chromium.org> Commit-Queue: Junichi Uekawa <uekawa@chromium.org> Auto-Submit: David Stevens <stevensd@chromium.org> Tested-by: David Stevens <stevensd@chromium.org>
2022-09-05 01:28:02 +00:00
[features]
default = ["disk/qcow"]
fuzz: Add block device fuzzer Add the block device fuzzer that interprets the fuzz data input as follows: starting index 8 bytes command location 8 bytes command 16 bytes descriptors circular buffer 16 bytes * 3 Change-Id: I25b58e149bfb9a479fab7955c0ca25c67c590bf6 Signed-off-by: Dylan Reid <dgreid@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/900202 Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org>
2018-01-20 02:34:14 +00:00
[[bin]]
fuzz: Move fuzzers to standard `cargo fuzz` location This simplifies `cargo fuzz` usage. Fuzzers can be built with `cargo fuzz build` without any other arguments. BUG=b:279217867 TEST=`cargo fuzz build` Change-Id: I11b8a8ba4c2b3e2d1a42973699e4d9c3920635b6 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/4540001 Commit-Queue: Dennis Kempin <denniskempin@google.com> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2023-05-16 17:19:30 +00:00
name = "block_fuzzer"
path = "fuzz_targets/block_fuzzer.rs"
test = false
doc = false
fuzz: Add block device fuzzer Add the block device fuzzer that interprets the fuzz data input as follows: starting index 8 bytes command location 8 bytes command 16 bytes descriptors circular buffer 16 bytes * 3 Change-Id: I25b58e149bfb9a479fab7955c0ca25c67c590bf6 Signed-off-by: Dylan Reid <dgreid@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/900202 Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org>
2018-01-20 02:34:14 +00:00
fuzz: Add virtio-fs server fuzzer Add a fuzzer for the virtio-fs server, which is responsible for decoding a byte stream into FUSE messages. BUG=none TEST=run it with cros_fuzz Change-Id: Ic7695f2106d3f81e6cf09b98ffedc51831238f1e Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1865272 Tested-by: Chirantan Ekbote <chirantan@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Commit-Queue: Chirantan Ekbote <chirantan@chromium.org> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Reviewed-by: Stephen Barber <smbarber@chromium.org>
2019-10-16 03:08:13 +00:00
[[bin]]
fuzz: Move fuzzers to standard `cargo fuzz` location This simplifies `cargo fuzz` usage. Fuzzers can be built with `cargo fuzz build` without any other arguments. BUG=b:279217867 TEST=`cargo fuzz build` Change-Id: I11b8a8ba4c2b3e2d1a42973699e4d9c3920635b6 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/4540001 Commit-Queue: Dennis Kempin <denniskempin@google.com> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2023-05-16 17:19:30 +00:00
name = "fs_server_fuzzer"
path = "fuzz_targets/fs_server_fuzzer.rs"
test = false
doc = false
fuzz: Add virtio-fs server fuzzer Add a fuzzer for the virtio-fs server, which is responsible for decoding a byte stream into FUSE messages. BUG=none TEST=run it with cros_fuzz Change-Id: Ic7695f2106d3f81e6cf09b98ffedc51831238f1e Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1865272 Tested-by: Chirantan Ekbote <chirantan@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Commit-Queue: Chirantan Ekbote <chirantan@chromium.org> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org> Reviewed-by: Stephen Barber <smbarber@chromium.org>
2019-10-16 03:08:13 +00:00
fuzz: Add qcow fuzzing Fuzz using the data as a qcow image with an offset and value to write to the image. Change-Id: Iff8f2971ba716c93d978e33338ad62b5d487c115 Signed-off-by: Dylan Reid <dgreid@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/871132 Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org>
2019-03-13 21:24:18 +00:00
[[bin]]
fuzz: Move fuzzers to standard `cargo fuzz` location This simplifies `cargo fuzz` usage. Fuzzers can be built with `cargo fuzz build` without any other arguments. BUG=b:279217867 TEST=`cargo fuzz build` Change-Id: I11b8a8ba4c2b3e2d1a42973699e4d9c3920635b6 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/4540001 Commit-Queue: Dennis Kempin <denniskempin@google.com> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2023-05-16 17:19:30 +00:00
name = "p9_tframe_fuzzer"
path = "fuzz_targets/p9_tframe_fuzzer.rs"
test = false
doc = false
fuzz: Add qcow fuzzing Fuzz using the data as a qcow image with an offset and value to write to the image. Change-Id: Iff8f2971ba716c93d978e33338ad62b5d487c115 Signed-off-by: Dylan Reid <dgreid@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/871132 Tested-by: kokoro <noreply+kokoro@google.com> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org>
2019-03-13 21:24:18 +00:00
fuzz: add USB descriptor parsing fuzzer The new USB descriptor parsing code is a nice candidate for a fuzzer, since it takes an arbitrary stream of bytes as input and parses it. BUG=chromium:987833 TEST=`USE='asan fuzzer' emerge-nami crosvm` Cq-Depend: chromium:1863465 Change-Id: I3bbdbf081e9a9dd590c781467f8bd44fa1dcab64 Signed-off-by: Daniel Verkamp <dverkamp@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1862117 Reviewed-by: Zach Reizner <zachr@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com>
2019-10-15 17:06:09 +00:00
[[bin]]
fuzz: Move fuzzers to standard `cargo fuzz` location This simplifies `cargo fuzz` usage. Fuzzers can be built with `cargo fuzz build` without any other arguments. BUG=b:279217867 TEST=`cargo fuzz build` Change-Id: I11b8a8ba4c2b3e2d1a42973699e4d9c3920635b6 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/4540001 Commit-Queue: Dennis Kempin <denniskempin@google.com> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2023-05-16 17:19:30 +00:00
name = "qcow_fuzzer"
path = "fuzz_targets/qcow_fuzzer.rs"
test = false
doc = false
fuzz: add USB descriptor parsing fuzzer The new USB descriptor parsing code is a nice candidate for a fuzzer, since it takes an arbitrary stream of bytes as input and parses it. BUG=chromium:987833 TEST=`USE='asan fuzzer' emerge-nami crosvm` Cq-Depend: chromium:1863465 Change-Id: I3bbdbf081e9a9dd590c781467f8bd44fa1dcab64 Signed-off-by: Daniel Verkamp <dverkamp@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1862117 Reviewed-by: Zach Reizner <zachr@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com>
2019-10-15 17:06:09 +00:00
fuzz: Add virtqueue fuzzer BUG=none TEST=Run it with cros_fuzz Cq-Depend: chromium:1863177, chromium:1863178 Change-Id: I1a989d7b90116e210a8aae63205c5e8cf6b70faa Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1863889 Reviewed-by: Chirantan Ekbote <chirantan@chromium.org> Tested-by: Chirantan Ekbote <chirantan@chromium.org> Legacy-Commit-Queue: Commit Bot <commit-bot@chromium.org> Commit-Queue: Manoj Gupta <manojgupta@chromium.org>
2019-10-15 19:43:33 +00:00
[[bin]]
fuzz: Move fuzzers to standard `cargo fuzz` location This simplifies `cargo fuzz` usage. Fuzzers can be built with `cargo fuzz build` without any other arguments. BUG=b:279217867 TEST=`cargo fuzz build` Change-Id: I11b8a8ba4c2b3e2d1a42973699e4d9c3920635b6 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/4540001 Commit-Queue: Dennis Kempin <denniskempin@google.com> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2023-05-16 17:19:30 +00:00
name = "usb_descriptor_fuzzer"
path = "fuzz_targets/usb_descriptor_fuzzer.rs"
test = false
doc = false
fuzz: Add virtqueue fuzzer BUG=none TEST=Run it with cros_fuzz Cq-Depend: chromium:1863177, chromium:1863178 Change-Id: I1a989d7b90116e210a8aae63205c5e8cf6b70faa Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/1863889 Reviewed-by: Chirantan Ekbote <chirantan@chromium.org> Tested-by: Chirantan Ekbote <chirantan@chromium.org> Legacy-Commit-Queue: Commit Bot <commit-bot@chromium.org> Commit-Queue: Manoj Gupta <manojgupta@chromium.org>
2019-10-15 19:43:33 +00:00
Add kernel_loader fuzzing Add a top level fuzz directory. Other fuzz tests will be added here in subsequent commits. For now fuzzing must be run manually. Soon there will be a way to extract the fuzz artifacts and upload them to cluster fuzz. Change-Id: Iddfb55af78af6f412927b2221f22acb882069d36 Signed-off-by: Dylan Reid <dgreid@chromium.org> Reviewed-on: https://chromium-review.googlesource.com/850851 Reviewed-by: Zach Reizner <zachr@chromium.org>
2018-01-04 18:28:32 +00:00
[[bin]]
fuzz: Move fuzzers to standard `cargo fuzz` location This simplifies `cargo fuzz` usage. Fuzzers can be built with `cargo fuzz build` without any other arguments. BUG=b:279217867 TEST=`cargo fuzz build` Change-Id: I11b8a8ba4c2b3e2d1a42973699e4d9c3920635b6 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/4540001 Commit-Queue: Dennis Kempin <denniskempin@google.com> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2023-05-16 17:19:30 +00:00
name = "virtqueue_fuzzer"
path = "fuzz_targets/virtqueue_fuzzer.rs"
test = false
doc = false
fuzz: ensure sys_util path dependency is used When compiling a new-enough crosvm for fuzzing (after https://crrev.com/c/1749950), the build would fail with an error about importing two different version of sys_util: expected struct `sys_util::shm::SharedMemory`, found a different struct `sys_util::shm::SharedMemory` expected reference `sys_util::shm::SharedMemory (struct `sys_util::shm::SharedMemory`) found reference sys_util::shm::SharedMemory (struct `sys_util::shm::SharedMemory`) perhaps two different versions of crate `sys_util` are being used? Fix this by patching the version of sys_util used by audio_streams so that it also uses the path dependency instead of the sys_util from the dev-rust/sys_util ebuild in the fuzz-specific Cargo.toml. BUG=chromium:1057532 TEST=`USE='asan fuzzer' emerge-nami crosvm` Change-Id: I38252465a1111a9a8f643a59e36733016c5db99d Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosvm/+/2086401 Reviewed-by: Zach Reizner <zachr@chromium.org> Reviewed-by: Chirantan Ekbote <chirantan@chromium.org> Tested-by: kokoro <noreply+kokoro@google.com> Commit-Queue: Manoj Gupta <manojgupta@chromium.org>
2020-03-04 00:13:31 +00:00
fuzz: Move p9/fuzz into crosvm-fuzz This allows it to run on oss-fuzz as well. BUG=b:279217867 TEST=cargo +nightly fuzz run --fuzz-dir=crosvm-fuzz -O --features upstream-fuzz crosvm_p9_tframe_fuzzer Change-Id: Id0d24901d454967a94c4b7487916cb805e205450 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/4539920 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2023-05-16 16:55:22 +00:00
[[bin]]
fuzz: Move fuzzers to standard `cargo fuzz` location This simplifies `cargo fuzz` usage. Fuzzers can be built with `cargo fuzz build` without any other arguments. BUG=b:279217867 TEST=`cargo fuzz build` Change-Id: I11b8a8ba4c2b3e2d1a42973699e4d9c3920635b6 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/4540001 Commit-Queue: Dennis Kempin <denniskempin@google.com> Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2023-05-16 17:19:30 +00:00
name = "zimage_fuzzer"
path = "fuzz_targets/zimage_fuzzer.rs"
test = false
doc = false
fuzz: Move p9/fuzz into crosvm-fuzz This allows it to run on oss-fuzz as well. BUG=b:279217867 TEST=cargo +nightly fuzz run --fuzz-dir=crosvm-fuzz -O --features upstream-fuzz crosvm_p9_tframe_fuzzer Change-Id: Id0d24901d454967a94c4b7487916cb805e205450 Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/4539920 Reviewed-by: Daniel Verkamp <dverkamp@chromium.org>
2023-05-16 16:55:22 +00:00
Reference in a new issue Copy permalink