ivampiresp/Spdk
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test/llvm_vfio_fuzz: fuzz VFIO_USER_REGION_WRITE/READ

Browse Source 
This test try to read/write VFIO_PCI_BAR0_REGION_INDEX register at
at random offset and with random data. A single test use four bytes of
data because most of the registers are of this size or double of that.

Signed-off-by: Sebastian Brzezinka <sebastian.brzezinka@intel.com>
Change-Id: I2b541258a8514f24900e8cdad8af791e01de4cfc
Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/14625
Tested-by: SPDK CI Jenkins <sys_sgci@intel.com>
Reviewed-by: Konrad Sztyber <konrad.sztyber@intel.com>
Reviewed-by: Tomasz Zawadzki <tomasz.zawadzki@intel.com>
Reviewed-by: Jim Harris <james.r.harris@intel.com>
This commit is contained in:
Sebastian Brzezinka 2022-09-22 14:31:32 +02:00 committed by Tomasz Zawadzki
parent 66e8a09181
commit ddd13ef9a4
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
test/app/fuzz/llvm_vfio_fuzz/llvm_vfio_fuzz.c
View File

@ -12,6 +12,7 @@
#include "spdk/nvme.h"
#include "spdk/likely.h"
#include "spdk/file.h"
#include "spdk/util.h"
#include "spdk/vfio_user_pci.h"
#include <linux/vfio.h>
@ -51,7 +52,25 @@ fuzz_vfio_user_version(const uint8_t *data, size_t size, struct vfio_device *dev
sizeof(payload), NULL, 0);
}
static int
fuzz_vfio_user_region_rw(const uint8_t *data, size_t size, struct vfio_device *dev)
{
uint8_t buf[4];
uint64_t offset = 0;
offset = ((uint64_t)data[0] << 8) + (uint64_t)data[1];
offset = (SPDK_ALIGN_FLOOR(offset, 4)) % 4096;
memcpy(buf, &data[2], sizeof(buf));
/* writes to BAR0 depending on the register, therefore the return value is never checked */
spdk_vfio_user_pci_bar_access(dev, VFIO_PCI_BAR0_REGION_INDEX, offset, sizeof(buf),
&buf, true);
return spdk_vfio_user_pci_bar_access(dev, VFIO_PCI_BAR0_REGION_INDEX, offset, sizeof(buf),
&buf, false);
}
static struct fuzz_type g_fuzzers[] = {
{ .fn = fuzz_vfio_user_region_rw, .bytes_per_cmd = 6},
{ .fn = fuzz_vfio_user_version, .bytes_per_cmd = 4},
{ .fn = NULL, .bytes_per_cmd = 0}
};