10  * See the COPYING file in the top-level directory.
23 #include "qemu/main-loop.h"
50     while (g_main_context_pending(NULL) && i-- > 0) {  in flush_events()
77         if (g_strcmp0(tmp->target->name, target->name) == 0) {  in fuzz_add_target()
79                     target->name);  in fuzz_add_target()
84     target_state->target = g_new0(FuzzTarget, 1);  in fuzz_add_target()
85     *(target_state->target) = *target;  in fuzz_add_target()
93     printf("Usage: %s --fuzz-target=FUZZ_TARGET [LIBFUZZER ARGUMENTS]\n", path);  in usage()
101         printf(" * %s  : %s\n", tmp->target->name,  in usage()
102                 tmp->target->description);  in usage()
104     printf("Alternatively, add -target-FUZZ_TARGET to the executable name\n\n"  in usage()
122         if (strcmp(tmp->target->name, name) == 0) {  in fuzz_get_target()
123             return tmp->target;  in fuzz_get_target()
134                                  unsigned int seed)  in LLVMFuzzerCustomCrossOver()  argument
136     if (fuzz_target->crossover) {  in LLVMFuzzerCustomCrossOver()
137         return fuzz_target->crossover(data1, size1, data2, size2, out,  in LLVMFuzzerCustomCrossOver()
138                                       max_out_size, seed);  in LLVMFuzzerCustomCrossOver()
143 /* Executed for each fuzzing-input */
147      * Do the pre-fuzz-initialization before the first fuzzing iteration,  in LLVMFuzzerTestOneInput()
154     if (!pre_fuzz_done && fuzz_target->pre_fuzz) {  in LLVMFuzzerTestOneInput()
155         fuzz_target->pre_fuzz(fuzz_qts);  in LLVMFuzzerTestOneInput()
159     fuzz_target->fuzz(fuzz_qts, Data, Size);  in LLVMFuzzerTestOneInput()
179     target_name = strstr(**argv, "-target-");  in LLVMFuzzerInitialize()
181         target_name += strlen("-target-");  in LLVMFuzzerInitialize()
184         if (!strstr(target_name, "--fuzz-target=")) {  in LLVMFuzzerInitialize()
187         target_name += strlen("--fuzz-target=");  in LLVMFuzzerInitialize()
207     if (fuzz_target->pre_vm_init) {  in LLVMFuzzerInitialize()
208         fuzz_target->pre_vm_init();  in LLVMFuzzerInitialize()
211     /* Run QEMU's system main with the fuzz-target dependent arguments */  in LLVMFuzzerInitialize()
212     cmd_line = fuzz_target->get_init_cmdline(fuzz_target);  in LLVMFuzzerInitialize()
213     g_string_append_printf(cmd_line, " %s -qtest /dev/null ",  in LLVMFuzzerInitialize()
214                            getenv("QTEST_LOG") ? "" : "-qtest-log none");  in LLVMFuzzerInitialize()
218     wordexp(cmd_line->str, &result, 0);  in LLVMFuzzerInitialize()
230     /* re-enable the rcu atfork, which was previously disabled in qemu_init */  in LLVMFuzzerInitialize()