qtest/fuzz/virtio_net_fuzz.c

2  * virtio-net Fuzzing Target
9  * This work is licensed under the terms of the GNU GPL, version 2 or later.
10  * See the COPYING file in the top-level directory.
15 #include "standard-headers/linux/virtio_config.h"
17 #include "tests/qtest/libqos/virtio-net.h"
25 #define QVIRTIO_CTRL_VQ 2
27 static int sockfds[2];
46     QVirtioDevice *dev = net_if->vdev;  in virtio_net_fuzz_multi()
52         Size -= sizeof(vqa);  in virtio_net_fuzz_multi()
54         q = net_if->queues[vqa.queue % 3];  in virtio_net_fuzz_multi()
70              * trivial asserion failure on zero-zied buffer  in virtio_net_fuzz_multi()
90              * must manually run the main-loop for all the bhs to run, we use  in virtio_net_fuzz_multi()
93             while (!vqa.rx && q != net_if->queues[QVIRTIO_RX_VQ]) {  in virtio_net_fuzz_multi()
95                 /* Input led to a virtio_error */  in virtio_net_fuzz_multi()
96                 if (dev->bus->get_status(dev) & VIRTIO_CONFIG_S_NEEDS_RESET) {  in virtio_net_fuzz_multi()
99                 if (dev->bus->get_queue_isr_status(dev, q) &&  in virtio_net_fuzz_multi()
104                 g_assert(g_get_monotonic_time() - start_time  in virtio_net_fuzz_multi()
113         Size -= vqa.length;  in virtio_net_fuzz_multi()
134     g_assert_cmpint(ret, !=, -1);  in virtio_net_test_setup_socket()
137     g_string_append_printf(cmd_line, " -netdev socket,fd=%d,id=hs0 ",  in virtio_net_test_setup_socket()
146             .name = "virtio-net-socket-check-used",  in register_virtio_net_fuzz_targets()
147             .description = "Fuzz the virtio-net virtual queues. Wait for the "  in register_virtio_net_fuzz_targets()
152             "virtio-net",  in register_virtio_net_fuzz_targets()