jcs.org
qemu with hax to log dma reads & writes
jcs.org/2018/11/12/vfio
1QEMU_PROG_FUZZ=qemu-fuzz-$(TARGET_NAME)$(EXESUF)
2
3fuzz-obj-y += tests/qtest/libqtest.o
4fuzz-obj-y += $(libqos-obj-y)
5fuzz-obj-y += tests/qtest/fuzz/fuzz.o # Fuzzer skeleton
6fuzz-obj-y += tests/qtest/fuzz/fork_fuzz.o
7fuzz-obj-y += tests/qtest/fuzz/qos_fuzz.o
8fuzz-obj-y += tests/qtest/fuzz/qtest_wrappers.o
9
10# Targets
11fuzz-obj-$(CONFIG_PCI_I440FX) += tests/qtest/fuzz/i440fx_fuzz.o
12fuzz-obj-$(CONFIG_VIRTIO_NET) += tests/qtest/fuzz/virtio_net_fuzz.o
13fuzz-obj-$(CONFIG_SCSI) += tests/qtest/fuzz/virtio_scsi_fuzz.o
14
15FUZZ_CFLAGS += -I$(SRC_PATH)/tests -I$(SRC_PATH)/tests/qtest
16
17# Linker Script to force coverage-counters into known regions which we can mark
18# shared
19FUZZ_LDFLAGS += -Xlinker -T$(SRC_PATH)/tests/qtest/fuzz/fork_fuzz.ld
20
21FUZZ_LDFLAGS += -Wl,-wrap,qtest_inb
22FUZZ_LDFLAGS += -Wl,-wrap,qtest_inw
23FUZZ_LDFLAGS += -Wl,-wrap,qtest_inl
24FUZZ_LDFLAGS += -Wl,-wrap,qtest_outb
25FUZZ_LDFLAGS += -Wl,-wrap,qtest_outw
26FUZZ_LDFLAGS += -Wl,-wrap,qtest_outl
27FUZZ_LDFLAGS += -Wl,-wrap,qtest_readb
28FUZZ_LDFLAGS += -Wl,-wrap,qtest_readw
29FUZZ_LDFLAGS += -Wl,-wrap,qtest_readl
30FUZZ_LDFLAGS += -Wl,-wrap,qtest_readq
31FUZZ_LDFLAGS += -Wl,-wrap,qtest_writeb
32FUZZ_LDFLAGS += -Wl,-wrap,qtest_writew
33FUZZ_LDFLAGS += -Wl,-wrap,qtest_writel
34FUZZ_LDFLAGS += -Wl,-wrap,qtest_writeq
35FUZZ_LDFLAGS += -Wl,-wrap,qtest_memread
36FUZZ_LDFLAGS += -Wl,-wrap,qtest_bufread
37FUZZ_LDFLAGS += -Wl,-wrap,qtest_memwrite
38FUZZ_LDFLAGS += -Wl,-wrap,qtest_bufwrite
39FUZZ_LDFLAGS += -Wl,-wrap,qtest_memset