aboutsummaryrefslogtreecommitdiffstats
path: root/docs
Commit message (Collapse)AuthorAgeFilesLines
* docs: add KFuzzTest documentationEthan Graham2025-09-222-0/+255
| | | | | | | Add documentation for syzkaller's KFuzzTest integration, and a separate documentation file for the syz-kfuzztest program. Signed-off-by: Ethan Graham <ethangraham@google.com>
* kfuzztest: introduce syz_kfuzztest_run pseudo-syscallEthan Graham2025-09-221-0/+1
| | | | | | | | | | | | | Add syz_kfuzztest_run pseudo-syscall, KFuzzTest attribute, and encoding logic. KFuzzTest targets, which are invoked in the executor with the new syz_kfuzztest_run pseudo-syscall, require specialized encoding. To differentiate KFuzzTest calls from standard syzkaller calls, we introduce a new attribute called KFuzzTest or "kfuzz_test" in syzkaller descriptions that can be used to annotate calls. Signed-off-by: Ethan Graham <ethangraham@google.com>
* docs/contributing.md: remove deprecated instructions to use ghcrDaniel2025-09-221-13/+0
|
* docs: update USB documentationAndrey Konovalov2025-09-111-48/+127
|
* prog: pkg/compiler: docs: introduce the `no_squash` attributeAlexander Potapenko2025-09-091-0/+3
| | | | | | | | | | | | | | | | | The `no_squash` per-syscall attribute prevents the fuzzer from generating squashed arguments to a particular syscall. This is particularly helpful for pseudo-syscalls with elaborate arguments that are hard to reason about when they are squashed - e.g. for syz_kvm_add_vcpu() that takes a SYZOS program as an input. I've considered an alternative solution that prohibits ANY for all pseudo-syscalls. But there is a bunch of existing programs (both the tests and the repros) for syscalls like syz_mount_image() for which the benefit of not passing ANY is not immediately obvious. I therefore decided to go with an explicit attribute that can later be enforced for every pseudo-syscall at compile time.
* docs/setup_linux-host_qemu-vm_riscv64-kernel.md: short change description6eanut2025-08-211-1/+1
|
* docs/linux: add instructions for fuzzing Linux x86-64 kernel on Android ↵Jiaming Zhang2025-08-202-0/+205
| | | | | | | | virtual device Add new page for fuzzing Linux x86-64 kernel on Android virtual device. It explains how to build and run Android Generic System Image and Generic Kernel Image on Ubuntu host.
* docs: fix misspellingsTaras Madan2025-08-1910-14/+14
| | | | Gemini CLI experiments side effect.
* docs: update reporting_kernel_bugs.mdAlexander Potapenko2025-07-181-1/+1
| | | | Emphasize source files and line numbers
* doc: fix sourcedir variable nameMoritz Buhl2025-07-181-1/+1
| | | | Commit d34313c changed the sourcedir variable in the syz-extract command but did not adjust the text beneath it.
* docs/research.md: remove duplicate entriesDaniel2025-07-091-2/+0
| | | | Remove duplicate entry and annoucement by Daimeng Wang of the later published work "SyzVegas".
* docs/research.md: add reference to SyzGPT (ISSTA'25)QGrain2025-06-301-0/+1
| | | | | | SyzGPT is the first LLM-assisted kernel fuzzing framework aiming at generating effective seeds (Syz-programs) for the rarely covered syscalls during kernel fuzzing. Refer to our repo for more details.
* all: fix typosRoman A2025-06-162-3/+3
|
* docs/translations: add the translation of pseudo_syscalls.mdQGrain2025-05-091-0/+44
| | | | | | Finish the translation of docs/pseudo_syscalls.md, which has been proofread by HCTT translation team. Update to commit 0b3dad4606c0 ("pkg/vminfo: move feature checking to host").
* docs/translations: add the translation of adding_new_os_support.mdQGrain2025-05-091-0/+54
| | | | | | Finish the translation of docs/adding_new_os_support.md, which has been proofread by HCTT translation team. Update to commit db5852f9fc90 ("docs/adding_new_os_support.md: fix a typo").
* docs/translations: add the translation of db.mdQGrain2025-05-091-0/+62
| | | | | | Finish the translation of docs/db.md, which has been proofread by HCTT translation team. Update to commit 36c961ad9dc0 ("tools/syz-db: add more usage info for syz-db").
* doc: bisect: add `compiler_type` entryMatthieu Baerts2025-05-091-0/+1
| | | | | It looks like it is mandatory to avoid this error: unsupported bisect compiler:
* docs: update USB documentationAndrey Konovalov2025-04-301-54/+94
| | | | Many assorted updates.
* docs: mention that syz-verifier is brokenAleksandr Nogikh2025-04-281-0/+3
| | | | | | Don't confuse the users by making it look like the tool works. Fixes #5950.
* docs/troubleshooting.md: fix typoMirko Covizzi2025-04-251-1/+1
| | | | | | Fixes a typo. Signed-off-by: Mirko Covizzi <mrkcvzz@gmail.com>
* docs/syzbot_assets.md: fix typosMirko Covizzi2025-04-251-2/+2
| | | | | | Fixes a few typos. Signed-off-by: Mirko Covizzi <mrkcvzz@gmail.com>
* pkg/mgrconfig: add a sample syzkaller configAleksandr Nogikh2025-03-202-2/+2
| | | | | Add a sample syzkaller config with comments so that we could refer to it in the tutorials.
* docs/linux: update go versionzt20xx2025-03-191-3/+3
|
* docs/research.md: add A Little Goes a Long Way papers4nsec2025-03-171-0/+1
|
* docs/syscall_descriptions_syntax.md: short change description许佳凯2025-03-051-6/+18
|
* prog: annotate image assets with fsck logsFlorent Revest2024-12-091-1/+4
| | | | | | | | | | | | | | | | | | Syscall attributes are extended with a fsck command field which lets file system mount definitions specify a fsck-like command to run. This is required because all file systems have a custom fsck command invokation style. When uploading a compressed image asset to the dashboard, syz-manager also runs the fsck command and logs its output over the dashapi. The dashboard logs these fsck logs into the database. This has been requested by fs maintainer Ted Tso who would like to quickly understand whether a filesystem is corrupted or not before looking at a reproducer in more details. Ultimately, this could be used as an early triage sign to determine whether a bug is obviously critical.
* tools/syz-env: add local build optionStefan Wiehler2024-11-291-0/+6
| | | | Useful for testing local Dockerfile changes that have not been pushed yet.
* docs: update reproduction instructionsAleksandr Nogikh2024-11-299-92/+84
| | | | | | | 1. Get rid of executing_syzkaller_programs.md as it now mostly overlaps with reproducing_crashes.md. 2. Update the instructions on building the kernel with syzbot compilers. 3. Update the links throughout the documentation.
* docs: rewrite reproducing_crashes.mdAleksandr Nogikh2024-11-251-25/+169
| | | | | | | | | | Let's list all the possible ways of reproducing syzkaller crashes locally and keep the instructions of how to manually craft a reproducer at the bottom. Add information about the ktest tooling - now it also automates the reproduction of syzbot bugs. See the discussion at: https://groups.google.com/g/syzkaller/c/UTPrWcJfS8Q/m/K1YXz-f1AQAJ
* all: support || operator in syzlang if conditionJiao, Joey2024-11-131-1/+2
| | | | | | | | | | | ex. f3 field has logic or operator in if condition: conditional_struct { mask int32 f1 field1 (if[value[mask] & FIELD_FLAG1]) f2 int64 (if[value[mask] & FIELD_FLAG2]) f3 int64 (if[value[mask] == FIELD_FLAG1 || value[mask] == FIELD_FLAG2]) } [packed]
* docs: add two more talksAleksandr Nogikh2024-11-011-0/+2
|
* dashboard: allow multiple allowed authentication domainsFlorent Revest2024-10-101-1/+1
| | | | | | | In some situations, it could be useful to share access to the dashboard to multiple authentication domains. The current GlobalConfig format doesn't really allow it so this deprecates the existing field and add a new slice of allowed authentication domains.
* doc: update go version in syzkaller setupSabyrzhan Tasbolatov2024-09-281-3/+3
| | | | | | | go.mod has been bumped with go 1.22.1 version recently. So let's update the documentation as well. https://github.com/google/syzkaller/blob/master/docs/linux/setup.md#go-and-syzkaller
* docs: refine Linux bug reporting instructionsDmitry Vyukov2024-09-161-5/+33
| | | | Add more guidelines and be more concrete.
* docs/linux: update debug info kernel configjohn2024-09-051-0/+6
|
* all: add npm package to syz-envJoey Jiao2024-08-291-0/+13
| | | | | | | | | | act(https://github.com/nektos/act) is used to build github workflow locally. When running `act -j build` in local host, it reports: exec failed: unable to start container process: exec: "node": executable file not found in $PATH: unknown. Adding nodejs package can fix the build error. Updated docs with act usage too.
* docs/adding_new_os_support.md: fix a typoMarsman19962024-08-211-1/+1
|
* docs/translations: add the translation of linux/reporting_kernel_bugs.mdQGrain2024-08-191-0/+74
| | | | Finish the translation of docs/linux/reporting_kernel_bugs.md, which has also been proofread by HCTT translation group.
* docs/translations: add the translation of ↵QGrain2024-08-191-0/+174
| | | | | | linux/setup_linux-host_qemu-vm_arm64-kernel.md Upload translation of linux/setup_linux-host_qemu-vm_arm64-kernel.md, which is proofread by HCTT.
* docs: update information about syz-runtestAleksandr Nogikh2024-08-072-5/+5
| | | | | | This is no longer a standalone tool, but rather a syz-manager mode. Closes #4970.
* docs/translations: add the Chinese translation of ↵Dongliang Mu2024-07-291-0/+76
| | | | executing_syzkaller_programs.md
* docs/translations: finish translating research.mdDongliang Mu2024-07-291-0/+64
|
* docs/translations: add the translation of configuration.mdDongliang Mu2024-07-291-0/+9
|
* docs/translations: add the Chinese translation of bisect.mdDongliang Mu2024-07-291-0/+82
|
* docs/coverage.md: quote values, not paramTaras Madan2024-07-181-1/+1
|
* docs/translations: add the translation of syscall_descriptions_syntax.mdQGrain2024-07-181-0/+584
| | | | Finish the translation of docs/syscall_descriptions_syntax.md, which has also been proofread by HCTT translation group.
* docs/translations: move the notice at the top of these documentsDongliang Mu2024-07-185-10/+20
|
* docs/translations: add the translation of contributing.mdQGrain2024-07-161-0/+143
| | | | | | Finish the translation of docs/contributing.md, which has also been proofread by HCTT translation group. Please note that pr https://github.com/google/syzkaller/pull/5038 is obsolete and closed, so please ignore it.
* docs/translations: add the translation of linux/external_fuzzing_network.mdDongliang Mu2024-07-151-0/+67
| | | | | | Finish the translation of linux/external_fuzzing_network.md. Signed-off-by: Dongliang Mu <dzm91@hust.edu.cn>
* docs/translations: add a notice at the end of usage.mdDongliang Mu2024-07-151-0/+2
|