aboutsummaryrefslogtreecommitdiffstats
path: root/docs
Commit message (Collapse)AuthorAgeFilesLines
...
* docs: add links to syzbot_assets.mdAleksandr Nogikh2023-07-251-0/+7
|
* docs: add syzbot_assets.mdAleksandr Nogikh2023-07-251-0/+174
| | | | There have been missing practical instructions on how to use the assets.
* docs: typo fixesDavidlohr Bueso2023-06-0713-25/+25
| | | | Fix various typos within the documentation directory.
* docs/linux/qemu: fix the link to ARM64 toolchainNecip Fazil Yildiran2023-06-071-1/+1
|
* docs: add KIT referenceCongyu Liu2023-05-311-0/+1
|
* docs: add SyzDescribe reference郝宇 (Yu Hao)2023-05-301-0/+1
|
* docs: describe bug labelsAleksandr Nogikh2023-04-271-0/+62
|
* pkg/bisect: set linux gcc bisection cutoff to v4.18Space Meyer2023-04-201-1/+1
| | | | | | | | | | The buildroot images deployed after #2820 can only boot v4.19+ kernels. This has caused lots of bad bisection results, see #3224. We either need a new universal image or a kernel version dependant image selection. For now we stop at v4.19+. FATAL: kernel too old [ 8.076311] Kernel panic - not syncing: Attempted to kill init! exitcode=0x00007f00
* docs: add GREBE referenceSpace Meyer2023-04-171-0/+1
| | | | | | | | | Tl;Dr They try to identify the data structure involved in a crash, e.g. by parsing the WARN_ON condition. They modify the compiler instrumentation to overwrite some of the upper bits in the program counters, for program counters that modify the data structure. Then they guide coverage by these magic PCs. They do this to find other failure modes of buggy code found by syzkaller.
* docs: add precise race detection research paperDmitry Vyukov2023-04-171-0/+1
|
* docs: add enriched corpus referencePalash Oswal2023-04-121-0/+1
|
* tools/create-image.sh: upgrade default release to bullseyeAndrew Donnellan2023-04-126-23/+25
| | | | | | | | | | | | bullseye has been the current Debian stable release since 2021, and stretch is now well and truly in the LTS support phase. Change the default release in create-image.sh to bullseye. Also update most other references to stretch in the documentation and elsewhere (there's still a few references we don't change because they're links to images etc). Signed-off-by: Andrew Donnellan <ajd@linux.ibm.com>
* docs: minor updates to setup_ubuntu-host_qemu-vm_x86-64-kernel.mdAleksandr Nogikh2023-03-281-3/+3
| | | | | Recommend CONFIG_DEBUG_INFO_DWARF4 (syzkaller doesn't work with DWARF5) and bump the kernel version.
* tools/syz-cover: allow for exporting source line coverage infoZubin Mithra2023-03-101-0/+6
| | | | | | | | | | | | | | | | Add a `json` CLI flag that allows for writing out a JSON file with the following coverage information. * Module * Filename * Covered source lines * Uncovered source lines * Both source lines This can be used to view syzkaller coverage information on other source browsing/viewing tools. Usage: $ ./syz-cover -kernel_obj <path/to/vmlinux> -json <output_json> rawcover
* docs: fix broken linkvwvw2023-03-071-1/+1
|
* docs: update the patch testing documentationAleksandr Nogikh2023-03-071-3/+18
| | | | | | | Add an example of an inlined patch testing request. Add a link to the real-word #syz test commands. Remove the mention of delays due to bisections -- it's no longer the case.
* docs: document the bug subsystems featureAleksandr Nogikh2023-02-241-0/+25
|
* docs/linux/setup.md: update go versionTaras Madan2023-02-241-3/+3
|
* docs/starnix: fix typo in manager config fileJuampi Miceli2023-01-201-1/+1
|
* vm/starnix: add support for fuzzing starnix (#3624)juanPabloMiceli2023-01-191-0/+66
| | | | | | | This commit adds a new VM for fuzzing starnix. The VM will boot a fuchsia image using the `ffx` tool and will connect to an adb server inside it. Fuzzing will be done using HostFuzzer mode due to some features not being implemented yet in starnix. Once this is possible, fuzzing will be performed without HostFuzzer mode. Co-authored-by: Juampi Miceli <jpmiceli@google.com>
* tools: upgrade Buildroot image versionAleksandr Nogikh2022-11-241-0/+6
| | | | | | | | | | There are two reasons: - The 2022.02 version does not longer build with the latest versions of the build tools. - The latest version was tested to work fine with the scp changes that came with OpenSSH 9.0 (the use of the SFTP protocol). Document the problem with scp in the troubleshooting guide.
* docs/linux: fix trivial typos in ubuntu-host_qemu-vmSean Deaton2022-11-231-7/+7
| | | | | | | | Corrected typos: - lastest->latest - exatra->extra Add languages to fenced code blocks in line with MD040 linting.
* prog: introduce new Base64 syntax for dataHrutvik Kanabar2022-11-211-1/+1
| | | | | | | | | | | | | The new "$..." syntax is read as a Base64 encoding binary data. Note that users cannot specify the size of the Base64 syntax using the `"..."/<size>` notation. When serialising programs to human-readable form, only compressed types (determined by `IsCompressed()`) are represented using the new Base64 notation. Also add a couple of serialisation tests, checking behaviour for compressed and non-compressed types.
* prog, pkg/compiler: add `BufferCompressed` buffer type & `compressed_image` ↵Hrutvik Kanabar2022-11-211-1/+5
| | | | | | | | | | | | | | | | | | | | | | | | builtin Create the `BufferCompressed` kind of `BufferType`, which will be used to represent compressed data. Create the corresponding `compressed_image` syzlang builtin, which is backed by `BufferCompressed`. For now, no syscalls use this feature - this will be introduced in future commits. We have to be careful to decompress the data before mutating, and re-compress before storing. We make sure that any deserialised `BufferCompressed` data is valid too. `BufferCompressed` arguments are mutated using a generic heatmap. In future, we could add variants of `BufferCompressed` or populate the `BufferType` sub-kind, using it to choose different kinds of heatmap for different uncompressed data formats. Various operations on compressed data must be forbidden, so we check for `BufferCompressed` in key places. We also have to ensure `compressed_image` can only be used in syscalls that are marked `no_{generate,minimize}`. Therefore, we add a generic compiler check which allows type descriptions to require attributes on the syscalls which use them.
* docs/syzbot.md: add gcc 10.2Taras Madan2022-11-101-0/+1
| | | | | Built by https://github.com/tarasmadan/gcc-10.2/blob/8a0c67cd9474ab3bf02bf236467f4e01396e342a/build_scripts/build_gcc_10.sh
* pkg/build: update fuchsia tools target nameLaura Peskin2022-10-312-3/+3
| | | | | Fuchsia's //bundles:tools target was renamed to //bundles/tools.
* doc: added info about vscode extension for syz-langAndrey Artemiev2022-10-281-1/+1
|
* docs: add HotBPF referenceDmitry Vyukov2022-10-131-0/+1
|
* docs/fuchsia: look up Fuchsia dependency paths dynamicallyCameron Finucane2022-10-101-7/+17
| | | | For context, see fxbug.dev/110060
* prog: add an attribute for syscalls which should not be minimizedHrutvik Kanabar2022-09-221-0/+1
| | | | | | | | | | Create a `no_minimize` attribute to be used with syscalls that `syzkaller` should not try to modify when minimizing a program that produces a bug. The intention is to use this with syscalls that are expensive to minimize, such as `syz_mount_image`. Currently there are no `no_minimize` syscalls, but the next commit will add some.
* prog: add an attribute for syscalls which should not be generatedHrutvik Kanabar2022-09-221-0/+1
| | | | | | | | | | | | | | Create a `no_generate` attribute to be used with syscalls that `syzkaller` should not try to generate from scratch. In other words, `syzkaller` will only use seeds of this call. This will be useful for syscalls which are unlikely to be correctly generated. In particular, prevent these syscalls from being included in the choice table or from being considered as possible resource constructors. Also add a test which will attempt to generate programs with a bias towards `no_generate` syscalls, and flag up any that make it into result programs. Currently there are no `no_generate` syscalls, but the next commit will add some.
* docs: add two more talks from LPC'22Aleksandr Nogikh2022-09-131-0/+2
|
* docs: add reference to KASPER researchDmitry Vyukov2022-09-131-0/+1
|
* docs: fix a typo in syz_testbed.mdAleksandr Nogikh2022-09-061-1/+1
| | | | The right target name is "syz-manager", not "syzkaller".
* docs/fuchsia: building without cleaning (#3287)Ange Albertini2022-08-291-1/+1
|
* docs/freebsd: update the default branch of freebsd-srcP1umer2022-08-261-1/+1
|
* docs: fix syntaxyuawn2022-08-171-1/+1
|
* docs/fuchsia: make --debug optional (#3283)Chris Palmer2022-08-091-3/+15
| | | | | See https://bugs.fuchsia.dev/p/fuchsia/issues/detail?id=106099. Co-authored-by: Chris Palmer <palmer@google.com>
* docs/fuchsia: clarify regarding absolute pathnamesChris Palmer2022-08-052-1/+4
|
* docs/fuchsia: partially automate the setup process (#3266)Chris Palmer2022-07-262-62/+256
| | | | | Also enhance the README.md somewhat. Co-authored-by: Chris Palmer <palmer@google.com>
* docs: add reference to VaultFuzzerDmitry Vyukov2022-07-251-0/+1
|
* docs/fuchsia: add caveat to Fuchsia readmeCameron Finucane2022-07-251-26/+41
| | | | | | | | | Fuchsia has not been properly supported for a while now, and the documentation suggesting so has been a source of confusion. This updates the README to add a caveat, while also doing some minor cleanup in the process. For more context, see https://fxbug.dev/101134.
* pkg/cover/backend/gvisor: relax parse regexp and add gvisor_test.go (#3259)Taras Madan2022-07-221-0/+21
| | | | We have multiple file path representations now. + tests to cover all 3 scenarios and doc update
* docs/linux: updated kvm config commandmischa2022-07-111-1/+1
| | | | 'make kvmconfig' was replaced with 'make kvm_guest.config' after linux 5.10.
* docs: add syzbot instructionsSpace Meyer2022-07-082-0/+370
| | | | Fixes #1043
* docs: add a reference to Hydra paperDmitry Vyukov2022-07-081-0/+1
|
* docs: add reference to Janus paperDmitry Vyukov2022-06-271-0/+1
|
* docs/fuchsia: fix image build commandsKouame Behouba Manassé2022-06-221-4/+6
|
* docs/fuchsia: update README.md to fix fuchsia build with kasan enabledKouame Behouba Manassé2022-06-221-5/+8
|
* docs: updated required go versionmischa2022-05-231-1/+1
| | | | Bumped the required go version to 1.16 or higher.