| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | executor: remove NONFAILING from pseudo-syscalls | Dmitry Vyukov | 2020-07-15 | 1 | -3/+1 |
| | | | | | | | This is not needed anymore afer the previous commit. Fixes #1918 | ||||
| * | executor: add support for USB fuzzing on NetBSD | m00nbsd | 2020-05-19 | 1 | -8/+2 |
| | | |||||
| * | executor, sys/linux: syz_usb_ep_read/write accept endpoint address | Andrey Konovalov | 2020-05-15 | 1 | -2/+15 |
| | | | | | | This patch changes syz_usb_ep_read/write pseudo-syscalls to accept endpoint address as specified in its endpoint descriptor, instead of endpoint index. | ||||
| * | executor: stall unknown usb requests | Andrey Konovalov | 2020-05-15 | 1 | -3/+7 |
| | | | | | Also don't fail(), leave that to USB_DEBUG and analyze_control_request(). | ||||
| * | executor/usb: don't fail when ath9k is not enabled | Andrey Konovalov | 2020-04-07 | 1 | -1/+1 |
| | | |||||
| * | executor: add some comments to USB helper functions | Andrey Konovalov | 2020-03-28 | 1 | -0/+17 |
| | | |||||
| * | executor: split out Linux specific USB code | Andrey Konovalov | 2020-03-28 | 1 | -533/+27 |
| | | |||||
| * | executor, sys/linux: add ath9k usb descriptions | Andrey Konovalov | 2020-03-13 | 1 | -26/+106 |
| | | | | | | | | Among other things this changes timeout for USB programs from 2 to 3 seconds. ath9k fuzzing also requires ath9k firmware to be present, so system images need to be regenerated with the updated script. | ||||
| * | executor: provide explicit values for usb_raw_event_type | Andrey Konovalov | 2020-01-13 | 1 | -3/+3 |
| | | | | | To match the kernel uapi headers. | ||||
| * | executor: update raw gadget interface | Andrey Konovalov | 2019-12-11 | 1 | -5/+7 |
| | | |||||
| * | executor: extend USB debug messages | Andrey Konovalov | 2019-11-19 | 1 | -43/+435 |
| | | | | | | When USB_DEBUG is enabled, syzkaller crashes on unknown USB requests. This helps to find missing descriptions for particular USB classes. | ||||
| * | executor, pkg/host: update usb raw-gadget interface | Andrey Konovalov | 2019-11-15 | 1 | -18/+18 |
| | | | | | The patches are being upstreamed and the interface has changed. | ||||
| * | executor: update the list of raw usb events | Andrey Konovalov | 2019-11-05 | 1 | -2/+0 |
| | | | | | The number of reported event types changed. | ||||
| * | executor, pkg/host, dashboard/config: rename usb-fuzzer to usb raw-gadget | Andrey Konovalov | 2019-11-04 | 1 | -88/+87 |
| | | | | | The interface is being upstreamed and the name has changed. | ||||
| * | executor/usb: enable endpoints on SET_INTERFACE | Andrey Konovalov | 2019-10-21 | 1 | -49/+182 |
| | | | | | | This commit changes syz_usb_control_io to enable the relevant endpoints for the interface being set via a SET_INTERFACE request. | ||||
| * | executor: handle USB IN requests with wLength == 0 | Andrey Konovalov | 2019-09-19 | 1 | -3/+7 |
| | | |||||
| * | executor: always provide DEVICE_QUALIFIER USB descriptor | Andrey Konovalov | 2019-09-19 | 1 | -0/+16 |
| | | |||||
| * | executor/usb: use UTF16 encoding for default string | Andrey Konovalov | 2019-09-06 | 1 | -6/+18 |
| | | | | | Also respond with lang ID when string #0 is requested. | ||||
| * | executor/usb: fix null-ptr-deref in syz_usb_control_io | Andrey Konovalov | 2019-09-06 | 1 | -2/+2 |
| | | |||||
| * | executor/usb: improve debugging messages | Andrey Konovalov | 2019-09-06 | 1 | -9/+9 |
| | | |||||
| * | executor/usb: allow syz_usb_control_io args to be 0 | Andrey Konovalov | 2019-09-06 | 1 | -2/+7 |
| | | |||||
| * | sys/linux, executor: basic support for multiple USB interfaces | Andrey Konovalov | 2019-09-06 | 1 | -15/+26 |
| | | |||||
| * | executor: fix sigsegv for default USB string response | Andrey Konovalov | 2019-09-05 | 1 | -1/+1 |
| | | |||||
| * | sys/linux, executor: minor USB fixes (#1361) | Andrey Konovalov | 2019-08-23 | 1 | -3/+6 |
| | | |||||
| * | sys/linux: add basic USB CDC Ethernet descriptions (#1328) | Andrey Konovalov | 2019-08-09 | 1 | -1/+1 |
| | | |||||
| * | executor: add some USB realted TODOs (#1319) | Andrey Konovalov | 2019-08-07 | 1 | -0/+2 |
| | | | | Also simplify timeout related code a bit. | ||||
| * | sys/linux, executor: improve USB descriptions | Andrey Konovalov | 2019-07-16 | 1 | -6/+49 |
| | | | | | | 1. Change HID descriptions to allow devices to have two interrupt endpoints. 2. Remove unneeded responses to OUT control requests from descriptions. 3. Add some debugging code to detect and report missing descriptions. | ||||
| * | executor: fix out-of-bounds in USB fuzzing code | Andrey Konovalov | 2019-07-11 | 1 | -5/+9 |
| | | | | | | We might not have any string descriptors provided at all, use a hardcoded string in this case. | ||||
| * | executor: update USB fuzzing code to use new kernel API | Andrey Konovalov | 2019-07-11 | 1 | -42/+68 |
| | | | | | | The kernel API has changed and now differentiates between IN and OUT control requests. | ||||
| * | sys/linux, executor: add syz_usb_ep_read syzkall | Andrey Konovalov | 2019-07-01 | 1 | -19/+71 |
| | | | | | syz_usb_ep_read reads data from USB endpoints other than #0. | ||||
| * | sys/linux, executor: add basic USB HID fuzzing support | Andrey Konovalov | 2019-06-24 | 1 | -30/+73 |
| | | | | | | This commit adds the necessary descriptions and executor adjustments to enable targeted fuzzing of the enumeration process of USB HID devices. | ||||
| * | executor: fix another compiler warning | Andrey Konovalov | 2019-04-25 | 1 | -1/+1 |
| | | |||||
| * | executor: fix compiler warning | Andrey Konovalov | 2019-04-24 | 1 | -2/+2 |
| | | |||||
| * | executor: use NONFAILING in common_usb.h | Andrey Konovalov | 2019-04-23 | 1 | -105/+130 |
| | | | | | Also move some code to helper functions. | ||||
| * | executor: adjust waiting time for all usb syzcalls | Andrey Konovalov | 2019-04-23 | 1 | -2/+0 |
| | | | | | | | Allow 2000 ms of waiting time for syz_usb_connect and and the same time for the whole program is this syzkall is present. Allow 200 ms of waiting time for syz_usb_disconnect. Remove sleep from syz_usb_control_io. | ||||
| * | all: add basic USB fuzzing support | Andrey Konovalov | 2019-04-11 | 1 | -0/+452 |
| This commits implements 4 syzcalls: syz_usb_connect, syz_usb_io_control, syz_usb_ep_write and syz_usb_disconnect. Those syzcalls are used to emit USB packets through a custom GadgetFS-like interface (currently exposed at /sys/kernel/debug/usb-fuzzer), which requires special kernel patches. USB fuzzing support is quite basic, as it mostly covers only the USB device enumeration process. Even though the syz_usb_ep_write syzcall does allow to communicate with USB endpoints after the device has been enumerated, no coverage is collected from that code yet. | |||||
