| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | executor: fix another compiler warning | Andrey Konovalov | 2019-04-25 | 1 | -1/+1 |
| | | |||||
| * | executor: fix compiler warning | Andrey Konovalov | 2019-04-24 | 1 | -2/+2 |
| | | |||||
| * | executor: use NONFAILING in common_usb.h | Andrey Konovalov | 2019-04-23 | 1 | -105/+130 |
| | | | | | Also move some code to helper functions. | ||||
| * | executor: adjust waiting time for all usb syzcalls | Andrey Konovalov | 2019-04-23 | 1 | -2/+0 |
| | | | | | | | Allow 2000 ms of waiting time for syz_usb_connect and and the same time for the whole program is this syzkall is present. Allow 200 ms of waiting time for syz_usb_disconnect. Remove sleep from syz_usb_control_io. | ||||
| * | all: add basic USB fuzzing support | Andrey Konovalov | 2019-04-11 | 1 | -0/+452 |
| This commits implements 4 syzcalls: syz_usb_connect, syz_usb_io_control, syz_usb_ep_write and syz_usb_disconnect. Those syzcalls are used to emit USB packets through a custom GadgetFS-like interface (currently exposed at /sys/kernel/debug/usb-fuzzer), which requires special kernel patches. USB fuzzing support is quite basic, as it mostly covers only the USB device enumeration process. Even though the syz_usb_ep_write syzcall does allow to communicate with USB endpoints after the device has been enumerated, no coverage is collected from that code yet. | |||||
