| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | repro: factor out of syz-repro tool | Dmitry Vyukov | 2016-11-19 | 1 | -308/+3 |
| | | | | | | | | | Factor out repro logic from syz-repro tool, so that it can be used in syz-manager. Also, support sandboxes in code generated by csoure. This is required to reproduce crashes that require e.g. namespace sandbox. | ||||
| * | csource: teach how to execute pseudo syz_ syscalls | Dmitry Vyukov | 2016-08-28 | 1 | -106/+3 |
| | | | | | Update #59 | ||||
| * | executor, csource: share some common code between executor and csource | Dmitry Vyukov | 2016-08-28 | 1 | -35/+7 |
| | | |||||
| * | executor: add experimental mode to skip paging faults | Dmitry Vyukov | 2016-08-22 | 1 | -27/+65 |
| | | | | | | | | Ignore SIGSEGV/SIGBUS during copyin/copyout of arguments. The memory may not be addressable. The ignoring allows to pass partially-addressable input data to kernel. It's unclear if it's a good idea or not yet. | ||||
| * | executor: revive setuid sandbox | Dmitry Vyukov | 2016-07-01 | 1 | -15/+76 |
| | | | | | | | | | | | | | | | The new namespace-based sanboxing is good, but it's not always what one wants (and also requires special kernel configs). Change dropprivs config value to sandbox, which can have different values (currently: none, setuid, namespace). Setuid mode uses setuid(nobody) before fuzzing as before. In future we can add more sandboxing modes or, say, extend -sandbox=setuid to -sandbox=setuid:johndoe to impersonolate into given user. | ||||
| * | executor: add support for 386 arch (COMPAT syscalls) | Dmitry Vyukov | 2016-06-30 | 1 | -23/+23 |
| | | | | | | This is not fully working now: e.g. prog and sys packages assume that pointer size is 8. But at least it compiles and works. | ||||
| * | executor: don't consider failures to remove temp dirs as crashes | Dmitry Vyukov | 2016-06-28 | 1 | -6/+6 |
| | | | | | | | | There is a number of known, low-frequency reasons for failures in remove_dir. Make the failures non-fatal. Fixes #45 | ||||
| * | executor: prevent test processes from ptracing parent processes | Dmitry Vyukov | 2016-03-10 | 1 | -0/+17 |
| | | |||||
| * | executor: ignore NOFILE errors during cleanup | Dmitry Vyukov | 2016-03-10 | 1 | -1/+8 |
| | | | | | This is a common source of false positives. | ||||
| * | executor: ignore the case when test process kills loop process | Dmitry Vyukov | 2016-03-10 | 1 | -1/+2 |
| | | | | | This lead to lots of false positives. | ||||
| * | executor: make loop killing non-fatal | Dmitry Vyukov | 2016-03-10 | 1 | -1/+4 |
| | | |||||
| * | ipc: give executor some time to startup | Dmitry Vyukov | 2016-01-27 | 1 | -1/+5 |
| | | | | | | | Namespace-based sandbox can take some time to setup. In particular, lots of parallel executors block on net namespace creation. | ||||
| * | sys: open a bunch of new devices | Dmitry Vyukov | 2016-01-26 | 1 | -2/+4 |
| | | |||||
| * | sys: allow to open all devices as stopgap | Dmitry Vyukov | 2016-01-24 | 1 | -11/+23 |
| | | |||||
| * | executor: restore nodropprivs mode | Dmitry Vyukov | 2016-01-23 | 1 | -15/+24 |
| | | |||||
| * | executor: new namespace-based sandbox | Dmitry Vyukov | 2016-01-22 | 1 | -73/+208 |
| | | |||||
| * | vm/adb: use a more reliable way to reboot devices | Dmitry Vyukov | 2016-01-20 | 1 | -1/+6 |
| | | |||||
| * | executor: start moving sandboxing code into executor | Dmitry Vyukov | 2016-01-20 | 1 | -0/+14 |
| | | |||||
| * | executor: adopt for new kcov | Dmitry Vyukov | 2016-01-19 | 1 | -14/+16 |
| | | | | | Now kcov exposes only uintptr-sized PCs. | ||||
| * | sys: describe more dri syscalls | Dmitry Vyukov | 2016-01-16 | 1 | -0/+6 |
| | | |||||
| * | executor: reportat after clang-format bug fix | Dmitry Vyukov | 2016-01-15 | 1 | -30/+12 |
| | | | | | http://reviews.llvm.org/rL257763 | ||||
| * | executor: don't create all threads when spot a root syscall | Dmitry Vyukov | 2016-01-13 | 1 | -1/+1 |
| | | |||||
| * | executor: don't print all waitpid debug messages | Dmitry Vyukov | 2016-01-13 | 1 | -2/+5 |
| | | |||||
| * | sys: introduce a generic syz_open_dev helper syscall | Dmitry Vyukov | 2016-01-13 | 1 | -29/+18 |
| | | |||||
| * | sys: add support for /dev/snd/control | Dmitry Vyukov | 2016-01-13 | 1 | -1/+17 |
| | | |||||
| * | sys: support /dev/snd/seq | Dmitry Vyukov | 2016-01-11 | 1 | -0/+6 |
| | | |||||
| * | executor: use mknodat instead of mknod (the latter is not implemented on ↵ | Dmitry Vyukov | 2016-01-11 | 1 | -1/+1 |
| | | | | | android) | ||||
| * | sys: add kvm support | Dmitry Vyukov | 2016-01-08 | 1 | -17/+31 |
| | | |||||
| * | executor: fix some bugs found by clang | Dmitry Vyukov | 2015-12-31 | 1 | -1/+4 |
| | | |||||
| * | executor: get rid of sigtimedwait | Dmitry Vyukov | 2015-12-24 | 1 | -43/+18 |
| | | | | | | Wait with spin loop instead. See the comment for explanation. | ||||
| * | executor: don't use WUNTRACED in wait | Dmitry Vyukov | 2015-12-24 | 1 | -3/+3 |
| | | | | | | | | WUNTRACED wait returns when child has stopped. That's not what we want to wait for. If it's stopped we need to timeout wait and kill the stopped child. | ||||
| * | prog: remove padding checking | Dmitry Vyukov | 2015-12-23 | 1 | -54/+2 |
| | | | | | | So far it has found only false positives. Let's leave this to KMSAN. | ||||
| * | executor: fix collide mode | Dmitry Vyukov | 2015-12-23 | 1 | -1/+1 |
| | | | | | Don't wait for every other call. | ||||
| * | add a flag to disable setpgid syscall | Dmitry Vyukov | 2015-12-17 | 1 | -46/+46 |
| | | | | | It is broken on some of our test systems. | ||||
| * | executor: export syscall execution results | Dmitry Vyukov | 2015-12-17 | 1 | -0/+7 |
| | | | | | Errno can be used to guide fuzzing, or detect not implemented syscalls. | ||||
| * | executor: allow to wait for child processes without sigtimedwait | Dmitry Vyukov | 2015-12-17 | 1 | -1/+24 |
| | | | | | We've hit 2 systems that mishandle sigtimedwait. | ||||
| * | sys: automatically add padding to structs | Dmitry Vyukov | 2015-12-17 | 1 | -9/+68 |
| | | |||||
| * | executor: switch to ioctl's instead of writes | Dmitry Vyukov | 2015-12-03 | 1 | -10/+13 |
| | | |||||
| * | executor: execute mount under root | Dmitry Vyukov | 2015-11-30 | 1 | -0/+2 |
| | | |||||
| * | executor: fix build | Dmitry Vyukov | 2015-11-29 | 1 | -7/+5 |
| | | |||||
| * | executor: switch to new coverage | Dmitry Vyukov | 2015-11-28 | 1 | -54/+62 |
| | | |||||
| * | executor: prevent programs to mess with fuzzer fds | Dmitry Vyukov | 2015-11-20 | 1 | -0/+8 |
| | | |||||
| * | add fuse support | Dmitry Vyukov | 2015-11-19 | 1 | -7/+66 |
| | | |||||
| * | executor: don't wait for pending calls if there are none | Dmitry Vyukov | 2015-11-19 | 1 | -6/+13 |
| | | |||||
| * | executor: fix detection of last call | Dmitry Vyukov | 2015-11-19 | 1 | -1/+1 |
| | | |||||
| * | executor: fix detection of out of threads | Dmitry Vyukov | 2015-11-19 | 1 | -7/+8 |
| | | |||||
| * | allow executor execute particular syscalls under root | Dmitry Vyukov | 2015-11-18 | 1 | -10/+28 |
| | | | | | this is required to test e.g. fuse fs (non-root can't mount) | ||||
| * | basic support for dri/drm drivers | Dmitry Vyukov | 2015-11-18 | 1 | -0/+5 |
| | | |||||
| * | fix waiting for worker processes in executor | Dmitry Vyukov | 2015-11-18 | 1 | -4/+25 |
| | | | | | + disable SIGCANCEL/SIGSETXID signal handlers | ||||
| * | add tty-related ioctl's | Dmitry Vyukov | 2015-11-16 | 1 | -2/+17 |
| | | |||||
