aboutsummaryrefslogtreecommitdiffstats
path: root/executor
Commit message (Collapse)AuthorAgeFilesLines
* sys/linux: add netlink generic team descriptionsHangbin Liu2018-04-061-10/+35
| | | | Signed-off-by: Hangbin Liu <liuhangbin@gmail.com>
* executor: update to support FreeBSD kcovMitchell Horne2018-04-051-0/+51
| | | | | | Make the required changes to the BSD executor file to interface with FreeBSD's kernel coverage implementation. This will allow coverage to be used when running syzkaller on this platform.
* sys/linux: test various binfmt's in execveDmitry Vyukov2018-04-022-10/+62
|
* pkg/compiler: support non-zero terminated filenamesDmitry Vyukov2018-04-021-5/+5
| | | | | | | | | | | | | | | Now file names become: string[filename] with a possibility of using other string features: stringnoz[filename] string[filename, CONST_SIZE] and filename is left as type alias as it is commonly used: type filename string[filename]
* executor: fix unchecked result warningDmitry Vyukov2018-04-011-1/+3
|
* sys/linux: add support for reading partition tablesDmitry Vyukov2018-04-012-13/+110
|
* sys/linux: fix misspelled const nameDmitry Vyukov2018-03-311-5/+5
| | | | Fixes #552
* executor: fix compilation warningsDmitry Vyukov2018-03-301-14/+8
| | | | | | | | SYS_memfd_create define produces warning in scource if system headers already contain the definition (we strip all ifdefs!). The same is true for CLONE_NEWCGROUP but we just never hit it yet. Also fix format string for 32 bits. Also fix potential uninit var in csource, and a missing new line.
* sys/linux: add support for mounting filesystem imagesDmitry Vyukov2018-03-305-21/+249
|
* sys/linux: regenerate filesDmitry Vyukov2018-03-291-5/+5
| | | | | A previous commit included some non-regenerateed files. Regenerate them now.
* executor: don't let syscalls fail with errno=0Dmitry Vyukov2018-03-281-0/+2
| | | | | Our syz syscalls may mishandle errno in some cases and fail with errno=0. Fix it up.
* executor: rework cgroups supportDmitry Vyukov2018-03-272-43/+39
| | | | | | | | | | Turns out creating a cgroup per test is too expensive. Moreover, it leads to hanged tasks as cgroup destruction is asynchronous and overloads kernel work queues. Create only a single cgroup per proc, but restrict descriptions to mess with that single group, instead test processes create own nested cgroups for messing.
* sys/linux: add IPVS descriptionsDmitry Vyukov2018-03-261-10/+195
| | | | Update #533
* executor: fix reset of bridge netfilterDmitry Vyukov2018-03-251-0/+2
| | | | We left entries non-zero, so memcmp always failed.
* sys/linux: add cgroup descriptionsDmitry Vyukov2018-03-256-168/+347
|
* sys/linux: add guehdr for udp packetsDmitry Vyukov2018-03-211-5/+5
|
* sys/linux: add netlink fou descriptionsDmitry Vyukov2018-03-212-10/+84
|
* sys/linux: fix nlattr alignmentDmitry Vyukov2018-03-211-5/+5
| | | | It seems that alignment is never present in the nlattr.
* fuchsia: Update syzkaller to build with current Fuchsia API. (#543)Julia Hansbrough2018-03-212-47/+23
| | | | | | | | | | | | | | | | | | | | | * fuchsia: Fix the `extractor` tool. The include path in Zircon has changed; updated syz-extract/fuchsia.go to include this, and re-ran extract to get updated *.const files. * fuchsia: Update syzkaller to build with current Fuchsia API. Fuchsia doesn't have a stable API right now, so alas, this will probably continue to change until that's nailed down. But, useful to get this up-to-date at least. Relevant notes: * zx_channel_call_finish and _retry aren't technically public; leave them out until we have a less-cludgy way to expose them * musl supports setjmp/longjmp but not _setjmp/_longjump * remove some unsupported syscalls * update the build invocation
* fuchsia: Fix the `extractor` tool.Julia Hansbrough2018-03-211-2/+2
| | | | | The include path in Zircon has changed; updated syz-extract/fuchsia.go to include this, and re-ran extract to get updated *.const files.
* all: fix gometalinter warningsDmitry Vyukov2018-03-082-5/+13
| | | | Fix typos, non-canonical code, remove dead code, etc.
* executor: fix ifdef's for csourceDmitry Vyukov2018-03-072-2/+3
| | | | | | | There is test failure on travis: https://travis-ci.org/google/syzkaller/jobs/349948391 I can't reproduce it locally, and it only happened on 1.8, but not on 1.9? But this seems to be what could have provoked such failure.
* sys/linux: add descriptions for /dev/infiniband/rdma_cmDmitry Vyukov2018-03-061-10/+44
| | | | Also fix uffd and bluetooth consts while we are here.
* sys/linux: fix perf_event_attr layoutDmitry Vyukov2018-03-061-5/+5
|
* executor: fix includesDmitry Vyukov2018-03-051-1/+6
| | | | | | We use errno, vaargs, printf in all of fail/error/exitf, but we include the corresponding headers only when SYZ_USE_TMP_DIR. Include them whenever fail/error/exitf are used.
* sys/linux: add syz_init_net_socket syscallDmitry Vyukov2018-03-053-52/+94
| | | | | | | | | | | The new pseudo syscall allows opening sockets that can only be created in init net namespace (BLUETOOTH, NFC, LLC). Use it to open these sockets. Unfortunately this only works with sandbox none at the moment. The problem is that setns of a network namespace requires CAP_SYS_ADMIN in the target namespace, and we've lost all privs in the init namespace during creation of a user namespace.
* sys/linux: make ifreq template, fix some usagesDmitry Vyukov2018-03-051-5/+5
|
* prog: harden program parsing against description changes moreDmitry Vyukov2018-03-051-4/+6
| | | | | | | Handle most of type changes, e.g. const is changed to struct, or struct to pointers. In all these cases we create default args. They may not give the coverage anymore, but still better than losing them right away.
* prog: handle excessive args and fields during program parsingDmitry Vyukov2018-03-051-4/+10
| | | | | Tolerate excessive args and fields during program parsing. This is useful after description changes to not lose corpus.
* sys/linux: use size attributes on structsDmitry Vyukov2018-03-051-5/+5
| | | | | | | | | | | 1. Add size attribte on sockaddr. 2. Remove sockaddr's that are larger than 16 bytes from sockaddr. 3. Add size attribute on sockaddr_storage which wasn't actually 128 bytes. 4. Add size attribute to ifreq. 5. Fix ifmap field types as uncovered by the size attributes. 6. Fix sockaddr_storage_tcp from struct to union which is should be. 7. Make sockaddr_un_file fixed size as it should be. 8. Fix some explicit paddings that were only correct for 64 bits.
* pkg/compiler: allow specifying static size for filename'sDmitry Vyukov2018-03-051-4/+6
| | | | Sometimes filenames are embed into structs and need to take fixed space.
* pkg/compiler: support size attribute for unionsDmitry Vyukov2018-03-051-4/+6
|
* pkg/compiler: add size attribute for structsDmitry Vyukov2018-03-051-4/+6
| | | | The size attribute allows to pad a struct up to the specified size.
* sys/linux: a bunch of assorted improvements and fixesDmitry Vyukov2018-03-051-33/+13
|
* sys/linux: add remaining aux netfilter descriptionsDmitry Vyukov2018-03-011-10/+98
|
* sys/linux: few assorted additionsDmitry Vyukov2018-02-261-9/+17
|
* prog: properly squash bitfieldsDmitry Vyukov2018-02-261-2/+2
|
* executor: simplify initialize_tunDmitry Vyukov2018-02-262-27/+30
| | | | Remove executor_pid, enable_tun and setup_tun.
* sys/linux: remove proc type from network descriptionsDmitry Vyukov2018-02-262-46/+28
| | | | | | | | | | We now always create net namespace for testing, so socket ports and other IDs do not overlap between different test processes. Proc types play badly with squashing packets to ANYBLOB. To squash into a block we need concrete value, but it depends on process id. Removing proc also makes tun setup and address descriptions simpler.
* sys/linux: make tcp_seq_num asymmetricDmitry Vyukov2018-02-261-5/+5
| | | | | | Currently it's 0x42424242 so it's not possible to understand the value endianess in hints code. Make it assymmetric so that endinaness is clear.
* executor, pkg/csource: make fd numbers consistentDmitry Vyukov2018-02-262-23/+33
| | | | | | | | | | | Currently when executor creates fd's it gets: 0, 3, 4. When tun is enabled: 3, 4, 5. For C programs: 3, 4, 5. When run is enabled: 4, 5, 6. Theoretically it should not matter, but these fd numbers are probably sometimes are used as data. So make them consistent in all these cases (3, 4, 5).
* executor: use proper default values for resourcesDmitry Vyukov2018-02-261-21/+21
| | | | | | | | | We currently use -1 as default value for resources when the actual value is not available. -1 is good for fd's, but is not the right default value for pointers/keys/etc. Pass from prog and use in executor proper default value for resources.
* prog: add arbitrary mutation of complex structsDmitry Vyukov2018-02-253-11/+15
| | | | | | Squash complex structs into flat byte array and mutate this array with generic blob mutations. This allows to mutate what we currently consider as paddings and add/remove paddings from structs, etc.
* pkg/compiler: fix alignment corner caseDmitry Vyukov2018-02-252-9/+11
| | | | | Fix alignemnt calculation for packed structs with alignment and bitfields. Amusingly this affected only a single real struct -- ipv6_fragment_ext_header.
* pkg/compiler: don't assign call IDs staticallyDmitry Vyukov2018-02-257-13/+13
| | | | | | IDs change whenever a call is added or removed, this leads to large diffs unnecessarly. Assign IDs dynamically.
* pkg/compiler: allow unions as syscall argumentsDmitry Vyukov2018-02-231-4/+6
| | | | | If all union options can be syscall arguments, allow the union itself as syscall argument.
* sys: fix descriptions for strickter return type checksDmitry Vyukov2018-02-233-7/+7
| | | | | Mostly remove vma as return from some mm syscalls. This is unnecessary and we never used these.
* sys/linux: add AF_SMC socketsDmitry Vyukov2018-02-221-8/+16
|
* executor: bring up bond and veth devicesDmitry Vyukov2018-02-222-7/+8
|
* sys/linux: add few ip and tcp optionsDmitry Vyukov2018-02-221-5/+5
|