| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | sys: fix typo in set/getsockopt name | Andrey Konovalov | 2017-02-10 | 1 | -4/+4 |
| | | |||||
| * | sys: restore autobind TODO | Andrey Konovalov | 2017-02-10 | 1 | -0/+2 |
| | | |||||
| * | sys: add icmp sock opt | Andrey Konovalov | 2017-02-10 | 4 | -0/+16 |
| | | |||||
| * | sys: improve ip and ipv6 sockopts | Andrey Konovalov | 2017-02-10 | 4 | -64/+195 |
| | | |||||
| * | sys: improve tcp sockopts | Andrey Konovalov | 2017-02-10 | 4 | -15/+67 |
| | | |||||
| * | sys: improve udp setsockopt | Andrey Konovalov | 2017-02-10 | 4 | -10/+46 |
| | | |||||
| * | sys: fix socket.txt include | Andrey Konovalov | 2017-02-10 | 4 | -0/+4 |
| | | |||||
| * | sys: add sock_in and sock_in6 types | Andrey Konovalov | 2017-02-10 | 20 | -263/+213 |
| | | |||||
| * | sys: split socket.txt into multiple files based on socket type | Andrey Konovalov | 2017-02-09 | 63 | -1577/+2462 |
| | | | | | | This just moves syscall descriptions and fixes up includes without any semantic changes. | ||||
| * | prog, sys: add icmpv6 packet descriptions and checksums | Andrey Konovalov | 2017-02-08 | 7 | -32/+258 |
| | | | | | | | Also generalize checksums into the two kinds: inet and pseudo. Inet checksums is just the Internet checksum of a packet. Pseudo checksum is the Internet checksum of a packet with a pseudo header. | ||||
| * | prog, sys: add icmp descriptions and checksum | Andrey Konovalov | 2017-02-06 | 7 | -18/+335 |
| | | |||||
| * | sys: refine EVIOCGMASK description | Dmitry Vyukov | 2017-02-06 | 1 | -2/+2 |
| | | | | | | | Fuzzer used this call to corrupt output data involving treating part of file name as a pointer into data section. Machines are raising... | ||||
| * | sys: add more filesystems and mount flags | Dmitry Vyukov | 2017-02-05 | 4 | -2/+26 |
| | | |||||
| * | sys: add missing include in loop.txt | Dmitry Vyukov | 2017-02-05 | 4 | -0/+4 |
| | | |||||
| * | sys: add /dev/loop description | Dmitry Vyukov | 2017-02-03 | 5 | -1/+145 |
| | | |||||
| * | sys: minor assorted improvements to descriptions | Dmitry Vyukov | 2017-02-03 | 5 | -11/+52 |
| | | |||||
| * | prog, sys: add udp description and checksum | Andrey Konovalov | 2017-02-02 | 4 | -2/+75 |
| | | |||||
| * | prog, sys: add ipv6 description and checksum | Andrey Konovalov | 2017-02-02 | 6 | -5/+246 |
| | | |||||
| * | prog, sys: add tcp packets descriptions | Andrey Konovalov | 2017-01-30 | 8 | -6/+238 |
| | | | | | Also embed tcp checksums into packets. | ||||
| * | sys: improve kvm description | Dmitry Vyukov | 2017-01-28 | 1 | -4/+42 |
| | | | | | | | Allow fuzzer to change types of segment descriptors. Alter more flags. Allow fuzzer to do a random vmwrite. | ||||
| * | sys: improve key descriptions | Dmitry Vyukov | 2017-01-28 | 4 | -6/+94 |
| | | |||||
| * | sys: improve ipc descriptions | Dmitry Vyukov | 2017-01-28 | 4 | -44/+78 |
| | | |||||
| * | sys: move ipc syscalls into separate file | Dmitry Vyukov | 2017-01-28 | 8 | -213/+249 |
| | | |||||
| * | all: implement edge coverage | Dmitry Vyukov | 2017-01-27 | 1 | -12/+2 |
| | | | | | | | | | | | | Currently syzkaller uses per-call basic block (BB) coverage. This change implements edge (not-per-call) coverage. Edge coverage is more detailed than BB coverage as it captures not-taken branches, looping, etc. So it provides better feedback signal. This coverage is now called "signal" throughout the code. BB code coverage is also collected as it is required for visualisation. Not doing per-call coverage reduces corpus ~6-7x (from ~35K to ~5K), this has profound effect on fuzzing efficiency. | ||||
| * | sys: improve ipv4 options descriptions | Andrey Konovalov | 2017-01-26 | 4 | -6/+124 |
| | | |||||
| * | prog, sys: add csum type, embed checksums for ipv4 packets | Andrey Konovalov | 2017-01-25 | 3 | -5/+34 |
| | | | | | | | | This change adds a `csum[kind, type]` type. The only available kind right now is `ipv4`. Using `csum[ipv4, int16be]` in `ipv4_header` makes syzkaller calculate and embed correct checksums into ipv4 packets. | ||||
| * | sys: add missing consts for arm64 and ppc64 | Andrey Konovalov | 2017-01-23 | 2 | -0/+186 |
| | | |||||
| * | sys: add ethernet and ipv4 packet descriptions | Andrey Konovalov | 2017-01-23 | 2 | -3/+257 |
| | | |||||
| * | sys, prog: add length of parent of parent to templates | Andrey Konovalov | 2017-01-23 | 2 | -0/+52 |
| | | | | | | | | | | | | | | | Example: ``` struct s1 { f0 len[s2] # length of s2 } struct s2 { f0 s1 f1 array[int32] } ``` | ||||
| * | prog: add FieldName to Type | Andrey Konovalov | 2017-01-23 | 1 | -0/+6 |
| | | | | | | FieldName() is the name of the struct field or union option with this type. TypeName() is now always the name of the type. | ||||
| * | prog: fix bytesizeN for nonarray fields | Andrey Konovalov | 2017-01-19 | 1 | -2/+25 |
| | | |||||
| * | prog: fix calculating parent length in struct with bitfields | Andrey Konovalov | 2017-01-19 | 1 | -0/+14 |
| | | |||||
| * | prog, sys: fix padding varlen structs | Andrey Konovalov | 2017-01-19 | 4 | -51/+95 |
| | | |||||
| * | sys: improve cmsghdr description | Dmitry Vyukov | 2017-01-18 | 4 | -10/+111 |
| | | |||||
| * | sys: improve /dev/snd/seq and /dev/snd/timer descriptions | Dmitry Vyukov | 2017-01-18 | 5 | -14/+58 |
| | | |||||
| * | sys: add missing include file for some DRI constants | Dmitry Vyukov | 2017-01-18 | 4 | -1/+8 |
| | | |||||
| * | sys: improve sockaddr_un description | Dmitry Vyukov | 2017-01-18 | 1 | -8/+3 |
| | | | | | | 1. Embed real filename. 2. Use proc type for unique identifiers. | ||||
| * | sys: don't imply pointer indirection for filename type | Dmitry Vyukov | 2017-01-18 | 4 | -58/+58 |
| | | | | | | | | | Change all 'filename' to 'ptr[in, filename]' and don't imply pointer indirection for filename type. This is necessary because in some bases we want to embed filename directly into a struct (e.g. unix sock addr). Similar change was already done for string type for similar reasons. Generally, we want to imply as less as possible. NOTE: IF YOU HAVE PRIVATE DESCRIPTIONS, YOU NEED TO DO THE SAME REPLACEMENT. | ||||
| * | sys: drop kdbus description | Dmitry Vyukov | 2017-01-18 | 5 | -760/+1 |
| | | | | | kdbus haven't been merged into mainline, unmaintained and seems to be replaced by bus1. | ||||
| * | sys: add KVM_ENABLE_CAP for vm | Dmitry Vyukov | 2017-01-18 | 4 | -5/+22 |
| | | |||||
| * | prog: add tests for alignment and offsets | Andrey Konovalov | 2017-01-18 | 1 | -15/+105 |
| | | |||||
| * | prog, sys: correctly calculate size of varlen structs | Andrey Konovalov | 2017-01-18 | 2 | -12/+29 |
| | | |||||
| * | prog: mutate sized strings with respect to size | Andrey Konovalov | 2017-01-18 | 1 | -0/+1 |
| | | |||||
| * | prog, sys: fix struct with bitfields size calculation | Andrey Konovalov | 2017-01-18 | 1 | -1/+3 |
| | | |||||
| * | sys: align structs with respect to align attributes | Andrey Konovalov | 2017-01-18 | 1 | -1/+2 |
| | | |||||
| * | prog: fix Size() for unions args | Andrey Konovalov | 2017-01-18 | 1 | -2/+2 |
| | | |||||
| * | sys: packed structs have align of 1 | Andrey Konovalov | 2017-01-18 | 1 | -0/+3 |
| | | |||||
| * | prog: add bitfields to templates | Andrey Konovalov | 2017-01-17 | 4 | -112/+195 |
| | | | | | | | Now it's possible to use `int32:18` to denote a bitfield of size 18 as a struct field. This fixes #72. | ||||
| * | sys, executor: more kvm improvements | Dmitry Vyukov | 2017-01-12 | 5 | -3/+46 |
| | | | | | | | | 1. Basic support for arm64 kvm testing. 2. Fix compiler warnings in x86 kvm code. 3. Test all pseudo syz calls in csource. 4. Fix handling of real code in x86. | ||||
| * | sys: extend kvm support | Dmitry Vyukov | 2017-01-09 | 7 | -20/+134 |
| | | | | | | | Add new pseudo syscall syz_kvm_setup_cpu that setups VCPU into interesting states for execution. KVM is too difficult to setup otherwise. Lots of improvements possible, but this is a starting point. | ||||
