syz - Unnamed repository; edit this file 'description' to name the repository.

	Commit message (Collapse)	Author	Age	Files	Lines
*	all: reformat C/C++ files	Dmitry Vyukov	2026-01-19	1	-3/+6
\|
*	tools/syz-declextract: extend test data	Dmitry Vyukov	2025-04-09	1	-3/+9
\| \| \| \| \| \|	Add few interesting cases for scope analysis. Move functions related to resource to the header file, they must be visible in every file to work.
*	tools/syz-declextract: support function scopes	Dmitry Vyukov	2025-01-22	1	-1/+6
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Extract info about function scopes formed by switch'es on function arguments. For example if we have: void foo(..., int cmd, ...) { ... switch (cmd) { case FOO: ... block 1 ... case BAR: ... block 2 ... } ... } We record that any data flow within block 1 is only relevant when foo's arg cmd has value FOO, similarly for block 2 and BAR. This allows to do 3 things: 1. Locate ioctl commands that are switched on within transitively called functions. 2. Infer return value for each ioctl command. 3. Infer argument type when it's not specified in _IO macro. This will also allow to infer other multiplexed syscalls. Descriptions generated on Linux commit c4b9570cfb63501.
*	tools/syz-declextract: extract file_operations descriptions	Dmitry Vyukov	2024-12-11	1	-0/+12
	Extend the clang tool to locate file_operations variables and arrays and dump open/read/write/mmap/ioctl callbacks for each. It also tries to extract set of ioctl commands and argument types for them in a simple best-effort way (for now). It just locates switch in the ioctl callback and extracts each case as a command.