From e2c47158756b66f9f8b645e2762bc1b3b15e0dd8 Mon Sep 17 00:00:00 2001 From: Alexander Potapenko Date: Mon, 29 Jul 2024 19:59:33 +0200 Subject: executor: arm64: add SYZOS_API_MSR MSR is an ARM64 instruction that writes a value from a GP register to one of the system CPU registers. Exposing those registers to a fuzzer will let us trigger unexpected behavior in handling them on the kernel side. The SYZOS_API_MSR call has two int64 arguments, register ID and value. Register IDs are 64-bit values obtained from ARM64_SYS_REG() in the Linux asm/kvm.h UAPI header. Same register IDs are used by ioctl$KVM_GET_ONE_REG and ioctl$KVM_SET_ONE_REG. Also add sys/linux/test/syz_kvm_setup_cpu_arm64-msr --- executor/kvm.h | 1 + 1 file changed, 1 insertion(+) (limited to 'executor/kvm.h') diff --git a/executor/kvm.h b/executor/kvm.h index 1afbcd40e..a66aa6727 100644 --- a/executor/kvm.h +++ b/executor/kvm.h @@ -82,4 +82,5 @@ #define ARM64_ADDR_UEXIT (ARM64_ADDR_EXIT + 256) #define ARM64_ADDR_USER_CODE 0xeeee0000 #define ARM64_ADDR_EXECUTOR_CODE 0xeeee8000 +#define ARM64_ADDR_SCRATCH_CODE 0xeeef0000 #define ARM64_ADDR_EL1_STACK_BOTTOM 0xffff1000 -- cgit mrf-deployment