From d545e945ce3761556e10fd6b4c20a952c0e821a1 Mon Sep 17 00:00:00 2001 From: Andrey Konovalov Date: Wed, 7 Aug 2019 18:03:59 +0200 Subject: sys/linux: add syz_open_dev$char_usb descriptions syz_open_dev$char_usb opens char devices with major = USB_MAJOR. Sanitize its values to make sure it doesn't open other char/block devices. --- executor/syscalls.h | 15 +++++++++++++++ 1 file changed, 15 insertions(+) (limited to 'executor/syscalls.h') diff --git a/executor/syscalls.h b/executor/syscalls.h index a4cfbe18d..31859ff91 100644 --- a/executor/syscalls.h +++ b/executor/syscalls.h @@ -3932,6 +3932,7 @@ const call_t syscalls[] = { {"read", 3}, {"read$FUSE", 3}, {"read$alg", 3}, + {"read$char_usb", 3}, {"read$eventfd", 3}, {"read$hiddev", 3}, {"read$hidraw", 3}, @@ -4561,6 +4562,7 @@ const call_t syscalls[] = { {"syz_open_dev$audion", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$binder", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$cec", 0, (syscall_t)syz_open_dev}, + {"syz_open_dev$char_usb", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dmmidi", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dri", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dricontrol", 0, (syscall_t)syz_open_dev}, @@ -4790,6 +4792,7 @@ const call_t syscalls[] = { {"write$cgroup_pid", 4}, {"write$cgroup_subtree", 4}, {"write$cgroup_type", 4}, + {"write$char_usb", 4}, {"write$evdev", 4}, {"write$eventfd", 4}, {"write$hidraw", 4}, @@ -6691,6 +6694,7 @@ const call_t syscalls[] = { {"read", 0}, {"read$FUSE", 0}, {"read$alg", 0}, + {"read$char_usb", 0}, {"read$eventfd", 0}, {"read$hiddev", 0}, {"read$hidraw", 0}, @@ -7321,6 +7325,7 @@ const call_t syscalls[] = { {"syz_open_dev$audion", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$binder", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$cec", 0, (syscall_t)syz_open_dev}, + {"syz_open_dev$char_usb", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dmmidi", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dri", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dricontrol", 0, (syscall_t)syz_open_dev}, @@ -7550,6 +7555,7 @@ const call_t syscalls[] = { {"write$cgroup_pid", 1}, {"write$cgroup_subtree", 1}, {"write$cgroup_type", 1}, + {"write$char_usb", 1}, {"write$evdev", 1}, {"write$eventfd", 1}, {"write$hidraw", 1}, @@ -9405,6 +9411,7 @@ const call_t syscalls[] = { {"read", 3}, {"read$FUSE", 3}, {"read$alg", 3}, + {"read$char_usb", 3}, {"read$eventfd", 3}, {"read$hiddev", 3}, {"read$hidraw", 3}, @@ -10033,6 +10040,7 @@ const call_t syscalls[] = { {"syz_open_dev$audion", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$binder", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$cec", 0, (syscall_t)syz_open_dev}, + {"syz_open_dev$char_usb", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dmmidi", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dri", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dricontrol", 0, (syscall_t)syz_open_dev}, @@ -10260,6 +10268,7 @@ const call_t syscalls[] = { {"write$cgroup_pid", 4}, {"write$cgroup_subtree", 4}, {"write$cgroup_type", 4}, + {"write$char_usb", 4}, {"write$evdev", 4}, {"write$eventfd", 4}, {"write$hidraw", 4}, @@ -12100,6 +12109,7 @@ const call_t syscalls[] = { {"read", 63}, {"read$FUSE", 63}, {"read$alg", 63}, + {"read$char_usb", 63}, {"read$eventfd", 63}, {"read$hiddev", 63}, {"read$hidraw", 63}, @@ -12719,6 +12729,7 @@ const call_t syscalls[] = { {"syz_open_dev$audion", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$binder", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$cec", 0, (syscall_t)syz_open_dev}, + {"syz_open_dev$char_usb", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dmmidi", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dri", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dricontrol", 0, (syscall_t)syz_open_dev}, @@ -12942,6 +12953,7 @@ const call_t syscalls[] = { {"write$cgroup_pid", 64}, {"write$cgroup_subtree", 64}, {"write$cgroup_type", 64}, + {"write$char_usb", 64}, {"write$evdev", 64}, {"write$eventfd", 64}, {"write$hidraw", 64}, @@ -14796,6 +14808,7 @@ const call_t syscalls[] = { {"read", 3}, {"read$FUSE", 3}, {"read$alg", 3}, + {"read$char_usb", 3}, {"read$eventfd", 3}, {"read$hiddev", 3}, {"read$hidraw", 3}, @@ -15423,6 +15436,7 @@ const call_t syscalls[] = { {"syz_open_dev$audion", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$binder", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$cec", 0, (syscall_t)syz_open_dev}, + {"syz_open_dev$char_usb", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dmmidi", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dri", 0, (syscall_t)syz_open_dev}, {"syz_open_dev$dricontrol", 0, (syscall_t)syz_open_dev}, @@ -15652,6 +15666,7 @@ const call_t syscalls[] = { {"write$cgroup_pid", 4}, {"write$cgroup_subtree", 4}, {"write$cgroup_type", 4}, + {"write$char_usb", 4}, {"write$evdev", 4}, {"write$eventfd", 4}, {"write$hidraw", 4}, -- cgit mrf-deployment