From d5a3ae1f760e7cb2cd5a721d9645ae22eae114fe Mon Sep 17 00:00:00 2001 From: Cheng-Min Chiang Date: Sat, 8 Aug 2020 15:00:28 -0700 Subject: sys/linux: add descriptions of qat_adf_ctl Add descriptions for qat_adf_ctl. It might need an intel qat device. Update #533. --- sys/linux/dev_qat_adf_ctl.txt | 116 ++++++++++++++++++++++++++++++++++++ sys/linux/dev_qat_adf_ctl.txt.const | 25 ++++++++ sys/linux/sys.txt | 1 - 3 files changed, 141 insertions(+), 1 deletion(-) create mode 100644 sys/linux/dev_qat_adf_ctl.txt create mode 100644 sys/linux/dev_qat_adf_ctl.txt.const (limited to 'sys') diff --git a/sys/linux/dev_qat_adf_ctl.txt b/sys/linux/dev_qat_adf_ctl.txt new file mode 100644 index 000000000..25d646c72 --- /dev/null +++ b/sys/linux/dev_qat_adf_ctl.txt @@ -0,0 +1,116 @@ +# Copyright 2020 syzkaller project authors. All rights reserved. +# Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file. + +# NEED: These descriptions need an actual Intel QAT device or an emulation so we can fuzz deeper into the subsystem. +# /dev/qat_adf_ctl is only the control interface, and currently ioctl$IOCTL_GET_NUM_DEVICES returns 0 on qemu. + +include +include +include +resource fd_qat[fd] + +openat$qat_adf_ctl(fd const[AT_FDCWD], file ptr[in, string["/dev/qat_adf_ctl"]], flags flags[open_flags], mode const[0]) fd_qat +ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(fd fd_qat, cmd const[IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS], arg ptr[in, adf_user_cfg_ctl_data]) +ioctl$IOCTL_STOP_ACCEL_DEV(fd fd_qat, cmd const[IOCTL_STOP_ACCEL_DEV], arg ptr[in, adf_user_cfg_ctl_data]) +ioctl$IOCTL_START_ACCEL_DEV(fd fd_qat, cmd const[IOCTL_START_ACCEL_DEV], arg ptr[in, adf_user_cfg_ctl_data]) +ioctl$IOCTL_GET_NUM_DEVICES(fd fd_qat, cmd const[IOCTL_GET_NUM_DEVICES], arg ptr[out, int32]) +ioctl$IOCTL_STATUS_ACCEL_DEV(fd fd_qat, cmd const[IOCTL_STATUS_ACCEL_DEV], arg ptr[inout, adf_dev_status_info]) + +adf_user_cfg_ctl_data { + config_section adf_ptr64[adf_user_cfg_section] + device_id int8 +} [packed] + +# Section + +adf_user_cfg_section { + name string[qat_section_name, ADF_CFG_MAX_SECTION_LEN_IN_BYTES] + params adf_ptr64[adf_user_cfg_key_val] + next adf_ptr64[adf_user_cfg_section] +} [packed] + +qat_section_name = "GENERAL", "KERNEL", "Accelerator", "Accelerator0", "Accelerator1" + +# Key-values + +adf_user_cfg_key_val [ + adf_dec adf_user_cfg_key_val_t[ADF_DEC, adf_user_cfg_val_dec] + adf_hex adf_user_cfg_key_val_t[ADF_HEX, adf_user_cfg_val_hex] + adf_str adf_user_cfg_key_val_t[ADF_STR, adf_user_cfg_val_str] +] + +type adf_user_cfg_key_val_t[TYPE, VAL] { + key adf_user_cfg_key + val VAL + next adf_ptr64[adf_user_cfg_key_val] + type const[TYPE, int32] +} [packed] + +# Key + +adf_user_cfg_key [ + normal string[adf_user_cfg_normal_keys, ADF_CFG_MAX_KEY_LEN_IN_BYTES] + format adf_user_cfg_format_keys + bank adf_user_cfg_bank_keys +] + +adf_user_cfg_format_keys { + prefix stringnoz[adf_user_cfg_format_keys_prefix] + number stringnoz[adf_user_cfg_numbers] + postfix string[adf_user_cfg_format_keys_postfix, ADF_KEYS_POSTFIX_MAX_LEN] +} [size[ADF_CFG_MAX_KEY_LEN_IN_BYTES]] + +adf_user_cfg_bank_keys { + prefix stringnoz["Bank"] + number stringnoz[adf_user_cfg_numbers] + postfix string[adf_user_cfg_bank_keys_postfix, ADF_KEYS_POSTFIX_MAX_LEN] +} [size[ADF_CFG_MAX_KEY_LEN_IN_BYTES]] + +adf_user_cfg_normal_keys = "NumberCyInstances", "NumberDcInstances" +adf_user_cfg_numbers = "0", "1", "2", "3", "4", "5" +adf_user_cfg_format_keys_prefix = "Cy", "Dc" +adf_user_cfg_format_keys_postfix = "NumConcurrentSymRequests", "NumConcurrentAsymRequests", "NumConcurrentRequests", "RingAsymTx", "RingSymTx", "RingAsymRx", "RingSymRx", "RingTx", "RingRx", "BankNumber" +adf_user_cfg_bank_keys_postfix = "InterruptCoalescingEnabled", "InterruptCoalescingTimerNs", "InterruptCoalescingNumResponses", "CoreAffinity" + +# This constant 32 needs to be at least the length of the longest string in +# adf_user_cfg_format_keys_postfix and adf_user_cfg_bank_keys_postfix +define ADF_KEYS_POSTFIX_MAX_LEN 32 + +# Value + +adf_user_cfg_val_dec { + val fmt[dec, intptr] + null const[0, int8] +} [packed, size[ADF_CFG_MAX_VAL_LEN_IN_BYTES]] + +adf_user_cfg_val_hex { + val fmt[hex, intptr] + null const[0, int8] +} [packed, size[ADF_CFG_MAX_VAL_LEN_IN_BYTES]] + +adf_user_cfg_val_str { + val array[int8, ADF_CFG_MAX_VAL_LEN_IN_BYTES] +} + +# Ptr + +type adf_ptr64[T] { + ptr ptr[in, T, opt] +} [size[8]] + +adf_dev_status_info { + type flags[adf_device_type, int32] + accel_id int32 + instance_id int32 + num_ae int8 + num_accel int8 + num_logical_accel int8 + banks_per_accel int8 + state int8 + bus int8 + dev int8 + fun int8 + name array[int8, MAX_DEVICE_NAME_SIZE] +} + +adf_device_type = DEV_UNKNOWN, DEV_DH895XCC, DEV_DH895XCCVF, DEV_C62X, DEV_C62XVF, DEV_C3XXX, DEV_C3XXXVF diff --git a/sys/linux/dev_qat_adf_ctl.txt.const b/sys/linux/dev_qat_adf_ctl.txt.const new file mode 100644 index 000000000..193f269cd --- /dev/null +++ b/sys/linux/dev_qat_adf_ctl.txt.const @@ -0,0 +1,25 @@ +# Code generated by syz-sysgen. DO NOT EDIT. +arches = 386, amd64, arm, arm64, mips64le, ppc64le, riscv64, s390x +ADF_CFG_MAX_KEY_LEN_IN_BYTES = 64 +ADF_CFG_MAX_SECTION_LEN_IN_BYTES = 64 +ADF_CFG_MAX_VAL_LEN_IN_BYTES = 64 +ADF_DEC = 0 +ADF_HEX = 1 +ADF_KEYS_POSTFIX_MAX_LEN = 32 +ADF_STR = 2 +AT_FDCWD = 18446744073709551516 +DEV_C3XXX = 5 +DEV_C3XXXVF = 6 +DEV_C62X = 3 +DEV_C62XVF = 4 +DEV_DH895XCC = 1 +DEV_DH895XCCVF = 2 +DEV_UNKNOWN = 0 +IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS = 1074356480, mips64le:ppc64le:2148098304 +IOCTL_GET_NUM_DEVICES = 1074028804, mips64le:ppc64le:2147770628 +IOCTL_START_ACCEL_DEV = 1074356482, mips64le:ppc64le:2148098306 +IOCTL_STATUS_ACCEL_DEV = 1074028803, mips64le:ppc64le:2147770627 +IOCTL_STOP_ACCEL_DEV = 1074356481, mips64le:ppc64le:2148098305 +MAX_DEVICE_NAME_SIZE = 32 +__NR_ioctl = 54, amd64:16, arm64:riscv64:29, mips64le:5015 +__NR_openat = 56, 386:295, amd64:257, arm:322, mips64le:5247, ppc64le:286, s390x:288 diff --git a/sys/linux/sys.txt b/sys/linux/sys.txt index e823841cb..c55f9573b 100644 --- a/sys/linux/sys.txt +++ b/sys/linux/sys.txt @@ -550,7 +550,6 @@ syz_open_dev$media(dev ptr[in, string["/dev/media#"]], id intptr, flags flags[op openat$null(fd const[AT_FDCWD], file ptr[in, string["/dev/null"]], flags flags[open_flags], mode const[0]) fd openat$zero(fd const[AT_FDCWD], file ptr[in, string["/dev/zero"]], flags flags[open_flags], mode const[0]) fd openat$full(fd const[AT_FDCWD], file ptr[in, string["/dev/full"]], flags flags[open_flags], mode const[0]) fd -openat$qat_adf_ctl(fd const[AT_FDCWD], file ptr[in, string["/dev/qat_adf_ctl"]], flags flags[open_flags], mode const[0]) fd openat$irnet(fd const[AT_FDCWD], file ptr[in, string["/dev/irnet"]], flags flags[open_flags], mode const[0]) fd openat$hwrng(fd const[AT_FDCWD], file ptr[in, string["/dev/hwrng"]], flags flags[open_flags], mode const[0]) fd openat$hpet(fd const[AT_FDCWD], file ptr[in, string["/dev/hpet"]], flags flags[open_flags], mode const[0]) fd -- cgit mrf-deployment