From: Paolo Bonzini <pbonzini@redhat.com>
To: "Alexander Bulekov" <alxndr@bu.edu>,
"Philippe Mathieu-Daudé" <philmd@redhat.com>
Cc: Laurent Vivier <lvivier@redhat.com>,
Thomas Huth <thuth@redhat.com>,
qemu-devel@nongnu.org, darren.kenny@oracle.com, bsd@redhat.com,
stefanha@redhat.com
Subject: Re: [PATCH v3 02/16] fuzz: Add general virtual-device fuzzer
Date: Thu, 8 Oct 2020 09:03:21 +0200 [thread overview]
Message-ID: <74511624-33ed-ff5d-62c2-f9b2b632b39a@redhat.com> (raw)
In-Reply-To: <20200921143405.3taiymgzwvscxsry@mozz.bu.edu>
On 21/09/20 16:34, Alexander Bulekov wrote:
>> Can you fuzz writing "FUZZ" in memory? Like:
>> OP_WRITE(0x100000, "UsingLibFUZZerString")?
> No.. Hopefully that's not a huge problem.
>
Instead of always looking for a separator, can you:
1) skip over it if you find it naturally at the end of a command (that
is, "FUZZ" is like a comment command)
2) actively search for it only if you stumble upon an unrecognized command?
In that case, if you have
AbcFUZZD0x100000UsingLibFUZZerFUZZ
The first and third instances would be ignored, while the second would
be part of the input. On the other hand if you have
bcFUZZD0x100000UsingLibFUZZerFUZZ
"b" is an invalid command and therefore you'd skip directly to "D".
Paolo
next prev parent reply other threads:[~2020-10-08 7:04 UTC|newest]
Thread overview: 53+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-09-21 2:24 [PATCH v3 00/16] Add a General Virtual Device Fuzzer Alexander Bulekov
2020-09-21 2:24 ` [PATCH v3 01/16] memory: Add FlatView foreach function Alexander Bulekov
2020-10-08 6:57 ` Paolo Bonzini
2020-09-21 2:24 ` [PATCH v3 02/16] fuzz: Add general virtual-device fuzzer Alexander Bulekov
2020-09-21 5:43 ` Philippe Mathieu-Daudé
2020-09-21 14:34 ` Alexander Bulekov
2020-10-01 15:29 ` Darren Kenny
2020-10-07 13:39 ` Alexander Bulekov
2020-10-07 13:53 ` Darren Kenny
2020-10-08 7:03 ` Paolo Bonzini [this message]
2020-10-11 15:35 ` Alexander Bulekov
2020-10-12 7:02 ` Paolo Bonzini
2020-09-22 14:03 ` Alexander Bulekov
2020-10-08 7:04 ` Paolo Bonzini
2020-09-21 2:24 ` [PATCH v3 03/16] fuzz: Add PCI features to the general fuzzer Alexander Bulekov
2020-09-21 5:44 ` Philippe Mathieu-Daudé
2020-09-21 14:41 ` Alexander Bulekov
2020-09-21 2:24 ` [PATCH v3 04/16] fuzz: Add DMA support to the generic-fuzzer Alexander Bulekov
2020-10-08 7:43 ` Paolo Bonzini
2020-10-08 13:26 ` Alexander Bulekov
2020-09-21 2:24 ` [PATCH v3 05/16] fuzz: Declare DMA Read callback function Alexander Bulekov
2020-10-08 7:39 ` Paolo Bonzini
2020-10-11 15:45 ` Alexander Bulekov
2020-10-12 6:59 ` Paolo Bonzini
2020-09-21 2:24 ` [PATCH v3 06/16] fuzz: Add fuzzer callbacks to DMA-read functions Alexander Bulekov
2020-09-21 2:24 ` [PATCH v3 07/16] fuzz: Add support for custom crossover functions Alexander Bulekov
2020-09-21 2:24 ` [PATCH v3 08/16] fuzz: add a DISABLE_PCI op to general-fuzzer Alexander Bulekov
2020-09-21 2:24 ` [PATCH v3 09/16] fuzz: add a crossover function to generic-fuzzer Alexander Bulekov
2020-10-01 15:31 ` Darren Kenny
2020-10-15 13:43 ` Alexander Bulekov
2020-09-21 2:25 ` [PATCH v3 10/16] scripts/oss-fuzz: Add wrapper program for generic fuzzer Alexander Bulekov
2020-09-21 2:25 ` [PATCH v3 11/16] scripts/oss-fuzz: Add general-fuzzer build script Alexander Bulekov
2020-10-01 15:40 ` Darren Kenny
2020-10-08 7:35 ` Paolo Bonzini
2020-10-15 13:46 ` Alexander Bulekov
2020-09-21 2:25 ` [PATCH v3 12/16] scripts/oss-fuzz: Add general-fuzzer configs for oss-fuzz Alexander Bulekov
2020-09-21 2:25 ` [PATCH v3 13/16] scripts/oss-fuzz: build the general-fuzzer configs Alexander Bulekov
2020-09-21 2:25 ` [PATCH v3 14/16] scripts/oss-fuzz: Add script to reorder a general-fuzzer trace Alexander Bulekov
2020-10-08 7:42 ` Paolo Bonzini
2020-09-21 2:25 ` [PATCH v3 15/16] scripts/oss-fuzz: Add crash trace minimization script Alexander Bulekov
2020-09-21 2:25 ` [PATCH v3 16/16] fuzz: Add instructions for using general-fuzz Alexander Bulekov
2020-10-01 15:44 ` Darren Kenny
2020-09-21 2:45 ` [PATCH v3 00/16] Add a General Virtual Device Fuzzer no-reply
2020-09-21 2:58 ` no-reply
2020-09-21 3:30 ` no-reply
2020-09-21 3:43 ` no-reply
2020-09-21 3:46 ` no-reply
2020-09-21 4:30 ` no-reply
2020-09-21 4:39 ` no-reply
2020-09-21 5:22 ` no-reply
2020-09-21 5:31 ` no-reply
2020-09-21 6:17 ` no-reply
2020-09-21 6:26 ` no-reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=74511624-33ed-ff5d-62c2-f9b2b632b39a@redhat.com \
--to=pbonzini@redhat.com \
--cc=alxndr@bu.edu \
--cc=bsd@redhat.com \
--cc=darren.kenny@oracle.com \
--cc=lvivier@redhat.com \
--cc=philmd@redhat.com \
--cc=qemu-devel@nongnu.org \
--cc=stefanha@redhat.com \
--cc=thuth@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.