| commit | b3d5fca440e84920e6cdd50feaa7b3a595d89fe0 | [log] [tgz] |
|---|---|---|
| author | Andrew Scull <ascull@google.com> | Mon May 30 10:00:13 2022 +0000 |
| committer | Tom Rini <trini@konsulko.com> | Thu Jun 23 12:58:19 2022 -0400 |
| tree | 7a942f93d9884d9c1fd7b905c1a2078f8207d18b | |
| parent | 451b8b1242402d8d35b70bc5ddc5c63521b3d511 [diff] |
fuzz: virtio: Add fuzzer for vring Add a fuzzer to test the vring handling code against unexpected mutations from the virtio device. After building the sandbox with CONFIG_FUZZ=y, the fuzzer can be invoked with by: UBOOT_SB_FUZZ_TEST=fuzz_vring ./u-boot This fuzzer finds unvalidated inputs in the vring driver that allow a buggy or malicious device to make the driver chase wild pointers. Signed-off-by: Andrew Scull <ascull@google.com>