commit b3d5fca440e84920e6cdd50feaa7b3a595d89fe0
author Andrew Scull <ascull@google.com> Mon May 30 10:00:13 2022 +0000
committer Tom Rini <trini@konsulko.com> Thu Jun 23 12:58:19 2022 -0400
tree 7a942f93d9884d9c1fd7b905c1a2078f8207d18b
parent 451b8b1242402d8d35b70bc5ddc5c63521b3d511

fuzz: virtio: Add fuzzer for vring

Add a fuzzer to test the vring handling code against unexpected
mutations from the virtio device.

After building the sandbox with CONFIG_FUZZ=y, the fuzzer can be invoked
with by:

   UBOOT_SB_FUZZ_TEST=fuzz_vring ./u-boot

This fuzzer finds unvalidated inputs in the vring driver that allow a
buggy or malicious device to make the driver chase wild pointers.

Signed-off-by: Andrew Scull <ascull@google.com>

test/fuzz/Makefile

diff --git a/test/fuzz/Makefile b/test/fuzz/Makefile
index 03eeeeb..663b79c 100644
--- a/test/fuzz/Makefile
+++ b/test/fuzz/Makefile
@@ -5,3 +5,4 @@
 #
 
 obj-$(CONFIG_$(SPL_)CMDLINE) += cmd_fuzz.o
+obj-$(CONFIG_VIRTIO_SANDBOX) += virtio.o