cloud-hypervisor/fuzz
Bo Chen 742d6858f7 fuzz: block: Setup the virt queue based on the fuzzed input bytes
Instead of always fuzzing virt-queues with default values (mostly 0s),
the fuzzer now initializes the virt-queue based on the fuzzed input
bytes, such as the tail position of the available ring, queue size
selected by driver, descriptor table address, available ring address,
used ring address, etc. In this way, the fuzzer can explore the
virtio-block code path with various virt-queue setup.

Signed-off-by: Bo Chen <chen.bo@intel.com>
2022-09-01 08:39:28 +02:00
..
fuzz_targets fuzz: block: Setup the virt queue based on the fuzzed input bytes 2022-09-01 08:39:28 +02:00
.gitignore fuzz: Add fuzzing infrastructure and QCOW fuzzer 2020-07-17 08:49:35 +02:00
Cargo.lock build: bump io-uring from 0.5.3 to 0.5.4 in /fuzz 2022-09-01 02:01:00 +00:00
Cargo.toml build: bump libc from 0.2.131 to 0.2.132 in /fuzz 2022-08-18 23:41:40 +00:00