2 * Generic Virtual-Device Fuzzing Target Configs
4 * Copyright Red Hat Inc., 2020
7 * Alexander Bulekov <alxndr@bu.edu>
9 * This work is licensed under the terms of the GNU GPL, version 2 or later.
10 * See the COPYING file in the top-level directory.
13 #ifndef GENERIC_FUZZ_CONFIGS_H
14 #define GENERIC_FUZZ_CONFIGS_H
17 typedef struct generic_fuzz_config
{
18 const char *name
, *args
, *objects
;
19 gchar
* (*argfunc
)(void); /* Result must be freeable by g_free() */
20 } generic_fuzz_config
;
22 static inline gchar
*generic_fuzzer_virtio_9p_args(void){
23 char tmpdir
[] = "/tmp/qemu-fuzz.XXXXXX";
24 g_assert_nonnull(mkdtemp(tmpdir
));
26 return g_strdup_printf("-machine q35 -nodefaults "
27 "-device virtio-9p,fsdev=hshare,mount_tag=hshare "
28 "-fsdev local,id=hshare,path=%s,security_model=mapped-xattr,"
29 "writeout=immediate,fmode=0600,dmode=0700", tmpdir
);
32 const generic_fuzz_config predefined_configs
[] = {
34 .name
= "virtio-net-pci-slirp",
35 .args
= "-M q35 -nodefaults "
36 "-device virtio-net,netdev=net0 -netdev user,id=net0",
40 .args
= "-machine q35 -device virtio-blk,drive=disk0 "
41 "-drive file=null-co://,id=disk0,if=none,format=raw",
44 .name
= "virtio-scsi",
45 .args
= "-machine q35 -device virtio-scsi,num_queues=8 "
46 "-device scsi-hd,drive=disk0 "
47 "-drive file=null-co://,id=disk0,if=none,format=raw",
48 .objects
= "scsi* virtio*",
51 .args
= "-machine q35 -nodefaults -device virtio-gpu",
55 .args
= "-machine q35 -nodefaults -device virtio-vga",
59 .args
= "-machine q35 -nodefaults -device virtio-rng",
62 .name
= "virtio-balloon",
63 .args
= "-machine q35 -nodefaults -device virtio-balloon",
66 .name
= "virtio-serial",
67 .args
= "-machine q35 -nodefaults -device virtio-serial",
70 .name
= "virtio-mouse",
71 .args
= "-machine q35 -nodefaults -device virtio-mouse",
75 .argfunc
= generic_fuzzer_virtio_9p_args
,
78 .name
= "virtio-9p-synth",
79 .args
= "-machine q35 -nodefaults "
80 "-device virtio-9p,fsdev=hshare,mount_tag=hshare "
81 "-fsdev synth,id=hshare",
85 .args
= "-M q35 -nodefaults "
86 "-device e1000,netdev=net0 -netdev user,id=net0",
90 .args
= "-M q35 -nodefaults "
91 "-device e1000e,netdev=net0 -netdev user,id=net0",
95 .args
= "-machine q35 -nodefaults -device cirrus-vga",
98 .name
= "bochs-display",
99 .args
= "-machine q35 -nodefaults -device bochs-display",
103 .args
= "-machine q35 -nodefaults -device intel-hda,id=hda0 "
104 "-device hda-output,bus=hda0.0 -device hda-micro,bus=hda0.0 "
105 "-device hda-duplex,bus=hda0.0",
106 .objects
= "intel-hda",
109 .args
= "-machine pc -nodefaults "
110 "-drive file=null-co://,if=none,format=raw,id=disk0 "
111 "-device ide-hd,drive=disk0",
115 .args
= "-machine pc -nodefaults "
116 "-drive file=null-co://,if=none,format=raw,id=disk0 "
117 "-device ide-cd,drive=disk0",
121 .args
= "-machine q35 -nodefaults "
122 "-drive file=null-co://,if=none,format=raw,id=disk0 "
123 "-device ide-hd,drive=disk0",
126 .name
= "ahci-atapi",
127 .args
= "-machine q35 -nodefaults "
128 "-drive file=null-co://,if=none,format=raw,id=disk0 "
129 "-device ide-cd,drive=disk0",
133 .args
= "-machine pc -nodefaults -device floppy,id=floppy0 "
134 "-drive id=disk0,file=null-co://,file.read-zeroes=on,if=none,format=raw "
135 "-device floppy,drive=disk0,drive-type=288",
136 .objects
= "fd* floppy* i8257",
139 .args
= "-machine q35 -nodefaults "
140 "-drive file=null-co://,if=none,format=raw,id=disk0 "
141 "-device qemu-xhci,id=xhci -device usb-tablet,bus=xhci.0 "
142 "-device usb-bot -device usb-storage,drive=disk0 "
143 "-chardev null,id=cd0 -chardev null,id=cd1 "
144 "-device usb-braille,chardev=cd0 -device usb-ccid -device usb-ccid "
145 "-device usb-kbd -device usb-mouse -device usb-serial,chardev=cd1 "
146 "-device usb-tablet -device usb-wacom-tablet -device usb-audio",
147 .objects
= "*usb* *uhci* *xhci*",
150 .args
= "-machine pc",
154 .args
= "-machine q35",
158 .args
= "-machine q35 -nodefaults "
159 "-device vmxnet3,netdev=net0 -netdev user,id=net0",
163 .args
= "-machine q35 -nodefaults "
164 "-device ne2k_pci,netdev=net0 -netdev user,id=net0",
168 .args
= "-machine q35 -nodefaults "
169 "-device pcnet,netdev=net0 -netdev user,id=net0",
173 .args
= "-machine q35 -nodefaults "
174 "-device rtl8139,netdev=net0 -netdev user,id=net0",
178 .args
= "-machine q35 -nodefaults "
179 "-device i82550,netdev=net0 -netdev user,id=net0",
183 .args
= "-nodefaults -device sdhci-pci,sd-spec-version=3 "
184 "-device sd-card,drive=mydrive "
185 "-drive if=none,index=0,file=null-co://,format=raw,id=mydrive -nographic",
189 .args
= "-machine q35 -nodefaults "
190 "-device ich9-usb-ehci1,bus=pcie.0,addr=1d.7,"
191 "multifunction=on,id=ich9-ehci-1 "
192 "-device ich9-usb-uhci1,bus=pcie.0,addr=1d.0,"
193 "multifunction=on,masterbus=ich9-ehci-1.0,firstport=0 "
194 "-device ich9-usb-uhci2,bus=pcie.0,addr=1d.1,"
195 "multifunction=on,masterbus=ich9-ehci-1.0,firstport=2 "
196 "-device ich9-usb-uhci3,bus=pcie.0,addr=1d.2,"
197 "multifunction=on,masterbus=ich9-ehci-1.0,firstport=4 "
198 "-drive if=none,id=usbcdrom,media=cdrom "
199 "-device usb-tablet,bus=ich9-ehci-1.0,port=1,usb_version=1 "
200 "-device usb-storage,bus=ich9-ehci-1.0,port=2,drive=usbcdrom",
201 .objects
= "*usb* *hci*",
204 .args
= "-machine q35 -nodefaults -device pci-ohci -device usb-kbd",
205 .objects
= "*usb* *ohci*",
208 .args
= "-machine q35 -nodefaults -device megasas -device scsi-cd,drive=null0 "
209 "-blockdev driver=null-co,read-zeroes=on,node-name=null0",
210 .objects
= "megasas*",
213 .args
= "-device am53c974,id=scsi -device scsi-hd,drive=disk0 "
214 "-drive id=disk0,if=none,file=null-co://,format=raw "
216 .objects
= "*esp* *scsi* *am53c974*",
219 .args
= "-machine q35 -nodefaults "
220 "-device ac97,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
224 .args
= "-machine q35 -nodefaults "
225 "-device cs4231a,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
226 .objects
= "cs4231a* i8257*",
229 .args
= "-machine q35 -nodefaults "
230 "-device es1370,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
231 .objects
= "es1370*",
234 .args
= "-machine q35 -nodefaults "
235 "-device sb16,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
236 .objects
= "sb16* i8257*",
239 .args
= "-machine q35 -nodefaults "
240 "-parallel file:/dev/null",
241 .objects
= "parallel*",