Skip to content

Commit

Permalink
fuzz: refine the ide/ahci fuzzer configs
Browse files Browse the repository at this point in the history
Disks work differently depending on the x86 machine type (SATA vs PATA).
Additionally, we should fuzz the atapi code paths, which might contain
vulnerabilities such as CVE-2020-29443. This patch adds hard-disk and
cdrom generic-fuzzer configs for both the pc (PATA) and q35 (SATA)
machine types.

Signed-off-by: Alexander Bulekov <alxndr@bu.edu>
Acked-by: Thomas Huth <thuth@redhat.com>
Reviewed-by: Darren Kenny <darren.kenny@oracle.com>
Message-Id: <20210120152211.109782-1-alxndr@bu.edu>
  • Loading branch information
a1xndr authored and bonzini committed Feb 1, 2021
1 parent 4da1172 commit c3a3205
Showing 1 changed file with 19 additions and 1 deletion.
20 changes: 19 additions & 1 deletion tests/qtest/fuzz/generic_fuzz_configs.h
Expand Up @@ -85,10 +85,28 @@ const generic_fuzz_config predefined_configs[] = {
.objects = "intel-hda",
},{
.name = "ide-hd",
.args = "-machine pc -nodefaults "
"-drive file=null-co://,if=none,format=raw,id=disk0 "
"-device ide-hd,drive=disk0",
.objects = "*ide*",
},{
.name = "ide-atapi",
.args = "-machine pc -nodefaults "
"-drive file=null-co://,if=none,format=raw,id=disk0 "
"-device ide-cd,drive=disk0",
.objects = "*ide*",
},{
.name = "ahci-hd",
.args = "-machine q35 -nodefaults "
"-drive file=null-co://,if=none,format=raw,id=disk0 "
"-device ide-hd,drive=disk0",
.objects = "ahci*",
.objects = "*ahci*",
},{
.name = "ahci-atapi",
.args = "-machine q35 -nodefaults "
"-drive file=null-co://,if=none,format=raw,id=disk0 "
"-device ide-cd,drive=disk0",
.objects = "*ahci*",
},{
.name = "floppy",
.args = "-machine pc -nodefaults -device floppy,id=floppy0 "
Expand Down

0 comments on commit c3a3205

Please sign in to comment.