[mirror_qemu.git] / tests / qtest / fuzz / generic_fuzz_configs.h

/*
 * Generic Virtual-Device Fuzzing Target Configs
 *
 * Copyright Red Hat Inc., 2020
 *
 * Authors:
 *  Alexander Bulekov   <alxndr@bu.edu>
 *
 * This work is licensed under the terms of the GNU GPL, version 2 or later.
 * See the COPYING file in the top-level directory.
 */

#ifndef GENERIC_FUZZ_CONFIGS_H
#define GENERIC_FUZZ_CONFIGS_H


typedef struct generic_fuzz_config {
    const char *name, *args, *objects;
    gchar* (*argfunc)(void); /* Result must be freeable by g_free() */
} generic_fuzz_config;

static inline gchar *generic_fuzzer_virtio_9p_args(void){
    g_autofree char *tmpdir = g_dir_make_tmp("qemu-fuzz.XXXXXX", NULL);
    g_assert_nonnull(tmpdir);

    return g_strdup_printf("-machine q35 -nodefaults "
    "-device virtio-9p,fsdev=hshare,mount_tag=hshare "
    "-fsdev local,id=hshare,path=%s,security_model=mapped-xattr,"
    "writeout=immediate,fmode=0600,dmode=0700", tmpdir);
}

const generic_fuzz_config predefined_configs[] = {
    {
        .name = "virtio-net-pci-slirp",
        .args = "-M q35 -nodefaults "
        "-device virtio-net,netdev=net0 -netdev user,id=net0",
        .objects = "virtio*",
    },{
        .name = "virtio-blk",
        .args = "-machine q35 -device virtio-blk,drive=disk0 "
        "-drive file=null-co://,id=disk0,if=none,format=raw",
        .objects = "virtio*",
    },{
        .name = "virtio-scsi",
        .args = "-machine q35 -device virtio-scsi,num_queues=8 "
        "-device scsi-hd,drive=disk0 "
        "-drive file=null-co://,id=disk0,if=none,format=raw",
        .objects = "scsi* virtio*",
    },{
        .name = "virtio-gpu",
        .args = "-machine q35 -nodefaults -device virtio-gpu",
        .objects = "virtio*",
    },{
        .name = "virtio-vga",
        .args = "-machine q35 -nodefaults -device virtio-vga",
        .objects = "virtio*",
    },{
        .name = "virtio-rng",
        .args = "-machine q35 -nodefaults -device virtio-rng",
        .objects = "virtio*",
    },{
        .name = "virtio-balloon",
        .args = "-machine q35 -nodefaults -device virtio-balloon",
        .objects = "virtio*",
    },{
        .name = "virtio-serial",
        .args = "-machine q35 -nodefaults -device virtio-serial",
        .objects = "virtio*",
    },{
        .name = "virtio-mouse",
        .args = "-machine q35 -nodefaults -device virtio-mouse",
        .objects = "virtio*",
    },{
        .name = "virtio-9p",
        .argfunc = generic_fuzzer_virtio_9p_args,
        .objects = "virtio*",
    },{
        .name = "virtio-9p-synth",
        .args = "-machine q35 -nodefaults "
        "-device virtio-9p,fsdev=hshare,mount_tag=hshare "
        "-fsdev synth,id=hshare",
        .objects = "virtio*",
    },{
        .name = "e1000",
        .args = "-M q35 -nodefaults "
        "-device e1000,netdev=net0 -netdev user,id=net0",
        .objects = "e1000",
    },{
        .name = "e1000e",
        .args = "-M q35 -nodefaults "
        "-device e1000e,netdev=net0 -netdev user,id=net0",
        .objects = "e1000e",
    },{
        .name = "igb",
        .args = "-M q35 -nodefaults "
        "-device igb,netdev=net0 -netdev user,id=net0",
        .objects = "igb",
    },{
        .name = "cirrus-vga",
        .args = "-machine q35 -nodefaults -device cirrus-vga",
        .objects = "cirrus*",
    },{
        .name = "bochs-display",
        .args = "-machine q35 -nodefaults -device bochs-display",
        .objects = "bochs*",
    },{
        .name = "intel-hda",
        .args = "-machine q35 -nodefaults -device intel-hda,id=hda0 "
        "-audiodev driver=none,id=audio0",
        "-device hda-output,bus=hda0.0,audiodev=audio0 "
        "-device hda-micro,bus=hda0.0,audiodev=audio0 "
        "-device hda-duplex,bus=hda0.0,audiodev=audio0",
        .objects = "intel-hda",
    },{
        .name = "ide-hd",
        .args = "-machine pc -nodefaults "
        "-drive file=null-co://,if=none,format=raw,id=disk0 "
        "-device ide-hd,drive=disk0",
        .objects = "*ide*",
    },{
        .name = "ide-atapi",
        .args = "-machine pc -nodefaults "
        "-drive file=null-co://,if=none,format=raw,id=disk0 "
        "-device ide-cd,drive=disk0",
        .objects = "*ide*",
    },{
        .name = "ahci-hd",
        .args = "-machine q35 -nodefaults "
        "-drive file=null-co://,if=none,format=raw,id=disk0 "
        "-device ide-hd,drive=disk0",
        .objects = "*ahci*",
    },{
        .name = "ahci-atapi",
        .args = "-machine q35 -nodefaults "
        "-drive file=null-co://,if=none,format=raw,id=disk0 "
        "-device ide-cd,drive=disk0",
        .objects = "*ahci*",
    },{
        .name = "floppy",
        .args = "-machine pc -nodefaults -device floppy,id=floppy0 "
        "-drive id=disk0,file=null-co://,file.read-zeroes=on,if=none,format=raw "
        "-device floppy,drive=disk0,drive-type=288",
        .objects = "fd* floppy* i8257",
    },{
        .name = "xhci",
        .args = "-machine q35 -nodefaults "
        "-drive file=null-co://,if=none,format=raw,id=disk0 "
        "-device qemu-xhci,id=xhci -device usb-tablet,bus=xhci.0 "
        "-device usb-bot -device usb-storage,drive=disk0 "
        "-chardev null,id=cd0 -chardev null,id=cd1 "
        "-device usb-braille,chardev=cd0 -device usb-ccid -device usb-ccid "
        "-device usb-kbd -device usb-mouse -device usb-serial,chardev=cd1 "
        "-device usb-tablet -device usb-wacom-tablet -device usb-audio",
        .objects = "*usb* *uhci* *xhci*",
    },{
        .name = "pc-i440fx",
        .args = "-machine pc",
        .objects = "*",
    },{
        .name = "pc-q35",
        .args = "-machine q35",
        .objects = "*",
    },{
        .name = "vmxnet3",
        .args = "-machine q35 -nodefaults "
        "-device vmxnet3,netdev=net0 -netdev user,id=net0",
        .objects = "vmxnet3"
    },{
        .name = "ne2k_pci",
        .args = "-machine q35 -nodefaults "
        "-device ne2k_pci,netdev=net0 -netdev user,id=net0",
        .objects = "ne2k*"
    },{
        .name = "pcnet",
        .args = "-machine q35 -nodefaults "
        "-device pcnet,netdev=net0 -netdev user,id=net0",
        .objects = "pcnet"
    },{
        .name = "rtl8139",
        .args = "-machine q35 -nodefaults "
        "-device rtl8139,netdev=net0 -netdev user,id=net0",
        .objects = "rtl8139"
    },{
        .name = "i82550",
        .args = "-machine q35 -nodefaults "
        "-device i82550,netdev=net0 -netdev user,id=net0",
        .objects = "i8255*"
    },{
        .name = "sdhci-v3",
        .args = "-nodefaults -device sdhci-pci,sd-spec-version=3 "
        "-device sd-card,drive=mydrive "
        "-drive if=none,index=0,file=null-co://,format=raw,id=mydrive -nographic",
        .objects = "sd*"
    },{
        .name = "ehci",
        .args = "-machine q35 -nodefaults "
        "-device ich9-usb-ehci1,bus=pcie.0,addr=1d.7,"
        "multifunction=on,id=ich9-ehci-1 "
        "-device ich9-usb-uhci1,bus=pcie.0,addr=1d.0,"
        "multifunction=on,masterbus=ich9-ehci-1.0,firstport=0 "
        "-device ich9-usb-uhci2,bus=pcie.0,addr=1d.1,"
        "multifunction=on,masterbus=ich9-ehci-1.0,firstport=2 "
        "-device ich9-usb-uhci3,bus=pcie.0,addr=1d.2,"
        "multifunction=on,masterbus=ich9-ehci-1.0,firstport=4 "
        "-drive if=none,id=usbcdrom,media=cdrom "
        "-device usb-tablet,bus=ich9-ehci-1.0,port=1,usb_version=1 "
        "-device usb-storage,bus=ich9-ehci-1.0,port=2,drive=usbcdrom",
        .objects = "*usb* *hci*",
    },{
        .name = "ohci",
        .args = "-machine q35 -nodefaults  -device pci-ohci -device usb-kbd",
        .objects = "*usb* *ohci*",
    },{
        .name = "megaraid",
        .args = "-machine q35 -nodefaults -device megasas -device scsi-cd,drive=null0 "
        "-blockdev driver=null-co,read-zeroes=on,node-name=null0",
        .objects = "megasas*",
    },{
        .name = "am53c974",
        .args = "-device am53c974,id=scsi -device scsi-hd,drive=disk0 "
                 "-drive id=disk0,if=none,file=null-co://,format=raw "
                 "-nodefaults",
        .objects = "*esp* *scsi* *am53c974*",
    },{
        .name = "ac97",
        .args = "-machine q35 -nodefaults "
        "-device ac97,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
        .objects = "ac97*",
    },{
        .name = "cs4231a",
        .args = "-machine q35 -nodefaults "
        "-device cs4231a,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
        .objects = "cs4231a* i8257*",
    },{
        .name = "es1370",
        .args = "-machine q35 -nodefaults "
        "-device es1370,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
        .objects = "es1370*",
    },{
        .name = "sb16",
        .args = "-machine q35 -nodefaults "
        "-device sb16,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
        .objects = "sb16* i8257*",
    },{
        .name = "parallel",
        .args = "-machine q35 -nodefaults "
        "-parallel file:/dev/null",
        .objects = "parallel*",
    }
};

#endif
Commit	Line	Data
61fc27e0 AB	1	/*
	2	* Generic Virtual-Device Fuzzing Target Configs
	3	*
	4	* Copyright Red Hat Inc., 2020
	5	*
	6	* Authors:
	7	* Alexander Bulekov <alxndr@bu.edu>
	8	*
	9	* This work is licensed under the terms of the GNU GPL, version 2 or later.
	10	* See the COPYING file in the top-level directory.
	11	*/
	12
	13	#ifndef GENERIC_FUZZ_CONFIGS_H
	14	#define GENERIC_FUZZ_CONFIGS_H
	15
61fc27e0 AB	16
	17	typedef struct generic_fuzz_config {
	18	const char name, args, *objects;
8630b43f	19	gchar* (argfunc)(void); / Result must be freeable by g_free() */
61fc27e0 AB	20	} generic_fuzz_config;
61fc27e0 AB	21
fff7111f	22	static inline gchar *generic_fuzzer_virtio_9p_args(void){
9e5d8403 BM	23	g_autofree char *tmpdir = g_dir_make_tmp("qemu-fuzz.XXXXXX", NULL);
9e5d8403 BM	24	g_assert_nonnull(tmpdir);
fff7111f AB	25
	26	return g_strdup_printf("-machine q35 -nodefaults "
	27	"-device virtio-9p,fsdev=hshare,mount_tag=hshare "
	28	"-fsdev local,id=hshare,path=%s,security_model=mapped-xattr,"
	29	"writeout=immediate,fmode=0600,dmode=0700", tmpdir);
	30	}
	31
61fc27e0 AB	32	const generic_fuzz_config predefined_configs[] = {
	33	{
	34	.name = "virtio-net-pci-slirp",
	35	.args = "-M q35 -nodefaults "
	36	"-device virtio-net,netdev=net0 -netdev user,id=net0",
	37	.objects = "virtio*",
	38	},{
	39	.name = "virtio-blk",
	40	.args = "-machine q35 -device virtio-blk,drive=disk0 "
	41	"-drive file=null-co://,id=disk0,if=none,format=raw",
	42	.objects = "virtio*",
	43	},{
	44	.name = "virtio-scsi",
	45	.args = "-machine q35 -device virtio-scsi,num_queues=8 "
	46	"-device scsi-hd,drive=disk0 "
	47	"-drive file=null-co://,id=disk0,if=none,format=raw",
	48	.objects = "scsi* virtio*",
	49	},{
	50	.name = "virtio-gpu",
	51	.args = "-machine q35 -nodefaults -device virtio-gpu",
	52	.objects = "virtio*",
	53	},{
	54	.name = "virtio-vga",
	55	.args = "-machine q35 -nodefaults -device virtio-vga",
	56	.objects = "virtio*",
	57	},{
	58	.name = "virtio-rng",
	59	.args = "-machine q35 -nodefaults -device virtio-rng",
	60	.objects = "virtio*",
	61	},{
	62	.name = "virtio-balloon",
	63	.args = "-machine q35 -nodefaults -device virtio-balloon",
	64	.objects = "virtio*",
	65	},{
	66	.name = "virtio-serial",
	67	.args = "-machine q35 -nodefaults -device virtio-serial",
	68	.objects = "virtio*",
	69	},{
	70	.name = "virtio-mouse",
	71	.args = "-machine q35 -nodefaults -device virtio-mouse",
	72	.objects = "virtio*",
fff7111f AB	73	},{
	74	.name = "virtio-9p",
	75	.argfunc = generic_fuzzer_virtio_9p_args,
	76	.objects = "virtio*",
	77	},{
	78	.name = "virtio-9p-synth",
	79	.args = "-machine q35 -nodefaults "
	80	"-device virtio-9p,fsdev=hshare,mount_tag=hshare "
	81	"-fsdev synth,id=hshare",
	82	.objects = "virtio*",
61fc27e0 AB	83	},{
	84	.name = "e1000",
	85	.args = "-M q35 -nodefaults "
	86	"-device e1000,netdev=net0 -netdev user,id=net0",
	87	.objects = "e1000",
	88	},{
	89	.name = "e1000e",
	90	.args = "-M q35 -nodefaults "
	91	"-device e1000e,netdev=net0 -netdev user,id=net0",
	92	.objects = "e1000e",
45cb69bb AO	93	},{
	94	.name = "igb",
	95	.args = "-M q35 -nodefaults "
	96	"-device igb,netdev=net0 -netdev user,id=net0",
	97	.objects = "igb",
61fc27e0 AB	98	},{
	99	.name = "cirrus-vga",
	100	.args = "-machine q35 -nodefaults -device cirrus-vga",
	101	.objects = "cirrus*",
	102	},{
	103	.name = "bochs-display",
	104	.args = "-machine q35 -nodefaults -device bochs-display",
	105	.objects = "bochs*",
	106	},{
	107	.name = "intel-hda",
	108	.args = "-machine q35 -nodefaults -device intel-hda,id=hda0 "
50333482 MK	109	"-audiodev driver=none,id=audio0",
	110	"-device hda-output,bus=hda0.0,audiodev=audio0 "
	111	"-device hda-micro,bus=hda0.0,audiodev=audio0 "
	112	"-device hda-duplex,bus=hda0.0,audiodev=audio0",
61fc27e0 AB	113	.objects = "intel-hda",
	114	},{
	115	.name = "ide-hd",
d54d9b1d AB	116	.args = "-machine pc -nodefaults "
	117	"-drive file=null-co://,if=none,format=raw,id=disk0 "
	118	"-device ide-hd,drive=disk0",
	119	.objects = "ide",
	120	},{
	121	.name = "ide-atapi",
	122	.args = "-machine pc -nodefaults "
	123	"-drive file=null-co://,if=none,format=raw,id=disk0 "
	124	"-device ide-cd,drive=disk0",
	125	.objects = "ide",
	126	},{
	127	.name = "ahci-hd",
61fc27e0 AB	128	.args = "-machine q35 -nodefaults "
	129	"-drive file=null-co://,if=none,format=raw,id=disk0 "
	130	"-device ide-hd,drive=disk0",
d54d9b1d AB	131	.objects = "ahci",
	132	},{
	133	.name = "ahci-atapi",
	134	.args = "-machine q35 -nodefaults "
	135	"-drive file=null-co://,if=none,format=raw,id=disk0 "
	136	"-device ide-cd,drive=disk0",
	137	.objects = "ahci",
61fc27e0 AB	138	},{
	139	.name = "floppy",
	140	.args = "-machine pc -nodefaults -device floppy,id=floppy0 "
d61368d1	141	"-drive id=disk0,file=null-co://,file.read-zeroes=on,if=none,format=raw "
61fc27e0	142	"-device floppy,drive=disk0,drive-type=288",
d61368d1	143	.objects = "fd* floppy* i8257",
61fc27e0 AB	144	},{
	145	.name = "xhci",
	146	.args = "-machine q35 -nodefaults "
	147	"-drive file=null-co://,if=none,format=raw,id=disk0 "
	148	"-device qemu-xhci,id=xhci -device usb-tablet,bus=xhci.0 "
	149	"-device usb-bot -device usb-storage,drive=disk0 "
	150	"-chardev null,id=cd0 -chardev null,id=cd1 "
	151	"-device usb-braille,chardev=cd0 -device usb-ccid -device usb-ccid "
	152	"-device usb-kbd -device usb-mouse -device usb-serial,chardev=cd1 "
	153	"-device usb-tablet -device usb-wacom-tablet -device usb-audio",
	154	.objects = "usb uhci xhci",
	155	},{
	156	.name = "pc-i440fx",
	157	.args = "-machine pc",
	158	.objects = "*",
	159	},{
	160	.name = "pc-q35",
	161	.args = "-machine q35",
	162	.objects = "*",
cbe945c7 AB	163	},{
	164	.name = "vmxnet3",
	165	.args = "-machine q35 -nodefaults "
	166	"-device vmxnet3,netdev=net0 -netdev user,id=net0",
	167	.objects = "vmxnet3"
	168	},{
	169	.name = "ne2k_pci",
	170	.args = "-machine q35 -nodefaults "
	171	"-device ne2k_pci,netdev=net0 -netdev user,id=net0",
	172	.objects = "ne2k*"
	173	},{
	174	.name = "pcnet",
	175	.args = "-machine q35 -nodefaults "
	176	"-device pcnet,netdev=net0 -netdev user,id=net0",
	177	.objects = "pcnet"
	178	},{
	179	.name = "rtl8139",
	180	.args = "-machine q35 -nodefaults "
	181	"-device rtl8139,netdev=net0 -netdev user,id=net0",
	182	.objects = "rtl8139"
	183	},{
	184	.name = "i82550",
	185	.args = "-machine q35 -nodefaults "
	186	"-device i82550,netdev=net0 -netdev user,id=net0",
e8a2a621	187	.objects = "i8255*"
cbe945c7 AB	188	},{
	189	.name = "sdhci-v3",
	190	.args = "-nodefaults -device sdhci-pci,sd-spec-version=3 "
	191	"-device sd-card,drive=mydrive "
9585376a	192	"-drive if=none,index=0,file=null-co://,format=raw,id=mydrive -nographic",
cbe945c7 AB	193	.objects = "sd*"
	194	},{
	195	.name = "ehci",
	196	.args = "-machine q35 -nodefaults "
	197	"-device ich9-usb-ehci1,bus=pcie.0,addr=1d.7,"
	198	"multifunction=on,id=ich9-ehci-1 "
	199	"-device ich9-usb-uhci1,bus=pcie.0,addr=1d.0,"
	200	"multifunction=on,masterbus=ich9-ehci-1.0,firstport=0 "
	201	"-device ich9-usb-uhci2,bus=pcie.0,addr=1d.1,"
	202	"multifunction=on,masterbus=ich9-ehci-1.0,firstport=2 "
	203	"-device ich9-usb-uhci3,bus=pcie.0,addr=1d.2,"
	204	"multifunction=on,masterbus=ich9-ehci-1.0,firstport=4 "
	205	"-drive if=none,id=usbcdrom,media=cdrom "
	206	"-device usb-tablet,bus=ich9-ehci-1.0,port=1,usb_version=1 "
	207	"-device usb-storage,bus=ich9-ehci-1.0,port=2,drive=usbcdrom",
	208	.objects = "usb hci",
	209	},{
	210	.name = "ohci",
	211	.args = "-machine q35 -nodefaults -device pci-ohci -device usb-kbd",
	212	.objects = "usb ohci",
	213	},{
	214	.name = "megaraid",
	215	.args = "-machine q35 -nodefaults -device megasas -device scsi-cd,drive=null0 "
	216	"-blockdev driver=null-co,read-zeroes=on,node-name=null0",
	217	.objects = "megasas*",
d7da0e56 AB	218	},{
	219	.name = "am53c974",
	220	.args = "-device am53c974,id=scsi -device scsi-hd,drive=disk0 "
	221	"-drive id=disk0,if=none,file=null-co://,format=raw "
	222	"-nodefaults",
	223	.objects = "esp scsi am53c974",
cbe945c7 AB	224	},{
	225	.name = "ac97",
	226	.args = "-machine q35 -nodefaults "
	227	"-device ac97,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
	228	.objects = "ac97*",
	229	},{
	230	.name = "cs4231a",
	231	.args = "-machine q35 -nodefaults "
	232	"-device cs4231a,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
	233	.objects = "cs4231a* i8257*",
	234	},{
	235	.name = "es1370",
	236	.args = "-machine q35 -nodefaults "
	237	"-device es1370,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
	238	.objects = "es1370*",
	239	},{
	240	.name = "sb16",
	241	.args = "-machine q35 -nodefaults "
	242	"-device sb16,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
	243	.objects = "sb16* i8257*",
	244	},{
	245	.name = "parallel",
	246	.args = "-machine q35 -nodefaults "
	247	"-parallel file:/dev/null",
	248	.objects = "parallel*",
61fc27e0 AB	249	}
	250	};
	251
	252	#endif