qemu-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH 04/10] fuzz/generic-fuzz: add a limit on DMA bytes written


From: Philippe Mathieu-Daudé
Subject: Re: [PATCH 04/10] fuzz/generic-fuzz: add a limit on DMA bytes written
Date: Sun, 5 Feb 2023 11:42:22 +0100
User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0) Gecko/20100101 Thunderbird/102.6.1

On 5/2/23 05:29, Alexander Bulekov wrote:
As we have repplaced fork-based fuzzing, with reboots - we can no longer

Typo "replaced".

use a timeout+exit() to avoid slow inputs. Libfuzzer has its own timer
that it uses to catch slow inputs, however these timeouts are usually
seconds-minutes long: more than enough to bog-down the fuzzing process.
However, I found that slow inputs often attempt to fill overly large DMA
requests. Thus, we can mitigate most timeouts by setting a cap on the
total number of DMA bytes written by an input.

Signed-off-by: Alexander Bulekov <alxndr@bu.edu>
---
  tests/qtest/fuzz/generic_fuzz.c | 5 +++++
  1 file changed, 5 insertions(+)

Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org>




reply via email to

[Prev in Thread] Current Thread [Next in Thread]