diff options
| author | Alexander Bulekov <alxndr@bu.edu> | 2020-10-23 11:07:35 -0400 |
|---|---|---|
| committer | Thomas Huth <thuth@redhat.com> | 2020-10-26 09:53:53 +0100 |
| commit | a3c20e91dea6f7af64d886b05d678839b7b1a14c (patch) | |
| tree | 67c99697c70256521950b249800338e1da7b4bea /memory_ldst.c.inc | |
| parent | e7d3222e2e07e2a1a0aac979ef1fa5e8ef59f02c (diff) | |
| download | qemu-a3c20e91dea6f7af64d886b05d678839b7b1a14c.zip qemu-a3c20e91dea6f7af64d886b05d678839b7b1a14c.tar.gz qemu-a3c20e91dea6f7af64d886b05d678839b7b1a14c.tar.bz2 | |
fuzz: Add fuzzer callbacks to DMA-read functions
We should be careful to not call any functions besides fuzz_dma_read_cb.
Without --enable-fuzzing, fuzz_dma_read_cb is an empty inlined function.
Signed-off-by: Alexander Bulekov <alxndr@bu.edu>
Reviewed-by: Darren Kenny <darren.kenny@oracle.com>
Message-Id: <20201023150746.107063-7-alxndr@bu.edu>
Signed-off-by: Thomas Huth <thuth@redhat.com>
Diffstat (limited to 'memory_ldst.c.inc')
| -rw-r--r-- | memory_ldst.c.inc | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/memory_ldst.c.inc b/memory_ldst.c.inc index c54aee4..8d45d2e 100644 --- a/memory_ldst.c.inc +++ b/memory_ldst.c.inc @@ -42,6 +42,7 @@ static inline uint32_t glue(address_space_ldl_internal, SUFFIX)(ARG1_DECL, MO_32 | devend_memop(endian), attrs); } else { /* RAM case */ + fuzz_dma_read_cb(addr, 4, mr, false); ptr = qemu_map_ram_ptr(mr->ram_block, addr1); switch (endian) { case DEVICE_LITTLE_ENDIAN: @@ -110,6 +111,7 @@ static inline uint64_t glue(address_space_ldq_internal, SUFFIX)(ARG1_DECL, MO_64 | devend_memop(endian), attrs); } else { /* RAM case */ + fuzz_dma_read_cb(addr, 8, mr, false); ptr = qemu_map_ram_ptr(mr->ram_block, addr1); switch (endian) { case DEVICE_LITTLE_ENDIAN: @@ -175,6 +177,7 @@ uint32_t glue(address_space_ldub, SUFFIX)(ARG1_DECL, r = memory_region_dispatch_read(mr, addr1, &val, MO_8, attrs); } else { /* RAM case */ + fuzz_dma_read_cb(addr, 1, mr, false); ptr = qemu_map_ram_ptr(mr->ram_block, addr1); val = ldub_p(ptr); r = MEMTX_OK; @@ -212,6 +215,7 @@ static inline uint32_t glue(address_space_lduw_internal, SUFFIX)(ARG1_DECL, MO_16 | devend_memop(endian), attrs); } else { /* RAM case */ + fuzz_dma_read_cb(addr, 2, mr, false); ptr = qemu_map_ram_ptr(mr->ram_block, addr1); switch (endian) { case DEVICE_LITTLE_ENDIAN: |