56 lines
1.4 KiB
C
56 lines
1.4 KiB
C
|
/*
|
||
|
|
* Fork-based fuzzing helpers
|
||
|
|
*
|
||
|
|
* Copyright Red Hat Inc., 2019
|
||
|
|
*
|
||
|
|
* Authors:
|
||
|
|
* Alexander Bulekov <alxndr@bu.edu>
|
||
|
|
*
|
||
|
|
* This work is licensed under the terms of the GNU GPL, version 2 or later.
|
||
|
|
* See the COPYING file in the top-level directory.
|
||
|
|
*
|
||
|
|
*/
|
||
|
|
|
||
|
|
#include "qemu/osdep.h"
|
||
|
|
#include "fork_fuzz.h"
|
||
|
|
|
||
|
|
|
||
|
|
void counter_shm_init(void)
|
||
|
|
{
|
||
|
|
char *shm_path = g_strdup_printf("/qemu-fuzz-cntrs.%d", getpid());
|
||
|
|
int fd = shm_open(shm_path, O_CREAT | O_RDWR, S_IRUSR | S_IWUSR);
|
||
|
|
g_free(shm_path);
|
||
|
|
|
||
|
|
if (fd == -1) {
|
||
|
|
perror("Error: ");
|
||
|
|
exit(1);
|
||
|
|
}
|
||
|
|
if (ftruncate(fd, &__FUZZ_COUNTERS_END - &__FUZZ_COUNTERS_START) == -1) {
|
||
|
|
perror("Error: ");
|
||
|
|
exit(1);
|
||
|
|
}
|
||
|
|
/* Copy what's in the counter region to the shm.. */
|
||
|
|
void *rptr = mmap(NULL ,
|
||
|
|
&__FUZZ_COUNTERS_END - &__FUZZ_COUNTERS_START,
|
||
|
|
PROT_READ | PROT_WRITE, MAP_SHARED, fd, 0);
|
||
|
|
memcpy(rptr,
|
||
|
|
&__FUZZ_COUNTERS_START,
|
||
|
|
&__FUZZ_COUNTERS_END - &__FUZZ_COUNTERS_START);
|
||
|
|
|
||
|
|
munmap(rptr, &__FUZZ_COUNTERS_END - &__FUZZ_COUNTERS_START);
|
||
|
|
|
||
|
|
/* And map the shm over the counter region */
|
||
|
|
rptr = mmap(&__FUZZ_COUNTERS_START,
|
||
|
|
&__FUZZ_COUNTERS_END - &__FUZZ_COUNTERS_START,
|
||
|
|
PROT_READ | PROT_WRITE, MAP_SHARED | MAP_FIXED, fd, 0);
|
||
|
|
|
||
|
|
close(fd);
|
||
|
|
|
||
|
|
if (!rptr) {
|
||
|
|
perror("Error: ");
|
||
|
|
exit(1);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
|