b911c30c56
The fuzz tests are currently scheduled for all targets, but their setup code limits the run to "i386", so that these tests always show "SKIP" on other targets. Move it to the right x86 list in meson.build, then we can drop the architecture check during runtime, too. Message-Id: <20220414130127.719528-1-thuth@redhat.com> Reviewed-by: Laurent Vivier <lvivier@redhat.com> Signed-off-by: Thomas Huth <thuth@redhat.com>
66 lines
1.8 KiB
C
66 lines
1.8 KiB
C
/*
|
|
* QTest fuzzer-generated testcase for sb16 audio device
|
|
*
|
|
* Copyright (c) 2021 Philippe Mathieu-Daudé <f4bug@amsat.org>
|
|
*
|
|
* SPDX-License-Identifier: GPL-2.0-or-later
|
|
*/
|
|
|
|
#include "qemu/osdep.h"
|
|
#include "libqos/libqtest.h"
|
|
|
|
/*
|
|
* This used to trigger the assert in audio_calloc
|
|
* https://bugs.launchpad.net/qemu/+bug/1910603
|
|
*/
|
|
static void test_fuzz_sb16_0x1c(void)
|
|
{
|
|
QTestState *s = qtest_init("-M q35 -display none "
|
|
"-device sb16,audiodev=snd0 "
|
|
"-audiodev none,id=snd0");
|
|
qtest_outw(s, 0x22c, 0x41);
|
|
qtest_outb(s, 0x22c, 0x00);
|
|
qtest_outw(s, 0x22c, 0x1004);
|
|
qtest_outw(s, 0x22c, 0x001c);
|
|
qtest_quit(s);
|
|
}
|
|
|
|
static void test_fuzz_sb16_0x91(void)
|
|
{
|
|
QTestState *s = qtest_init("-M pc -display none "
|
|
"-device sb16,audiodev=none "
|
|
"-audiodev id=none,driver=none");
|
|
qtest_outw(s, 0x22c, 0xf141);
|
|
qtest_outb(s, 0x22c, 0x00);
|
|
qtest_outb(s, 0x22c, 0x24);
|
|
qtest_outb(s, 0x22c, 0x91);
|
|
qtest_quit(s);
|
|
}
|
|
|
|
/*
|
|
* This used to trigger the assert in audio_calloc
|
|
* through command 0xd4
|
|
*/
|
|
static void test_fuzz_sb16_0xd4(void)
|
|
{
|
|
QTestState *s = qtest_init("-M pc -display none "
|
|
"-device sb16,audiodev=none "
|
|
"-audiodev id=none,driver=none");
|
|
qtest_outb(s, 0x22c, 0x41);
|
|
qtest_outb(s, 0x22c, 0x00);
|
|
qtest_outb(s, 0x22c, 0x14);
|
|
qtest_outb(s, 0x22c, 0xd4);
|
|
qtest_quit(s);
|
|
}
|
|
|
|
int main(int argc, char **argv)
|
|
{
|
|
g_test_init(&argc, &argv, NULL);
|
|
|
|
qtest_add_func("fuzz/test_fuzz_sb16/1c", test_fuzz_sb16_0x1c);
|
|
qtest_add_func("fuzz/test_fuzz_sb16/91", test_fuzz_sb16_0x91);
|
|
qtest_add_func("fuzz/test_fuzz_sb16/d4", test_fuzz_sb16_0xd4);
|
|
|
|
return g_test_run();
|
|
}
|