161fc27e0SAlexander Bulekov /*
261fc27e0SAlexander Bulekov  * Generic Virtual-Device Fuzzing Target Configs
361fc27e0SAlexander Bulekov  *
461fc27e0SAlexander Bulekov  * Copyright Red Hat Inc., 2020
561fc27e0SAlexander Bulekov  *
661fc27e0SAlexander Bulekov  * Authors:
761fc27e0SAlexander Bulekov  *  Alexander Bulekov   <alxndr@bu.edu>
861fc27e0SAlexander Bulekov  *
961fc27e0SAlexander Bulekov  * This work is licensed under the terms of the GNU GPL, version 2 or later.
1061fc27e0SAlexander Bulekov  * See the COPYING file in the top-level directory.
1161fc27e0SAlexander Bulekov  */
1261fc27e0SAlexander Bulekov 
1361fc27e0SAlexander Bulekov #ifndef GENERIC_FUZZ_CONFIGS_H
1461fc27e0SAlexander Bulekov #define GENERIC_FUZZ_CONFIGS_H
1561fc27e0SAlexander Bulekov 
1661fc27e0SAlexander Bulekov 
1761fc27e0SAlexander Bulekov typedef struct generic_fuzz_config {
1861fc27e0SAlexander Bulekov     const char *name, *args, *objects;
198630b43fSAlexander Bulekov     gchar* (*argfunc)(void); /* Result must be freeable by g_free() */
2061fc27e0SAlexander Bulekov } generic_fuzz_config;
2161fc27e0SAlexander Bulekov 
generic_fuzzer_virtio_9p_args(void)22fff7111fSAlexander Bulekov static inline gchar *generic_fuzzer_virtio_9p_args(void){
239e5d8403SBin Meng     g_autofree char *tmpdir = g_dir_make_tmp("qemu-fuzz.XXXXXX", NULL);
249e5d8403SBin Meng     g_assert_nonnull(tmpdir);
25fff7111fSAlexander Bulekov 
26fff7111fSAlexander Bulekov     return g_strdup_printf("-machine q35 -nodefaults "
27fff7111fSAlexander Bulekov     "-device virtio-9p,fsdev=hshare,mount_tag=hshare "
28fff7111fSAlexander Bulekov     "-fsdev local,id=hshare,path=%s,security_model=mapped-xattr,"
29fff7111fSAlexander Bulekov     "writeout=immediate,fmode=0600,dmode=0700", tmpdir);
30fff7111fSAlexander Bulekov }
31fff7111fSAlexander Bulekov 
3261fc27e0SAlexander Bulekov const generic_fuzz_config predefined_configs[] = {
3361fc27e0SAlexander Bulekov     {
3461fc27e0SAlexander Bulekov         .name = "virtio-net-pci-slirp",
3561fc27e0SAlexander Bulekov         .args = "-M q35 -nodefaults "
3661fc27e0SAlexander Bulekov         "-device virtio-net,netdev=net0 -netdev user,id=net0",
3761fc27e0SAlexander Bulekov         .objects = "virtio*",
3861fc27e0SAlexander Bulekov     },{
3961fc27e0SAlexander Bulekov         .name = "virtio-blk",
4061fc27e0SAlexander Bulekov         .args = "-machine q35 -device virtio-blk,drive=disk0 "
4161fc27e0SAlexander Bulekov         "-drive file=null-co://,id=disk0,if=none,format=raw",
4261fc27e0SAlexander Bulekov         .objects = "virtio*",
4361fc27e0SAlexander Bulekov     },{
4461fc27e0SAlexander Bulekov         .name = "virtio-scsi",
4561fc27e0SAlexander Bulekov         .args = "-machine q35 -device virtio-scsi,num_queues=8 "
4661fc27e0SAlexander Bulekov         "-device scsi-hd,drive=disk0 "
4761fc27e0SAlexander Bulekov         "-drive file=null-co://,id=disk0,if=none,format=raw",
4861fc27e0SAlexander Bulekov         .objects = "scsi* virtio*",
4961fc27e0SAlexander Bulekov     },{
5061fc27e0SAlexander Bulekov         .name = "virtio-gpu",
5161fc27e0SAlexander Bulekov         .args = "-machine q35 -nodefaults -device virtio-gpu",
5261fc27e0SAlexander Bulekov         .objects = "virtio*",
5361fc27e0SAlexander Bulekov     },{
5461fc27e0SAlexander Bulekov         .name = "virtio-vga",
5561fc27e0SAlexander Bulekov         .args = "-machine q35 -nodefaults -device virtio-vga",
5661fc27e0SAlexander Bulekov         .objects = "virtio*",
5761fc27e0SAlexander Bulekov     },{
5861fc27e0SAlexander Bulekov         .name = "virtio-rng",
5961fc27e0SAlexander Bulekov         .args = "-machine q35 -nodefaults -device virtio-rng",
6061fc27e0SAlexander Bulekov         .objects = "virtio*",
6161fc27e0SAlexander Bulekov     },{
6261fc27e0SAlexander Bulekov         .name = "virtio-balloon",
6361fc27e0SAlexander Bulekov         .args = "-machine q35 -nodefaults -device virtio-balloon",
6461fc27e0SAlexander Bulekov         .objects = "virtio*",
6561fc27e0SAlexander Bulekov     },{
6661fc27e0SAlexander Bulekov         .name = "virtio-serial",
6761fc27e0SAlexander Bulekov         .args = "-machine q35 -nodefaults -device virtio-serial",
6861fc27e0SAlexander Bulekov         .objects = "virtio*",
6961fc27e0SAlexander Bulekov     },{
7061fc27e0SAlexander Bulekov         .name = "virtio-mouse",
7161fc27e0SAlexander Bulekov         .args = "-machine q35 -nodefaults -device virtio-mouse",
7261fc27e0SAlexander Bulekov         .objects = "virtio*",
7361fc27e0SAlexander Bulekov     },{
74fff7111fSAlexander Bulekov         .name = "virtio-9p",
75fff7111fSAlexander Bulekov         .argfunc = generic_fuzzer_virtio_9p_args,
76fff7111fSAlexander Bulekov         .objects = "virtio*",
77fff7111fSAlexander Bulekov     },{
78fff7111fSAlexander Bulekov         .name = "virtio-9p-synth",
79fff7111fSAlexander Bulekov         .args = "-machine q35 -nodefaults "
80fff7111fSAlexander Bulekov         "-device virtio-9p,fsdev=hshare,mount_tag=hshare "
81fff7111fSAlexander Bulekov         "-fsdev synth,id=hshare",
82fff7111fSAlexander Bulekov         .objects = "virtio*",
83fff7111fSAlexander Bulekov     },{
8461fc27e0SAlexander Bulekov         .name = "e1000",
8561fc27e0SAlexander Bulekov         .args = "-M q35 -nodefaults "
8661fc27e0SAlexander Bulekov         "-device e1000,netdev=net0 -netdev user,id=net0",
8761fc27e0SAlexander Bulekov         .objects = "e1000",
8861fc27e0SAlexander Bulekov     },{
8961fc27e0SAlexander Bulekov         .name = "e1000e",
9061fc27e0SAlexander Bulekov         .args = "-M q35 -nodefaults "
9161fc27e0SAlexander Bulekov         "-device e1000e,netdev=net0 -netdev user,id=net0",
9261fc27e0SAlexander Bulekov         .objects = "e1000e",
9361fc27e0SAlexander Bulekov     },{
9445cb69bbSAkihiko Odaki         .name = "igb",
9545cb69bbSAkihiko Odaki         .args = "-M q35 -nodefaults "
9645cb69bbSAkihiko Odaki         "-device igb,netdev=net0 -netdev user,id=net0",
9745cb69bbSAkihiko Odaki         .objects = "igb",
9845cb69bbSAkihiko Odaki     },{
9961fc27e0SAlexander Bulekov         .name = "cirrus-vga",
10061fc27e0SAlexander Bulekov         .args = "-machine q35 -nodefaults -device cirrus-vga",
10161fc27e0SAlexander Bulekov         .objects = "cirrus*",
10261fc27e0SAlexander Bulekov     },{
10361fc27e0SAlexander Bulekov         .name = "bochs-display",
10461fc27e0SAlexander Bulekov         .args = "-machine q35 -nodefaults -device bochs-display",
10561fc27e0SAlexander Bulekov         .objects = "bochs*",
10661fc27e0SAlexander Bulekov     },{
10761fc27e0SAlexander Bulekov         .name = "intel-hda",
10861fc27e0SAlexander Bulekov         .args = "-machine q35 -nodefaults -device intel-hda,id=hda0 "
10950333482SMartin Kletzander         "-audiodev driver=none,id=audio0",
11050333482SMartin Kletzander         "-device hda-output,bus=hda0.0,audiodev=audio0 "
11150333482SMartin Kletzander         "-device hda-micro,bus=hda0.0,audiodev=audio0 "
11250333482SMartin Kletzander         "-device hda-duplex,bus=hda0.0,audiodev=audio0",
11361fc27e0SAlexander Bulekov         .objects = "intel-hda",
11461fc27e0SAlexander Bulekov     },{
11561fc27e0SAlexander Bulekov         .name = "ide-hd",
116d54d9b1dSAlexander Bulekov         .args = "-machine pc -nodefaults "
117d54d9b1dSAlexander Bulekov         "-drive file=null-co://,if=none,format=raw,id=disk0 "
118d54d9b1dSAlexander Bulekov         "-device ide-hd,drive=disk0",
119d54d9b1dSAlexander Bulekov         .objects = "*ide*",
120d54d9b1dSAlexander Bulekov     },{
121d54d9b1dSAlexander Bulekov         .name = "ide-atapi",
122d54d9b1dSAlexander Bulekov         .args = "-machine pc -nodefaults "
123d54d9b1dSAlexander Bulekov         "-drive file=null-co://,if=none,format=raw,id=disk0 "
124d54d9b1dSAlexander Bulekov         "-device ide-cd,drive=disk0",
125d54d9b1dSAlexander Bulekov         .objects = "*ide*",
126d54d9b1dSAlexander Bulekov     },{
127d54d9b1dSAlexander Bulekov         .name = "ahci-hd",
12861fc27e0SAlexander Bulekov         .args = "-machine q35 -nodefaults "
12961fc27e0SAlexander Bulekov         "-drive file=null-co://,if=none,format=raw,id=disk0 "
13061fc27e0SAlexander Bulekov         "-device ide-hd,drive=disk0",
131d54d9b1dSAlexander Bulekov         .objects = "*ahci*",
132d54d9b1dSAlexander Bulekov     },{
133d54d9b1dSAlexander Bulekov         .name = "ahci-atapi",
134d54d9b1dSAlexander Bulekov         .args = "-machine q35 -nodefaults "
135d54d9b1dSAlexander Bulekov         "-drive file=null-co://,if=none,format=raw,id=disk0 "
136d54d9b1dSAlexander Bulekov         "-device ide-cd,drive=disk0",
137d54d9b1dSAlexander Bulekov         .objects = "*ahci*",
13861fc27e0SAlexander Bulekov     },{
13961fc27e0SAlexander Bulekov         .name = "floppy",
14061fc27e0SAlexander Bulekov         .args = "-machine pc -nodefaults -device floppy,id=floppy0 "
141d61368d1SAlexander Bulekov         "-drive id=disk0,file=null-co://,file.read-zeroes=on,if=none,format=raw "
14261fc27e0SAlexander Bulekov         "-device floppy,drive=disk0,drive-type=288",
143d61368d1SAlexander Bulekov         .objects = "fd* floppy* i8257",
14461fc27e0SAlexander Bulekov     },{
14561fc27e0SAlexander Bulekov         .name = "xhci",
14661fc27e0SAlexander Bulekov         .args = "-machine q35 -nodefaults "
14761fc27e0SAlexander Bulekov         "-drive file=null-co://,if=none,format=raw,id=disk0 "
14861fc27e0SAlexander Bulekov         "-device qemu-xhci,id=xhci -device usb-tablet,bus=xhci.0 "
14961fc27e0SAlexander Bulekov         "-device usb-bot -device usb-storage,drive=disk0 "
15061fc27e0SAlexander Bulekov         "-chardev null,id=cd0 -chardev null,id=cd1 "
15161fc27e0SAlexander Bulekov         "-device usb-braille,chardev=cd0 -device usb-ccid -device usb-ccid "
15261fc27e0SAlexander Bulekov         "-device usb-kbd -device usb-mouse -device usb-serial,chardev=cd1 "
15361fc27e0SAlexander Bulekov         "-device usb-tablet -device usb-wacom-tablet -device usb-audio",
15461fc27e0SAlexander Bulekov         .objects = "*usb* *uhci* *xhci*",
15561fc27e0SAlexander Bulekov     },{
15661fc27e0SAlexander Bulekov         .name = "pc-i440fx",
15761fc27e0SAlexander Bulekov         .args = "-machine pc",
15861fc27e0SAlexander Bulekov         .objects = "*",
15961fc27e0SAlexander Bulekov     },{
16061fc27e0SAlexander Bulekov         .name = "pc-q35",
16161fc27e0SAlexander Bulekov         .args = "-machine q35",
16261fc27e0SAlexander Bulekov         .objects = "*",
163cbe945c7SAlexander Bulekov     },{
164cbe945c7SAlexander Bulekov         .name = "vmxnet3",
165cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults "
166cbe945c7SAlexander Bulekov         "-device vmxnet3,netdev=net0 -netdev user,id=net0",
167cbe945c7SAlexander Bulekov         .objects = "vmxnet3"
168cbe945c7SAlexander Bulekov     },{
169cbe945c7SAlexander Bulekov         .name = "ne2k_pci",
170cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults "
171cbe945c7SAlexander Bulekov         "-device ne2k_pci,netdev=net0 -netdev user,id=net0",
172cbe945c7SAlexander Bulekov         .objects = "ne2k*"
173cbe945c7SAlexander Bulekov     },{
174cbe945c7SAlexander Bulekov         .name = "pcnet",
175cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults "
176cbe945c7SAlexander Bulekov         "-device pcnet,netdev=net0 -netdev user,id=net0",
177cbe945c7SAlexander Bulekov         .objects = "pcnet"
178cbe945c7SAlexander Bulekov     },{
179cbe945c7SAlexander Bulekov         .name = "rtl8139",
180cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults "
181cbe945c7SAlexander Bulekov         "-device rtl8139,netdev=net0 -netdev user,id=net0",
182cbe945c7SAlexander Bulekov         .objects = "rtl8139"
183cbe945c7SAlexander Bulekov     },{
184cbe945c7SAlexander Bulekov         .name = "i82550",
185cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults "
186cbe945c7SAlexander Bulekov         "-device i82550,netdev=net0 -netdev user,id=net0",
187e8a2a621SAlexander Bulekov         .objects = "i8255*"
188cbe945c7SAlexander Bulekov     },{
189cbe945c7SAlexander Bulekov         .name = "sdhci-v3",
190cbe945c7SAlexander Bulekov         .args = "-nodefaults -device sdhci-pci,sd-spec-version=3 "
191cbe945c7SAlexander Bulekov         "-device sd-card,drive=mydrive "
1929585376aSMarkus Armbruster         "-drive if=none,index=0,file=null-co://,format=raw,id=mydrive -nographic",
193cbe945c7SAlexander Bulekov         .objects = "sd*"
194cbe945c7SAlexander Bulekov     },{
195cbe945c7SAlexander Bulekov         .name = "ehci",
196cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults "
197cbe945c7SAlexander Bulekov         "-device ich9-usb-ehci1,bus=pcie.0,addr=1d.7,"
198cbe945c7SAlexander Bulekov         "multifunction=on,id=ich9-ehci-1 "
199cbe945c7SAlexander Bulekov         "-device ich9-usb-uhci1,bus=pcie.0,addr=1d.0,"
200cbe945c7SAlexander Bulekov         "multifunction=on,masterbus=ich9-ehci-1.0,firstport=0 "
201cbe945c7SAlexander Bulekov         "-device ich9-usb-uhci2,bus=pcie.0,addr=1d.1,"
202cbe945c7SAlexander Bulekov         "multifunction=on,masterbus=ich9-ehci-1.0,firstport=2 "
203cbe945c7SAlexander Bulekov         "-device ich9-usb-uhci3,bus=pcie.0,addr=1d.2,"
204cbe945c7SAlexander Bulekov         "multifunction=on,masterbus=ich9-ehci-1.0,firstport=4 "
205cbe945c7SAlexander Bulekov         "-drive if=none,id=usbcdrom,media=cdrom "
206cbe945c7SAlexander Bulekov         "-device usb-tablet,bus=ich9-ehci-1.0,port=1,usb_version=1 "
207cbe945c7SAlexander Bulekov         "-device usb-storage,bus=ich9-ehci-1.0,port=2,drive=usbcdrom",
208cbe945c7SAlexander Bulekov         .objects = "*usb* *hci*",
209cbe945c7SAlexander Bulekov     },{
210cbe945c7SAlexander Bulekov         .name = "ohci",
211cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults  -device pci-ohci -device usb-kbd",
212cbe945c7SAlexander Bulekov         .objects = "*usb* *ohci*",
213cbe945c7SAlexander Bulekov     },{
214cbe945c7SAlexander Bulekov         .name = "megaraid",
215cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults -device megasas -device scsi-cd,drive=null0 "
216cbe945c7SAlexander Bulekov         "-blockdev driver=null-co,read-zeroes=on,node-name=null0",
217cbe945c7SAlexander Bulekov         .objects = "megasas*",
218cbe945c7SAlexander Bulekov     },{
219d7da0e56SAlexander Bulekov         .name = "am53c974",
220d7da0e56SAlexander Bulekov         .args = "-device am53c974,id=scsi -device scsi-hd,drive=disk0 "
221d7da0e56SAlexander Bulekov                  "-drive id=disk0,if=none,file=null-co://,format=raw "
222d7da0e56SAlexander Bulekov                  "-nodefaults",
223d7da0e56SAlexander Bulekov         .objects = "*esp* *scsi* *am53c974*",
224d7da0e56SAlexander Bulekov     },{
225cbe945c7SAlexander Bulekov         .name = "ac97",
226cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults "
227cbe945c7SAlexander Bulekov         "-device ac97,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
228cbe945c7SAlexander Bulekov         .objects = "ac97*",
229cbe945c7SAlexander Bulekov     },{
230cbe945c7SAlexander Bulekov         .name = "cs4231a",
231cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults "
232cbe945c7SAlexander Bulekov         "-device cs4231a,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
233cbe945c7SAlexander Bulekov         .objects = "cs4231a* i8257*",
234cbe945c7SAlexander Bulekov     },{
235cbe945c7SAlexander Bulekov         .name = "es1370",
236cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults "
237cbe945c7SAlexander Bulekov         "-device es1370,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
238cbe945c7SAlexander Bulekov         .objects = "es1370*",
239cbe945c7SAlexander Bulekov     },{
240cbe945c7SAlexander Bulekov         .name = "sb16",
241cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults "
242cbe945c7SAlexander Bulekov         "-device sb16,audiodev=snd0 -audiodev none,id=snd0 -nodefaults",
243cbe945c7SAlexander Bulekov         .objects = "sb16* i8257*",
244cbe945c7SAlexander Bulekov     },{
245cbe945c7SAlexander Bulekov         .name = "parallel",
246cbe945c7SAlexander Bulekov         .args = "-machine q35 -nodefaults "
247cbe945c7SAlexander Bulekov         "-parallel file:/dev/null",
248cbe945c7SAlexander Bulekov         .objects = "parallel*",
24961fc27e0SAlexander Bulekov     }
25061fc27e0SAlexander Bulekov };
25161fc27e0SAlexander Bulekov 
25261fc27e0SAlexander Bulekov #endif
253