aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrey Konovalov <andreyknvl@google.com>2019-11-05 16:42:47 +0100
committerAndrey Konovalov <andreyknvl@gmail.com>2019-11-05 16:45:35 +0100
commitbc2c6e45b9f01fa6046cb3efa9d3aae9f05238a8 (patch)
tree926ed2b5d3d93a25174c73b65edeeaac2e7d161a
parentaf5c522d02400b35a930d6fbdf286f9ce2afc8ba (diff)
downloadsyzkaller-bc2c6e45b9f01fa6046cb3efa9d3aae9f05238a8.tar.gz
sys/linux: update usb runtests
Add a test that issues multiple syz_usb_ep_write calls. Update hiddev test to use a wider used hid driver.
-rw-r--r--sys/linux/test/vusb_hid8
-rw-r--r--sys/linux/test/vusb_hid_hiddev6
2 files changed, 11 insertions, 3 deletions
diff --git a/sys/linux/test/vusb_hid b/sys/linux/test/vusb_hid
new file mode 100644
index 000000000..289bf0528
--- /dev/null
+++ b/sys/linux/test/vusb_hid
@@ -0,0 +1,8 @@
+# requires: -sandbox=setuid -sandbox=namespace -repeat
+
+r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
+syz_usb_control_io$hid(r0, 0x0, 0x0)
+syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, '\x00'}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
+syz_usb_ep_write(r0, 0x0, 0x7, &(0x7f0000000000)='BBBBBBB')
+syz_usb_ep_write(r0, 0x0, 0x7, &(0x7f0000000000)='BBBBBBB')
+syz_usb_ep_write(r0, 0x0, 0x7, &(0x7f0000000000)='BBBBBBB')
diff --git a/sys/linux/test/vusb_hid_hiddev b/sys/linux/test/vusb_hid_hiddev
index 21c6e7357..0adbe8da1 100644
--- a/sys/linux/test/vusb_hid_hiddev
+++ b/sys/linux/test/vusb_hid_hiddev
@@ -1,6 +1,6 @@
# requires: -sandbox=setuid -sandbox=namespace -repeat
-r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x0, ""}}, []}}}]}}]}}, 0x0)
+r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x0, ""}}, []}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
-syz_usb_control_io$hid(r0, &(0x7f0000000300)={0xffffffffffffffcc, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x29, {0x0, 0x21, 0x0, 0x0, 0x1, {0x22, 0x0}}}}, &(0x7f0000000180)={0x68, 0x0, 0x0, 0x0, 0x0, 0x0})
-syz_open_dev$hiddev(&(0x7f0000000440)='/dev/usb/hiddev#\x00', 0x0, 0x0)
+syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x0}}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
+syz_open_dev$hiddev(&(0x7f00000000c0)='/dev/usb/hiddev#\x00', 0x0, 0x0)