Skip to content

Instantly share code, notes, and snippets.

@srikanth007m
srikanth007m / msm_qti.txt
Last active August 5, 2017 02:49
data descriptor
include <asm/ioctl.h>
include <vendor/qcom/proprietary/data/qti/src/qti.h>
incdir "vendor/qcom/proprietary/data/qti/"
resource fd_qti[fd]
syz_open_dev$smdcntl8(dev ptr[in, string["/dev/smdcntl8"]], id intptr, flags flags[open_flags]) fd_qti
syz_open_dev$rmnetctrl(dev ptr[in, string["/dev/rmnet_ctrl"]], id intptr, flags flags[open_flags]) fd_qti
syz_open_dev$dplctrl(dev ptr[in, string["/dev/dpl_ctrl"]], id intptr, flags flags[open_flags]) fd_qti
@srikanth007m
srikanth007m / msm_audio.txt
Created August 9, 2017 03:58
Audio descriptors
include <linux/ioctl.h>
include <../include/uapi/linux/msm_audio.h>
include <../include/uapi/linux/msm_audio_ac3.h>
include <../include/uapi/linux/msm_audio_aac.h>
include <../include/uapi/linux/msm_audio_alac.h>
include <../include/uapi/linux/msm_audio_amrnb.h>
include <../include/uapi/linux/msm_audio_amrwb.h>
include <../include/uapi/linux/msm_audio_ape.h>
include <../include/uapi/linux/msm_audio_calibration.h>
include <../include/uapi/linux/msm_audio_mvs.h>
include <linux/ioctl.h>
include <linux/types.h>
include <../include/linux/diagchar.h>
resource fd_diag[fd]
resource diag_client_id[int32]
syz_open_dev$diag(dev ptr[in, string["/dev/diag"]], id const[0], flags flags[open_flags]) fd_diag
include <linux/ioctl.h>
include <../include/uapi/linux/msm_audio.h>
include <../include/uapi/linux/msm_audio_ac3.h>
include <../include/uapi/linux/msm_audio_aac.h>
include <../include/uapi/linux/msm_audio_alac.h>
include <../include/uapi/linux/msm_audio_amrnb.h>
include <../include/uapi/linux/msm_audio_amrwb.h>
include <../include/uapi/linux/msm_audio_ape.h>
include <../include/uapi/linux/msm_audio_calibration.h>
include <../include/uapi/linux/msm_audio_mvs.h>
include <asm/ioctl.h>
include <linux/uaccess.h>
include <linux/compat.h>
include <linux/ion.h>
include <linux/msm_ion.h>
incdir "drivers/staging/android/ion"
include <../drivers/staging/android/ion/msm/compat_msm_ion.c>
include <../drivers/staging/android/uapi/ion.h>
include <../drivers/staging/android/ion/msm/compat_msm_ion.c>
go build "-ldflags=-s -w" -o bin/syz-sysgen ./sys/syz-sysgen
bin/syz-sysgen
generating amd64...
msm_sched.txt:3:1: unsupported syscall: sched_get_priority_max due to missing const __NR_sched_get_priority_max
msm_sched.txt:4:1: unsupported syscall: sched_get_priority_min due to missing const __NR_sched_get_priority_min
dri.txt:73:52: unsupported const: DRM_IOCTL_MODE_GETPLANE
dri.txt:73:1: unsupported syscall: ioctl$DRM_IOCTL_MODE_GETPLANE due to missing const DRM_IOCTL_MODE_GETPLANE
dri.txt:74:52: unsupported const: DRM_IOCTL_MODE_SETPLANE
dri.txt:74:1: unsupported syscall: ioctl$DRM_IOCTL_MODE_SETPLANE due to missing const DRM_IOCTL_MODE_SETPLANE
dri.txt:75:50: unsupported const: DRM_IOCTL_MODE_CURSOR
C reproducer:
// autogenerated by syzkaller (http://github.com/google/syzkaller)
#define _GNU_SOURCE
#include <arpa/inet.h>
#include <errno.h>
#include <errno.h>
#include <fcntl.h>
#include <fcntl.h>
diff --git a/pkg/report/linux.go b/pkg/report/linux.go
index 0a79b33..8eb18e0 100644
--- a/pkg/report/linux.go
+++ b/pkg/report/linux.go
@@ -631,9 +631,9 @@ var linuxOopses = []*oops{
fmt: "KASAN: %[1]v %[2]v",
},
{
- title: compile("BUG: KASAN: (.*)"),
- fmt: "KASAN: %[1]v",
TITLE: KASAN: slab-out-of-bounds in diag_switch_logging
CORRUPTED: Y
BUG: KASAN: slab-out-of-bounds in diag_switch_logging+0x3fc/0xb28 drivers/char/diag/diagchar_core.c:1685
Read of size 8 at addr ffffffe18884a2f0 by task syz-executor/26979
CPU: 0 PID: 26979 Comm: syz-executor Tainted: G W O 4.9.80+ #1
Hardware name: Qualcomm Technologies, Inc. SDM670 PM660 + PM660L MTP (DT)
Call trace:
[<ffffff9cba28d4e8>] dump_backtrace+0x0/0x428 arch/arm64/kernel/traps.c:77
This file has been truncated, but you can view the full file.
[*] Trying to Run Component: BuildLLVM
[+] Setup for component: BuildLLVM complete
[*] Running LLVM Commands in multiprocessing mode.
error: unknown target ABI 'lp64'
error: unknown target ABI 'lp64'
error: unknown target ABI 'lp64'
error: unknown target ABI 'lp64'
error: unknown target ABI 'lp64'
error: unknown target ABI 'lp64'
error: unknown target ABI 'lp64'