c726fc01cf
There is a number of users that use uclass_first_device to access the first and (assumed) only device in uclass. Some check the return value of uclass_first_device and also that a device was returned which is exactly what uclass_first_device_err does. Some are not checking that a device was returned and can potentially crash if no device exists in the uclass. Finally there is one that returns NULL on error either way. Convert all of these to use uclass_first_device_err instead, the return value will be removed from uclass_first_device in a later patch. Signed-off-by: Michal Suchanek <msuchanek@suse.de> Reviewed-by: Simon Glass <sjg@chromium.org>
83 lines
1.5 KiB
C
83 lines
1.5 KiB
C
/* SPDX-License-Identifier: GPL-2.0+ */
|
|
/*
|
|
* Copyright (c) 2022 Google, Inc.
|
|
* Written by Andrew Scull <ascull@google.com>
|
|
*/
|
|
|
|
#include <command.h>
|
|
#include <common.h>
|
|
#include <dm.h>
|
|
#include <fuzzing_engine.h>
|
|
#include <test/fuzz.h>
|
|
|
|
static struct fuzz_test *find_fuzz_test(const char *name)
|
|
{
|
|
struct fuzz_test *fuzzer = FUZZ_TEST_START();
|
|
size_t count = FUZZ_TEST_COUNT();
|
|
size_t i;
|
|
|
|
for (i = 0; i < count; ++i) {
|
|
if (strcmp(name, fuzzer->name) == 0)
|
|
return fuzzer;
|
|
++fuzzer;
|
|
}
|
|
|
|
return NULL;
|
|
}
|
|
|
|
static struct udevice *find_fuzzing_engine(void)
|
|
{
|
|
struct udevice *dev;
|
|
|
|
if (uclass_first_device_err(UCLASS_FUZZING_ENGINE, &dev))
|
|
return NULL;
|
|
|
|
return dev;
|
|
}
|
|
|
|
static int do_fuzz(struct cmd_tbl *cmdtp, int flag, int argc, char *const argv[])
|
|
{
|
|
struct fuzz_test *fuzzer;
|
|
struct udevice *dev;
|
|
|
|
if (argc != 2)
|
|
return CMD_RET_USAGE;
|
|
|
|
fuzzer = find_fuzz_test(argv[1]);
|
|
if (!fuzzer) {
|
|
printf("Could not find fuzzer: %s\n", argv[1]);
|
|
return 1;
|
|
}
|
|
|
|
dev = find_fuzzing_engine();
|
|
if (!dev) {
|
|
puts("No fuzzing engine available\n");
|
|
return 1;
|
|
}
|
|
|
|
while (1) {
|
|
const uint8_t *data;
|
|
size_t size;
|
|
|
|
if (dm_fuzzing_engine_get_input(dev, &data, &size)) {
|
|
puts("Fuzzing engine failed\n");
|
|
return 1;
|
|
}
|
|
|
|
fuzzer->func(data, size);
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
#ifdef CONFIG_SYS_LONGHELP
|
|
static char fuzz_help_text[] =
|
|
"[fuzz-test-name] - execute the named fuzz test\n"
|
|
;
|
|
#endif /* CONFIG_SYS_LONGHELP */
|
|
|
|
U_BOOT_CMD(
|
|
fuzz, CONFIG_SYS_MAXARGS, 1, do_fuzz,
|
|
"fuzz tests", fuzz_help_text
|
|
);
|