qemu-libafl-bridge

qemu-libafl-bridge copied to clipboard

Add comparison hooks for RISCV

2

Add support for comparison hooks in RISCV based on #77.

nine-point-eight-p

[SYX] Use `qht` instead of `GHashTable`

1

I noticed that `GHashTable` is used in SYX cow cache and ram snapshot. QEMU has `qht` (under `qemu/qht.h`), which is thread-safe (I think) and optimized for concurrent reads. Why not...

enisrat

new implementation for block device snapshot. what's new: - works for any block device (not only qcow2-backed stuff) - makes sure backends are always open in read-only. it becomes possible...

rmalmain

Use of `syx_snapshot_dirty_list_add_hostaddr` in cputlb.c

2

I noticed that this access `type` check in `cputlb.c` has been commented out: [https://github.com/AFLplusplus/qemu-libafl-bridge/blob/a86bd6bbcb3e4adefaca2bc264b1235971890bca/accel/tcg/cputlb.c#L1750-L1753](https://github.com/AFLplusplus/qemu-libafl-bridge/blob/a86bd6bbcb3e4adefaca2bc264b1235971890bca/accel/tcg/cputlb.c#L1750-L1753) I don't see why this check would not work? Also, pages with flags like `TLB_MMIO` and...

enisrat

cpu.write_mem to MMIO devices is ignored

6

As write_mem used the `cpu_memory_rw_debug` function it can not write to MMIO devices. [The relevant upstream issue](https://gitlab.com/qemu-project/qemu/-/issues/213) I needed this for my fuzzing, so I adapted the proposed patch and...

vringar