├── codeql └── infinite_loop.ql ├── fuzzer ├── Makefile ├── device_register_data.c ├── fuzzer.cc ├── fuzzer_device_table.c ├── fuzzer_device_table.h ├── fuzzer_mutite.c └── fuzzer_mutite.h ├── instrument ├── Makefile ├── example1.c ├── example2.c ├── example3.c ├── example4.c ├── example5.c ├── example6.c ├── example7.c ├── example8.c ├── llvm-sanitizer │ ├── clang-fix.txt │ ├── llvm │ │ └── lib │ │ │ └── Transforms │ │ │ └── Instrumentation │ │ │ └── SanitizerCoverage.cpp │ └── llvm_compile.sh ├── qemu_diy_device │ ├── Kconfig │ ├── Makefile.objs │ ├── diy_pci.c │ ├── diy_pci_coverage.c │ └── qemu_compile.sh ├── sanitize_black_list.txt ├── sanitize_converage.c ├── sanitize_converage.h └── signal_number.h ├── kvm_hypercall ├── Makefile ├── kernel_bridge.h └── kvm_hypercall.c ├── pic ├── 2fde5b77d776d930108d60f3384100e.jpg ├── 42c1747f0d5e86b55ae0fc8a9c5570c.jpg ├── 6e883797d03acc6203ae49e65e141d2.jpg ├── 701e257a95c654c3586cd22d94c49ca.jpg ├── aa009156bcc7b4091a1ac1491234c69.jpg ├── arch.png ├── b14a9696fde72c1a496a485cdb7cee5.jpg └── d64ffe3f41df2b214f2f98efc419e50.jpg ├── qemu_stub ├── Makefile ├── stub.c ├── stub_base.c ├── stub_base.h └── try_pwn.c └── readme.md /codeql/infinite_loop.ql: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/codeql/infinite_loop.ql -------------------------------------------------------------------------------- /fuzzer/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/fuzzer/Makefile -------------------------------------------------------------------------------- /fuzzer/device_register_data.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/fuzzer/device_register_data.c -------------------------------------------------------------------------------- /fuzzer/fuzzer.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/fuzzer/fuzzer.cc -------------------------------------------------------------------------------- /fuzzer/fuzzer_device_table.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/fuzzer/fuzzer_device_table.c -------------------------------------------------------------------------------- /fuzzer/fuzzer_device_table.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/fuzzer/fuzzer_device_table.h -------------------------------------------------------------------------------- /fuzzer/fuzzer_mutite.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/fuzzer/fuzzer_mutite.c -------------------------------------------------------------------------------- /fuzzer/fuzzer_mutite.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/fuzzer/fuzzer_mutite.h -------------------------------------------------------------------------------- /instrument/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/Makefile -------------------------------------------------------------------------------- /instrument/example1.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/example1.c -------------------------------------------------------------------------------- /instrument/example2.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/example2.c -------------------------------------------------------------------------------- /instrument/example3.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/example3.c -------------------------------------------------------------------------------- /instrument/example4.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/example4.c -------------------------------------------------------------------------------- /instrument/example5.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/example5.c -------------------------------------------------------------------------------- /instrument/example6.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/example6.c -------------------------------------------------------------------------------- /instrument/example7.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/example7.c -------------------------------------------------------------------------------- /instrument/example8.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/example8.c -------------------------------------------------------------------------------- /instrument/llvm-sanitizer/clang-fix.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/llvm-sanitizer/clang-fix.txt -------------------------------------------------------------------------------- /instrument/llvm-sanitizer/llvm/lib/Transforms/Instrumentation/SanitizerCoverage.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/llvm-sanitizer/llvm/lib/Transforms/Instrumentation/SanitizerCoverage.cpp -------------------------------------------------------------------------------- /instrument/llvm-sanitizer/llvm_compile.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/llvm-sanitizer/llvm_compile.sh -------------------------------------------------------------------------------- /instrument/qemu_diy_device/Kconfig: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/qemu_diy_device/Kconfig -------------------------------------------------------------------------------- /instrument/qemu_diy_device/Makefile.objs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/qemu_diy_device/Makefile.objs -------------------------------------------------------------------------------- /instrument/qemu_diy_device/diy_pci.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/qemu_diy_device/diy_pci.c -------------------------------------------------------------------------------- /instrument/qemu_diy_device/diy_pci_coverage.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/qemu_diy_device/diy_pci_coverage.c -------------------------------------------------------------------------------- /instrument/qemu_diy_device/qemu_compile.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/qemu_diy_device/qemu_compile.sh -------------------------------------------------------------------------------- /instrument/sanitize_black_list.txt: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /instrument/sanitize_converage.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/sanitize_converage.c -------------------------------------------------------------------------------- /instrument/sanitize_converage.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/sanitize_converage.h -------------------------------------------------------------------------------- /instrument/signal_number.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/instrument/signal_number.h -------------------------------------------------------------------------------- /kvm_hypercall/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/kvm_hypercall/Makefile -------------------------------------------------------------------------------- /kvm_hypercall/kernel_bridge.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/kvm_hypercall/kernel_bridge.h -------------------------------------------------------------------------------- /kvm_hypercall/kvm_hypercall.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/kvm_hypercall/kvm_hypercall.c -------------------------------------------------------------------------------- /pic/2fde5b77d776d930108d60f3384100e.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/pic/2fde5b77d776d930108d60f3384100e.jpg -------------------------------------------------------------------------------- /pic/42c1747f0d5e86b55ae0fc8a9c5570c.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/pic/42c1747f0d5e86b55ae0fc8a9c5570c.jpg -------------------------------------------------------------------------------- /pic/6e883797d03acc6203ae49e65e141d2.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/pic/6e883797d03acc6203ae49e65e141d2.jpg -------------------------------------------------------------------------------- /pic/701e257a95c654c3586cd22d94c49ca.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/pic/701e257a95c654c3586cd22d94c49ca.jpg -------------------------------------------------------------------------------- /pic/aa009156bcc7b4091a1ac1491234c69.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/pic/aa009156bcc7b4091a1ac1491234c69.jpg -------------------------------------------------------------------------------- /pic/arch.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/pic/arch.png -------------------------------------------------------------------------------- /pic/b14a9696fde72c1a496a485cdb7cee5.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/pic/b14a9696fde72c1a496a485cdb7cee5.jpg -------------------------------------------------------------------------------- /pic/d64ffe3f41df2b214f2f98efc419e50.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/pic/d64ffe3f41df2b214f2f98efc419e50.jpg -------------------------------------------------------------------------------- /qemu_stub/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/qemu_stub/Makefile -------------------------------------------------------------------------------- /qemu_stub/stub.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/qemu_stub/stub.c -------------------------------------------------------------------------------- /qemu_stub/stub_base.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/qemu_stub/stub_base.c -------------------------------------------------------------------------------- /qemu_stub/stub_base.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/qemu_stub/stub_base.h -------------------------------------------------------------------------------- /qemu_stub/try_pwn.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/qemu_stub/try_pwn.c -------------------------------------------------------------------------------- /readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/lcatro/qemu-fuzzer/HEAD/readme.md --------------------------------------------------------------------------------