Code Fuzzing Injections

include/inject.h View source View on GitHub

Structs

inject_site

struct inject_site {
    const char        *name;
    const char        *desc;
    enum inject_kind  kind;
    _Atomic bool      armed;
    _Atomic uint32_t  seed;
    _Atomic uint32_t  nth;
    _Atomic uint32_t  counter;
};

Enums

inject_kind

enum inject_kind {
    INJECT_KIND_DELAY = 1,
    INJECT_KIND_FAIL = 1 << 1,
};

Functions

inject_arm

void inject_arm(struct inject_site *s, uint32_t seed, uint32_t nth);

inject_disarm

void inject_disarm(struct inject_site *s);

inject_delay_impl

void inject_delay_impl(struct inject_site *s);

Macros

INJECT_SITE_ATTRIBUTE

#define INJECT_SITE_ATTRIBUTE \
    __attribute__((section(".kernel_inject_sites"), used))

INJECT_SITE_DECLARE

#define INJECT_SITE_DECLARE(id, injkind, description) \
    INJECT_SITE_ATTRIBUTE struct inject_site __inject_site_##id = { \
        .name = #id, .desc = (description), .kind = (injkind)}

INJECT_SITE_DEFINE

#define INJECT_SITE_DEFINE(id) extern struct inject_site __inject_site_##id

INJECT_SITE

#define INJECT_SITE(id) (&__inject_site_##id)

INJECT_DELAY

#define INJECT_DELAY(id) \
    do { \
        if (unlikely(atomic_load_explicit(&INJECT_SITE(id)->armed, \
                                          memory_order_relaxed))) \
            inject_delay_impl(INJECT_SITE(id)); \
    } while (0)

INJECT_FAIL

#define INJECT_FAIL(id) \
    (unlikely(atomic_load_explicit(&INJECT_SITE(id)->armed, \
                                   memory_order_relaxed)) && \
     inject_fail_impl(INJECT_SITE(id)))

INJECT_DELAY

#define INJECT_DELAY(id) ((void) 0)

INJECT_FAIL

#define INJECT_FAIL(id) (false)

---