Re: Ramping up Continuous Fuzzing of Virtual Devices in QEMU

2020-11-04 Thread Alexander Bulekov
On 201104 1546, Peter Maydell wrote: > On Wed, 4 Nov 2020 at 15:26, Alexander Bulekov wrote: > > If I understand correctly, this is analogous to what happens with > > Coverity reports. Access to Coverity is closed (not sure if there is a > > process to apply for access). It also seems that there i

Re: Ramping up Continuous Fuzzing of Virtual Devices in QEMU

2020-11-04 Thread Peter Maydell
On Wed, 4 Nov 2020 at 15:26, Alexander Bulekov wrote: > If I understand correctly, this is analogous to what happens with > Coverity reports. Access to Coverity is closed (not sure if there is a > process to apply for access). It also seems that there is a push to fix > CID issues prior to new rel

Re: Ramping up Continuous Fuzzing of Virtual Devices in QEMU

2020-11-04 Thread Alexander Bulekov
On 201104 1600, P J P wrote: > +-- On Thu, 22 Oct 2020, Daniel P. Berrangé wrote --+ > | On Thu, Oct 22, 2020 at 12:24:16PM -0400, Alexander Bulekov wrote: > | > > Once [2] lands upstream, we should see a significant uptick in oss-fuzz > | > > reports, and I hope that we can develop a process to

Re: Ramping up Continuous Fuzzing of Virtual Devices in QEMU

2020-11-04 Thread P J P
+-- On Thu, 22 Oct 2020, Daniel P. Berrangé wrote --+ | On Thu, Oct 22, 2020 at 12:24:16PM -0400, Alexander Bulekov wrote: | > > Once [2] lands upstream, we should see a significant uptick in oss-fuzz | > > reports, and I hope that we can develop a process to ensure these bugs | > > are properly

Re: Ramping up Continuous Fuzzing of Virtual Devices in QEMU

2020-10-26 Thread Alexander Bulekov
On 201024 1110, Li Qiang wrote: > Alexander Bulekov 于2020年10月23日周五 上午12:20写道: > > > > Hello, > > QEMU was accepted into Google's oss-fuzz continuous-fuzzing platform [1] > > earlier this year. The fuzzers currently running on oss-fuzz are based on my > > 2019 Google Summer of Code Project, which l

Re: Ramping up Continuous Fuzzing of Virtual Devices in QEMU

2020-10-23 Thread Li Qiang
Alexander Bulekov 于2020年10月23日周五 上午12:20写道: > > Hello, > QEMU was accepted into Google's oss-fuzz continuous-fuzzing platform [1] > earlier this year. The fuzzers currently running on oss-fuzz are based on my > 2019 Google Summer of Code Project, which leveraged libfuzzer, qtest and > libqos > to

Re: Ramping up Continuous Fuzzing of Virtual Devices in QEMU

2020-10-22 Thread Philippe Mathieu-Daudé
On 10/22/20 6:39 PM, Daniel P. Berrangé wrote: On Thu, Oct 22, 2020 at 12:24:16PM -0400, Alexander Bulekov wrote: +CC Prasad On 201022 1219, Alexander Bulekov wrote: Hello, QEMU was accepted into Google's oss-fuzz continuous-fuzzing platform [1] earlier this year. The fuzzers currently running

Re: Ramping up Continuous Fuzzing of Virtual Devices in QEMU

2020-10-22 Thread Alexander Bulekov
On 201022 1739, Daniel P. Berrangé wrote: > On Thu, Oct 22, 2020 at 12:24:16PM -0400, Alexander Bulekov wrote: > > +CC Prasad > > > > On 201022 1219, Alexander Bulekov wrote: > > > Hello, > > > QEMU was accepted into Google's oss-fuzz continuous-fuzzing platform [1] > > > earlier this year. The fu

Re: Ramping up Continuous Fuzzing of Virtual Devices in QEMU

2020-10-22 Thread Daniel P . Berrangé
On Thu, Oct 22, 2020 at 12:24:16PM -0400, Alexander Bulekov wrote: > +CC Prasad > > On 201022 1219, Alexander Bulekov wrote: > > Hello, > > QEMU was accepted into Google's oss-fuzz continuous-fuzzing platform [1] > > earlier this year. The fuzzers currently running on oss-fuzz are based on my > >

Re: Ramping up Continuous Fuzzing of Virtual Devices in QEMU

2020-10-22 Thread Alexander Bulekov
+CC Prasad On 201022 1219, Alexander Bulekov wrote: > Hello, > QEMU was accepted into Google's oss-fuzz continuous-fuzzing platform [1] > earlier this year. The fuzzers currently running on oss-fuzz are based on my > 2019 Google Summer of Code Project, which leveraged libfuzzer, qtest and > libqo

Ramping up Continuous Fuzzing of Virtual Devices in QEMU

2020-10-22 Thread Alexander Bulekov
Hello, QEMU was accepted into Google's oss-fuzz continuous-fuzzing platform [1] earlier this year. The fuzzers currently running on oss-fuzz are based on my 2019 Google Summer of Code Project, which leveraged libfuzzer, qtest and libqos to provide a framework for writing virtual-device fuzzers. At