Hi Peter, the following changes since commit 4c5b97bfd0dd54dc27717ae8d1cd10e14eef1430:
Merge remote-tracking branch 'remotes/kraxel/tags/modules-20201022-pull-request' into staging (2020-10-22 12:33:21 +0100) are available in the Git repository at: https://gitlab.com/huth/qemu.git tags/pull-request-2020-10-26 for you to fetch changes up to 28bbe20ce281659e317b807f34f568bde6d99760: tests/acceptance: Use .ppm extention for Portable PixMap files (2020-10-26 09:54:16 +0100) ---------------------------------------------------------------- * qtest fixes (e.g. memory leaks) * Fix for Xen dummy cpu loop (which happened due to qtest accel rework) * Introduction of the generic device fuzzer * Run more check-acceptance tests in the gitlab-CI ---------------------------------------------------------------- Alexander Bulekov (17): memory: Add FlatView foreach function fuzz: Add generic virtual-device fuzzer fuzz: Add PCI features to the generic fuzzer fuzz: Add DMA support to the generic-fuzzer fuzz: Declare DMA Read callback function fuzz: Add fuzzer callbacks to DMA-read functions fuzz: Add support for custom crossover functions fuzz: add a DISABLE_PCI op to generic-fuzzer fuzz: add a crossover function to generic-fuzzer scripts/oss-fuzz: Add script to reorder a generic-fuzzer trace scripts/oss-fuzz: Add crash trace minimization script fuzz: Add instructions for using generic-fuzz fuzz: add an "opaque" to the FuzzTarget struct fuzz: add generic-fuzz configs for oss-fuzz fuzz: register predefined generic-fuzz configs scripts/oss-fuzz: use hardlinks instead of copying scripts/oss-fuzz: ignore the generic-fuzz target Chen Qun (1): tests/migration: fix memleak in wait_command/wait_command_fd Havard Skinnemoen (1): tests/qtest: Make npcm7xx_timer-test conditional on CONFIG_NPCM7XX Jason Andryuk (3): accel: Remove _WIN32 ifdef from qtest-cpus.c accel: move qtest CpusAccel functions to a common location accel: Add xen CpusAccel using dummy-cpus Maxim Levitsky (2): libqtest: fix the order of buffered events libqtest: fix memory leak in the qtest_qmp_event_ref Philippe Mathieu-Daudé (2): tests/acceptance: Remove unused import tests/acceptance: Use .ppm extention for Portable PixMap files Thomas Huth (5): tests/qtest/libqtest: Fix detection of architecture for binaries without path tests/acceptance/ppc_prep_40p: Fix the URL to the NetBSD-4.0 archive test/acceptance: Remove the CONTINUOUS_INTEGRATION tags tests/acceptance: Enable AVOCADO_ALLOW_UNTRUSTED_CODE in the gitlab-CI test/docker/dockerfiles: Add missing packages for acceptance tests .gitlab-ci.yml | 1 + accel/{qtest/qtest-cpus.c => dummy-cpus.c} | 27 +- accel/meson.build | 8 + accel/qtest/meson.build | 1 - accel/qtest/qtest-cpus.h | 17 - accel/qtest/qtest.c | 5 +- accel/xen/xen-all.c | 8 + docs/devel/fuzzing.txt | 39 + include/exec/memory.h | 21 + include/exec/memory_ldst_cached.h.inc | 3 + include/sysemu/cpus.h | 3 + memory_ldst.c.inc | 4 + scripts/oss-fuzz/build.sh | 14 +- scripts/oss-fuzz/minimize_qtest_trace.py | 157 ++++ scripts/oss-fuzz/reorder_fuzzer_qtest_trace.py | 103 +++ softmmu/memory.c | 27 + softmmu/physmem.c | 2 + tests/acceptance/machine_m68k_nextcube.py | 7 +- tests/acceptance/ppc_prep_40p.py | 4 +- tests/docker/dockerfiles/centos8.docker | 1 + tests/docker/dockerfiles/debian-amd64.docker | 3 + tests/docker/dockerfiles/fedora.docker | 1 + tests/docker/dockerfiles/ubuntu2004.docker | 1 + tests/qtest/fuzz/fuzz.c | 13 + tests/qtest/fuzz/fuzz.h | 28 + tests/qtest/fuzz/generic_fuzz.c | 954 +++++++++++++++++++++++++ tests/qtest/fuzz/generic_fuzz_configs.h | 121 ++++ tests/qtest/fuzz/meson.build | 1 + tests/qtest/libqtest.c | 22 +- tests/qtest/meson.build | 3 +- tests/qtest/migration-helpers.c | 16 +- 31 files changed, 1550 insertions(+), 65 deletions(-) rename accel/{qtest/qtest-cpus.c => dummy-cpus.c} (71%) delete mode 100644 accel/qtest/qtest-cpus.h create mode 100755 scripts/oss-fuzz/minimize_qtest_trace.py create mode 100755 scripts/oss-fuzz/reorder_fuzzer_qtest_trace.py create mode 100644 tests/qtest/fuzz/generic_fuzz.c create mode 100644 tests/qtest/fuzz/generic_fuzz_configs.h