[Question] fuzz: double-fetches in a memory region map session

2021-08-12 Thread Li Qiuhao
Hi Alex, Recently I was reading the DMA call-back functions in the fuzzer. It seems fuzz_dma_read_cb() is inserted into flatview_read_continue() and address_space_map() to make the host read changed content between different DMA actions. My question is about address_space_map() -- How do we emula

Re: [PATCH 1/4] fuzz: refine crash detection mechanism

2020-12-22 Thread Li Qiuhao
On Tue, 2020-12-22 at 11:47 -0500, Alexander Bulekov wrote: > Oops let me try to resend this.. > > Qiuhao Li writes: > > > The original crash detection method is to fork a process to test > > our new > > trace input. If the child process exits in time and the second-to- > > last line > > is the