Best Syzkaller code snippet using proggen.shouldSkip
proggen.go
Source:proggen.go
...68 // 2179 <... wait4 resumed> 0x7fff28981bf8, 0, NULL) = ? ERESTARTSYS69 // 2179 --- SIGUSR1 {si_signo=SIGUSR1, si_code=SI_USER, si_pid=2180, si_uid=0} ---70 continue71 }72 if shouldSkip(sCall) {73 log.Logf(2, "skipping call: %s", sCall.CallName)74 continue75 }76 ctx.currentStraceCall = sCall77 call := ctx.genCall()78 if call == nil {79 continue80 }81 if err := ctx.builder.Append(call); err != nil {82 log.Fatalf("%v", err)83 }84 }85 p, err := ctx.builder.Finalize()86 if err != nil {87 log.Fatalf("error validating program: %v", err)88 }89 return p90}91func (ctx *context) genCall() *prog.Call {92 log.Logf(3, "parsing call: %s", ctx.currentStraceCall.CallName)93 straceCall := ctx.currentStraceCall94 ctx.currentSyzCall = new(prog.Call)95 ctx.currentSyzCall.Meta = ctx.Select(straceCall)96 syzCall := ctx.currentSyzCall97 if ctx.currentSyzCall.Meta == nil {98 log.Logf(2, "skipping call: %s which has no matching description", ctx.currentStraceCall.CallName)99 return nil100 }101 syzCall.Ret = prog.MakeReturnArg(syzCall.Meta.Ret)102 for i := range syzCall.Meta.Args {103 var strArg parser.IrType104 if i < len(straceCall.Args) {105 strArg = straceCall.Args[i]106 }107 res := ctx.genArg(syzCall.Meta.Args[i].Type, prog.DirIn, strArg)108 syzCall.Args = append(syzCall.Args, res)109 }110 ctx.genResult(syzCall.Meta.Ret, straceCall.Ret)111 return syzCall112}113func (ctx *context) Select(syscall *parser.Syscall) *prog.Syscall {114 for _, selector := range ctx.selectors {115 if variant := selector.Select(syscall); variant != nil {116 return variant117 }118 }119 return ctx.target.SyscallMap[syscall.CallName]120}121func (ctx *context) genResult(syzType prog.Type, straceRet int64) {122 if straceRet <= 0 {123 return124 }125 straceExpr := parser.Constant(uint64(straceRet))126 switch syzType.(type) {127 case *prog.ResourceType:128 log.Logf(2, "call: %s returned a resource type with val: %s",129 ctx.currentStraceCall.CallName, straceExpr.String())130 ctx.returnCache.cache(syzType, straceExpr, ctx.currentSyzCall.Ret)131 }132}133func (ctx *context) genArg(syzType prog.Type, dir prog.Dir, traceArg parser.IrType) prog.Arg {134 if traceArg == nil {135 log.Logf(3, "parsing syzType: %s, traceArg is nil. generating default arg...", syzType.Name())136 return syzType.DefaultArg(dir)137 }138 log.Logf(3, "parsing arg of syz type: %s, ir type: %#v", syzType.Name(), traceArg)139 if dir == prog.DirOut {140 switch syzType.(type) {141 case *prog.PtrType, *prog.StructType, *prog.ResourceType, *prog.BufferType:142 // Resource Types need special care. Pointers, Structs can have resource fields e.g. pipe, socketpair143 // Buffer may need special care in out direction144 default:145 return syzType.DefaultArg(dir)146 }147 }148 switch a := syzType.(type) {149 case *prog.IntType, *prog.ConstType, *prog.FlagsType, *prog.CsumType:150 return ctx.genConst(a, dir, traceArg)151 case *prog.LenType:152 return syzType.DefaultArg(dir)153 case *prog.ProcType:154 return ctx.parseProc(a, dir, traceArg)155 case *prog.ResourceType:156 return ctx.genResource(a, dir, traceArg)157 case *prog.PtrType:158 return ctx.genPtr(a, dir, traceArg)159 case *prog.BufferType:160 return ctx.genBuffer(a, dir, traceArg)161 case *prog.StructType:162 return ctx.genStruct(a, dir, traceArg)163 case *prog.ArrayType:164 return ctx.genArray(a, dir, traceArg)165 case *prog.UnionType:166 return ctx.genUnionArg(a, dir, traceArg)167 case *prog.VmaType:168 return ctx.genVma(a, dir, traceArg)169 default:170 log.Fatalf("unsupported type: %#v", syzType)171 }172 return nil173}174func (ctx *context) genVma(syzType *prog.VmaType, dir prog.Dir, _ parser.IrType) prog.Arg {175 npages := uint64(1)176 if syzType.RangeBegin != 0 || syzType.RangeEnd != 0 {177 npages = syzType.RangeEnd178 }179 return prog.MakeVmaPointerArg(syzType, dir, ctx.builder.AllocateVMA(npages), npages)180}181func (ctx *context) genArray(syzType *prog.ArrayType, dir prog.Dir, traceType parser.IrType) prog.Arg {182 var args []prog.Arg183 switch a := traceType.(type) {184 case *parser.GroupType:185 for i := 0; i < len(a.Elems); i++ {186 args = append(args, ctx.genArg(syzType.Elem, dir, a.Elems[i]))187 }188 default:189 log.Fatalf("unsupported type for array: %#v", traceType)190 }191 return prog.MakeGroupArg(syzType, dir, args)192}193func (ctx *context) genStruct(syzType *prog.StructType, dir prog.Dir, traceType parser.IrType) prog.Arg {194 var args []prog.Arg195 switch a := traceType.(type) {196 case *parser.GroupType:197 j := 0198 if ret, recursed := ctx.recurseStructs(syzType, dir, a); recursed {199 return ret200 }201 for i := range syzType.Fields {202 if prog.IsPad(syzType.Fields[i].Type) {203 args = append(args, syzType.Fields[i].DefaultArg(dir))204 continue205 }206 // If the last n fields of a struct are zero or NULL, strace will occasionally omit those values207 // this creates a mismatch in the number of elements in the ir type and in208 // our descriptions. We generate default values for omitted fields209 if j >= len(a.Elems) {210 args = append(args, syzType.Fields[i].DefaultArg(dir))211 } else {212 args = append(args, ctx.genArg(syzType.Fields[i].Type, dir, a.Elems[j]))213 }214 j++215 }216 case *parser.BufferType:217 // We could have a case like the following:218 // ioctl(3, 35111, {ifr_name="\x6c\x6f", ifr_hwaddr=00:00:00:00:00:00}) = 0219 // if_hwaddr gets parsed as a BufferType but our syscall descriptions have it as a struct type220 return syzType.DefaultArg(dir)221 default:222 log.Fatalf("unsupported type for struct: %#v", a)223 }224 return prog.MakeGroupArg(syzType, dir, args)225}226// recurseStructs handles cases where syzType corresponds to struct descriptions like227// sockaddr_storage_in6 {228// addr sockaddr_in6229// } [size[SOCKADDR_STORAGE_SIZE], align_ptr]230// which need to be recursively generated. It returns true if we needed to recurse231// along with the generated argument and false otherwise.232func (ctx *context) recurseStructs(syzType *prog.StructType, dir prog.Dir, traceType *parser.GroupType) (prog.Arg, bool) {233 // only consider structs with one non-padded field234 numFields := 0235 for _, field := range syzType.Fields {236 if prog.IsPad(field.Type) {237 continue238 }239 numFields++240 }241 if numFields != 1 {242 return nil, false243 }244 // the strace group type needs to have more one field (a mismatch)245 if len(traceType.Elems) == 1 {246 return nil, false247 }248 // first field needs to be a struct249 switch t := syzType.Fields[0].Type.(type) {250 case *prog.StructType:251 var args []prog.Arg252 // first element and traceType should have the same number of elements253 if len(t.Fields) != len(traceType.Elems) {254 return nil, false255 }256 args = append(args, ctx.genStruct(t, dir, traceType))257 for _, field := range syzType.Fields[1:] {258 args = append(args, field.DefaultArg(dir))259 }260 return prog.MakeGroupArg(syzType, dir, args), true261 }262 return nil, false263}264func (ctx *context) genUnionArg(syzType *prog.UnionType, dir prog.Dir, straceType parser.IrType) prog.Arg {265 if straceType == nil {266 log.Logf(1, "generating union arg. straceType is nil")267 return syzType.DefaultArg(dir)268 }269 log.Logf(4, "generating union arg: %s %#v", syzType.TypeName, straceType)270 // Unions are super annoying because they sometimes need to be handled case by case271 // We might need to lookinto a matching algorithm to identify the union type that most closely272 // matches our strace type.273 switch syzType.TypeName {274 case "sockaddr_storage":275 return ctx.genSockaddrStorage(syzType, dir, straceType)276 case "sockaddr_nl":277 return ctx.genSockaddrNetlink(syzType, dir, straceType)278 case "ifr_ifru":279 return ctx.genIfrIfru(syzType, dir, straceType)280 }281 return prog.MakeUnionArg(syzType, dir, ctx.genArg(syzType.Fields[0].Type, dir, straceType), 0)282}283func (ctx *context) genBuffer(syzType *prog.BufferType, dir prog.Dir, traceType parser.IrType) prog.Arg {284 if dir == prog.DirOut {285 if !syzType.Varlen() {286 return prog.MakeOutDataArg(syzType, dir, syzType.Size())287 }288 switch a := traceType.(type) {289 case *parser.BufferType:290 return prog.MakeOutDataArg(syzType, dir, uint64(len(a.Val)))291 default:292 switch syzType.Kind {293 case prog.BufferBlobRand:294 size := rand.Intn(256)295 return prog.MakeOutDataArg(syzType, dir, uint64(size))296 case prog.BufferBlobRange:297 max := rand.Intn(int(syzType.RangeEnd) - int(syzType.RangeBegin) + 1)298 size := max + int(syzType.RangeBegin)299 return prog.MakeOutDataArg(syzType, dir, uint64(size))300 default:301 log.Fatalf("unexpected buffer type kind: %v. call %v arg %#v", syzType.Kind, ctx.currentSyzCall, traceType)302 }303 }304 }305 var bufVal []byte306 switch a := traceType.(type) {307 case *parser.BufferType:308 bufVal = []byte(a.Val)309 case parser.Constant:310 val := a.Val()311 bArr := make([]byte, 8)312 binary.LittleEndian.PutUint64(bArr, val)313 bufVal = bArr314 default:315 log.Fatalf("unsupported type for buffer: %#v", traceType)316 }317 // strace always drops the null byte for buffer types but we only need to add it back for filenames and strings318 switch syzType.Kind {319 case prog.BufferFilename, prog.BufferString:320 bufVal = append(bufVal, '\x00')321 }322 if !syzType.Varlen() {323 size := syzType.Size()324 for uint64(len(bufVal)) < size {325 bufVal = append(bufVal, 0)326 }327 bufVal = bufVal[:size]328 }329 return prog.MakeDataArg(syzType, dir, bufVal)330}331func (ctx *context) genPtr(syzType *prog.PtrType, dir prog.Dir, traceType parser.IrType) prog.Arg {332 switch a := traceType.(type) {333 case parser.Constant:334 if a.Val() == 0 {335 return prog.MakeSpecialPointerArg(syzType, dir, 0)336 }337 // Likely have a type of the form bind(3, 0xfffffffff, [3]);338 res := syzType.Elem.DefaultArg(syzType.ElemDir)339 return ctx.addr(syzType, dir, res.Size(), res)340 default:341 res := ctx.genArg(syzType.Elem, syzType.ElemDir, a)342 return ctx.addr(syzType, dir, res.Size(), res)343 }344}345func (ctx *context) genConst(syzType prog.Type, dir prog.Dir, traceType parser.IrType) prog.Arg {346 switch a := traceType.(type) {347 case parser.Constant:348 return prog.MakeConstArg(syzType, dir, a.Val())349 case *parser.GroupType:350 // Sometimes strace represents a pointer to int as [0] which gets parsed351 // as Array([0], len=1). A good example is ioctl(3, FIONBIO, [1]). We may also have an union int type that352 // is a represented as a struct in strace e.g.353 // sigev_value={sival_int=-2123636944, sival_ptr=0x7ffd816bdf30}354 // For now we choose the first option355 if len(a.Elems) == 0 {356 log.Logf(2, "parsing const type, got array type with len 0")357 return syzType.DefaultArg(dir)358 }359 return ctx.genConst(syzType, dir, a.Elems[0])360 case *parser.BufferType:361 // strace decodes some arguments as hex strings because those values are network ordered362 // e.g. sin_port or sin_addr fields of sockaddr_in.363 // network order is big endian byte order so if the len of byte array is 1, 2, 4, or 8 then364 // it is a good chance that we are decoding one of those fields. If it isn't, then most likely365 // we have an error i.e. a sockaddr_un struct passed to a connect call with an inet file descriptor366 var val uint64367 toUint64 := binary.LittleEndian.Uint64368 toUint32 := binary.LittleEndian.Uint32369 toUint16 := binary.LittleEndian.Uint16370 if syzType.Format() == prog.FormatBigEndian {371 toUint64 = binary.BigEndian.Uint64372 toUint32 = binary.BigEndian.Uint32373 toUint16 = binary.BigEndian.Uint16374 }375 switch len(a.Val) {376 case 8:377 val = toUint64([]byte(a.Val))378 case 4:379 val = uint64(toUint32([]byte(a.Val)))380 case 2:381 val = uint64(toUint16([]byte(a.Val)))382 case 1:383 val = uint64(a.Val[0])384 default:385 return syzType.DefaultArg(dir)386 }387 return prog.MakeConstArg(syzType, dir, val)388 default:389 log.Fatalf("unsupported type for const: %#v", traceType)390 }391 return nil392}393func (ctx *context) genResource(syzType *prog.ResourceType, dir prog.Dir, traceType parser.IrType) prog.Arg {394 if dir == prog.DirOut {395 log.Logf(2, "resource returned by call argument: %s", traceType.String())396 res := prog.MakeResultArg(syzType, dir, nil, syzType.Default())397 ctx.returnCache.cache(syzType, traceType, res)398 return res399 }400 switch a := traceType.(type) {401 case parser.Constant:402 val := a.Val()403 if arg := ctx.returnCache.get(syzType, traceType); arg != nil {404 res := prog.MakeResultArg(syzType, dir, arg.(*prog.ResultArg), syzType.Default())405 return res406 }407 res := prog.MakeResultArg(syzType, dir, nil, val)408 return res409 case *parser.GroupType:410 if len(a.Elems) == 1 {411 // For example: 5028 ioctl(3, SIOCSPGRP, [0]) = 0412 // last argument is a pointer to a resource. Strace will output a pointer to413 // a number x as [x].414 res := prog.MakeResultArg(syzType, dir, nil, syzType.Default())415 ctx.returnCache.cache(syzType, a.Elems[0], res)416 return res417 }418 log.Fatalf("generating resource type from GroupType with %d elements", len(a.Elems))419 default:420 log.Fatalf("unsupported type for resource: %#v", traceType)421 }422 return nil423}424func (ctx *context) parseProc(syzType *prog.ProcType, dir prog.Dir, traceType parser.IrType) prog.Arg {425 switch a := traceType.(type) {426 case parser.Constant:427 val := a.Val()428 if val >= syzType.ValuesPerProc {429 return prog.MakeConstArg(syzType, dir, syzType.ValuesPerProc-1)430 }431 return prog.MakeConstArg(syzType, dir, val)432 case *parser.BufferType:433 // Again probably an error case434 // Something like the following will trigger this435 // bind(3, {sa_family=AF_INET, sa_data="\xac"}, 3) = -1 EINVAL(Invalid argument)436 return syzType.DefaultArg(dir)437 default:438 log.Fatalf("unsupported type for proc: %#v", traceType)439 }440 return nil441}442func (ctx *context) addr(syzType prog.Type, dir prog.Dir, size uint64, data prog.Arg) prog.Arg {443 return prog.MakePointerArg(syzType, dir, ctx.builder.Allocate(size), data)444}445func shouldSkip(c *parser.Syscall) bool {446 switch c.CallName {447 case "write":448 // We skip all writes to stdout and stderr because they can corrupt our crash summary.449 // Also there will be nothing on stdin, so any reads will hang.450 switch a := c.Args[0].(type) {451 case parser.Constant:452 if a.Val() <= 2 {453 return true454 }455 }456 }457 return unsupportedCalls[c.CallName]458}...
shouldSkip
Using AI Code Generation
1import (2func main() {3 p.Init()4 p.Add(1)5 p.Add(2)6 p.Add(3)7 p.Add(4)8 p.Add(5)9 p.Add(6)10 p.Add(7)11 p.Add(8)12 p.Add(9)13 p.Add(10)14 p.Add(11)15 p.Add(12)16 p.Add(13)17 p.Add(14)18 p.Add(15)19 p.Add(16)20 p.Add(17)21 p.Add(18)22 p.Add(19)23 p.Add(20)24 p.Add(21)25 p.Add(22)26 p.Add(23)27 p.Add(24)28 p.Add(25)29 p.Add(26)30 p.Add(27)31 p.Add(28)32 p.Add(29)33 p.Add(30)34 p.Add(31)35 p.Add(32)36 p.Add(33)37 p.Add(34)38 p.Add(35)39 p.Add(36)40 p.Add(37)41 p.Add(38)42 p.Add(39)43 p.Add(40)44 p.Add(41)45 p.Add(42)46 p.Add(43)47 p.Add(44)48 p.Add(45)49 p.Add(46)50 p.Add(47)51 p.Add(48)52 p.Add(49)53 p.Add(50)54 p.Add(51)55 p.Add(52)56 p.Add(53)57 p.Add(54)58 p.Add(55)59 p.Add(56)60 p.Add(57)61 p.Add(58)62 p.Add(59)63 p.Add(60)64 p.Add(61)65 p.Add(62)66 p.Add(63)67 p.Add(64)68 p.Add(65)69 p.Add(66)70 p.Add(67)71 p.Add(68)72 p.Add(69)73 p.Add(70)74 p.Add(71)75 p.Add(72)76 p.Add(73)77 p.Add(74)78 p.Add(75)79 p.Add(76)80 p.Add(77)81 p.Add(78)82 p.Add(79)83 p.Add(80)84 p.Add(81)85 p.Add(82)86 p.Add(83)87 p.Add(84)88 p.Add(85)89 p.Add(86)90 p.Add(87)91 p.Add(88)92 p.Add(89)93 p.Add(90)94 p.Add(91)95 p.Add(92)96 p.Add(93)97 p.Add(94
shouldSkip
Using AI Code Generation
1import (2func main() {3 fmt.Println("Hello World")4 p.Init()5 fmt.Println(p.ShouldSkip(1))6 fmt.Println(p.ShouldSkip(2))7 fmt.Println(p.ShouldSkip(3))8 fmt.Println(p.ShouldSkip(4))9 fmt.Println(p.ShouldSkip(5))10 fmt.Println(p.ShouldSkip(6))11 fmt.Println(p.ShouldSkip(7))12 fmt.Println(p.ShouldSkip(8))13 fmt.Println(p.ShouldSkip(9))14 fmt.Println(p.ShouldSkip(10))15 fmt.Println(p.ShouldSkip(11))16 fmt.Println(p.ShouldSkip(12))17 fmt.Println(p.ShouldSkip(13))18 fmt.Println(p.ShouldSkip(14))19 fmt.Println(p.ShouldSkip(15))20 fmt.Println(p.ShouldSkip(16))21 fmt.Println(p.ShouldSkip(17))22 fmt.Println(p.ShouldSkip(18))23 fmt.Println(p.ShouldSkip(19))24 fmt.Println(p.ShouldSkip(20))25 fmt.Println(p.ShouldSkip(21))26 fmt.Println(p.ShouldSkip(22))27 fmt.Println(p.ShouldSkip(23))28 fmt.Println(p.ShouldSkip(24))29 fmt.Println(p.ShouldSkip(25))30 fmt.Println(p.ShouldSkip(26))31 fmt.Println(p.ShouldSkip(27))32 fmt.Println(p.ShouldSkip(28))33 fmt.Println(p.ShouldSkip(29))34 fmt.Println(p.ShouldSkip(30))35 fmt.Println(p.ShouldSkip(31))36 fmt.Println(p.ShouldSkip(32))37 fmt.Println(p.ShouldSkip(33))38 fmt.Println(p.ShouldSkip(34))39 fmt.Println(p.ShouldSkip(35))40 fmt.Println(p.ShouldSkip(36))41 fmt.Println(p.ShouldSkip(37))42 fmt.Println(p.ShouldSkip(38))43 fmt.Println(p.ShouldSkip(39))44 fmt.Println(p.ShouldSkip(40))45 fmt.Println(p.ShouldSkip(41))46 fmt.Println(p.ShouldSkip(42))47 fmt.Println(p.ShouldSkip(43))48 fmt.Println(p.ShouldSkip(44))49 fmt.Println(p.ShouldSkip(45))50 fmt.Println(p.ShouldSkip(46))51 fmt.Println(p.ShouldSkip(47))52 fmt.Println(p.ShouldSkip(48))53 fmt.Println(p.ShouldSkip(49))54 fmt.Println(p.ShouldSkip(50))55 fmt.Println(p.ShouldSkip(51))56 fmt.Println(p.ShouldSkip(52))57 fmt.Println(p.ShouldSkip(53))58 fmt.Println(p.ShouldSkip(54))59 fmt.Println(p.ShouldSkip(55))60 fmt.Println(p.ShouldSkip(56))61 fmt.Println(p.ShouldSkip(57))
Learn to execute automation testing from scratch with LambdaTest Learning Hub. Right from setting up the prerequisites to run your first automation test, to following best practices and diving deeper into advanced test scenarios. LambdaTest Learning Hubs compile a list of step-by-step guides to help you be proficient with different test automation frameworks i.e. Selenium, Cypress, TestNG etc.
You could also refer to video tutorials over LambdaTest YouTube channel to get step by step demonstration from industry experts.
Get 100 minutes of automation test minutes FREE!!