Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pkg/fuzzer, executor: collect and substitute known resource values #4899

Open
a-nogikh opened this issue Jun 14, 2024 · 0 comments
Open

pkg/fuzzer, executor: collect and substitute known resource values #4899

a-nogikh opened this issue Jun 14, 2024 · 0 comments

Comments

@a-nogikh
Copy link
Collaborator

a-nogikh commented Jun 14, 2024

In the old collide mode (that was replaced in #2788), we used to trigger kernel races of the following form.

  1. We execute a call that creates an fd.
  2. In parallel, we execute a call that consumes the same (predicted) fd value.

We did it implicitly (by rerunning all calls in parallel without cleaning up the resource value array), now we could implement this in a more explicit form:

  • Collect resource values after each prog execution.
  • Substitute them in the prog/collide.go mutations.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant