fuzz/generic-fuzz: add a limit on DMA bytes written
authorAlexander Bulekov <alxndr@bu.edu>
Sun, 5 Feb 2023 04:29:45 +0000 (23:29 -0500)
committerAlexander Bulekov <alxndr@bu.edu>
Fri, 17 Feb 2023 04:02:46 +0000 (23:02 -0500)
commitb8b52178e2d84bfcda91b00d55fa05ed895badbf
treebaacbe72595d66bca61c0bb902eb67d32677911c
parent1375104370fc80bbcaa55430d2fbc0b1d8fc158b
fuzz/generic-fuzz: add a limit on DMA bytes written

As we have repplaced fork-based fuzzing, with reboots - we can no longer
use a timeout+exit() to avoid slow inputs. Libfuzzer has its own timer
that it uses to catch slow inputs, however these timeouts are usually
seconds-minutes long: more than enough to bog-down the fuzzing process.
However, I found that slow inputs often attempt to fill overly large DMA
requests. Thus, we can mitigate most timeouts by setting a cap on the
total number of DMA bytes written by an input.

Signed-off-by: Alexander Bulekov <alxndr@bu.edu>
Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org>
Reviewed-by: Darren Kenny <darren.kenny@oracle.com>
tests/qtest/fuzz/generic_fuzz.c