reactos/syzkaller
1
0
Fork 0
mirror of https://github.com/reactos/syzkaller.git synced 2024-11-30 06:40:50 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

manager: dump machine state on hangs

Browse Source
This commit is contained in:
Dmitry Vyukov 2016-03-01 15:13:13 +01:00
parent 9537a44236
commit 41b2457ddc
1 changed files with 34 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

48
syz-manager/manager.go
View File

@ -224,11 +224,14 @@ func (mgr *Manager) runInstance(vmCfg *vm.Config, first bool) bool {
return false
}
// TODO: this should be present in the image.
_, errc, err := inst.Run(10*time.Second, "echo -n 0 > /proc/sys/debug/exception-trace")
if err == nil {
<-errc
// Run an aux command with best effort.
runCommand := func(cmd string) {
_, errc, err := inst.Run(10*time.Second, cmd)
if err == nil {
<-errc
}
}
runCommand("echo -n 0 > /proc/sys/debug/exception-trace")
// Leak detection significantly slows down fuzzing, so detect leaks only on the first instance.
leak := first && mgr.cfg.Leak
@ -274,6 +277,30 @@ func (mgr *Manager) runInstance(vmCfg *vm.Config, first bool) bool {
}
var output []byte
waitForOutput := func(dur time.Duration) {
timer := time.NewTimer(dur).C
loop:
for {
select {
case out := <-outputC:
output = append(output, out...)
case <-timer:
break loop
}
}
}
dumpVMState := func() {
// Shows all locks that are held.
runCommand("echo -n d > /proc/sysrq-trigger")
// Shows a stack backtrace for all active CPUs.
runCommand("echo -n l > /proc/sysrq-trigger")
// Will dump a list of current tasks and their information to your console.
runCommand("echo -n t > /proc/sysrq-trigger")
waitForOutput(time.Second)
}
matchPos := 0
const (
beforeContext = 256 << 10
@ -303,16 +330,7 @@ func (mgr *Manager) runInstance(vmCfg *vm.Config, first bool) bool {
}
if _, _, _, found := vm.FindCrash(output[matchPos:]); found {
// Give it some time to finish writing the error message.
timer := time.NewTimer(10 * time.Second).C
loop:
for {
select {
case out = <-outputC:
output = append(output, out...)
case <-timer:
break loop
}
}
waitForOutput(10 * time.Second)
desc, start, end, _ := vm.FindCrash(output[matchPos:])
start = start + matchPos - beforeContext
if start < 0 {
@ -335,11 +353,13 @@ func (mgr *Manager) runInstance(vmCfg *vm.Config, first bool) bool {
// In some cases kernel constantly prints something to console,
// but fuzzer is not actually executing programs.
if mgr.cfg.Type != "local" && time.Since(lastExecuteTime) > 3*time.Minute {
dumpVMState()
saveCrasher("not executing programs", output)
return true
}
case <-ticker.C:
if mgr.cfg.Type != "local" {
dumpVMState()
saveCrasher("no output", output)
return true
}