4 Commits

Author	SHA1	Message	Date
Andrey Konovalov	a38da1b89a	sys/linux, executor: basic support for multiple USB interfaces	2019-09-06 17:19:55 +02:00
Andrey Konovalov	55e0c07757	sys/linux: extract USB HID ids (#1294) ... * sys/linux: extract USB HID ids As it turns out the HID kernel subsystem registers only one USB driver that checks that the interface of the connected device has HID class and then looks up its own list of vendor/device ids to find a matching driver. This means that we currently don't generate proper vendor/device ids for USB HID devices. This patch updates the syz-usbgen tool to also extract USB HID vendor/device ids from a running kernel and makes the generated descriptions for HID devices to be patched using the extracted ids. This patch also contains some minor improvements to USB descriptions (better HID descriptions and more replies for some USB classes/drivers). * sys/linux: run make generate	2019-07-22 19:25:54 +02:00
Andrey Konovalov	58c4b1aeab	sys/linux: use template based structure for USB descriptions ... To allow future extensions of USB descriptions to fuzz particular USB classes this patch changes the structure of USB descriptions to use templates. This will invalidate all existing USB corpus.	2019-06-07 15:37:00 +02:00
Andrey Konovalov	f4a3dc9128	all: add basic USB fuzzing support ... This commits implements 4 syzcalls: syz_usb_connect, syz_usb_io_control, syz_usb_ep_write and syz_usb_disconnect. Those syzcalls are used to emit USB packets through a custom GadgetFS-like interface (currently exposed at /sys/kernel/debug/usb-fuzzer), which requires special kernel patches. USB fuzzing support is quite basic, as it mostly covers only the USB device enumeration process. Even though the syz_usb_ep_write syzcall does allow to communicate with USB endpoints after the device has been enumerated, no coverage is collected from that code yet.	2019-04-11 16:24:45 +02:00