commit a3c20e91dea6f7af64d886b05d678839b7b1a14c
author Alexander Bulekov <alxndr@bu.edu> Fri Oct 23 11:07:35 2020 -0400
committer Thomas Huth <thuth@redhat.com> Mon Oct 26 09:53:53 2020 +0100
tree 67c99697c70256521950b249800338e1da7b4bea
parent e7d3222e2e07e2a1a0aac979ef1fa5e8ef59f02c

fuzz: Add fuzzer callbacks to DMA-read functions

We should be careful to not call any functions besides fuzz_dma_read_cb.
Without --enable-fuzzing, fuzz_dma_read_cb is an empty inlined function.

Signed-off-by: Alexander Bulekov <alxndr@bu.edu>
Reviewed-by: Darren Kenny <darren.kenny@oracle.com>
Message-Id: <20201023150746.107063-7-alxndr@bu.edu>
Signed-off-by: Thomas Huth <thuth@redhat.com>

softmmu/memory.c

diff --git a/softmmu/memory.c b/softmmu/memory.c
index cec0e0f..ee4a6bc 100644
--- a/softmmu/memory.c
+++ b/softmmu/memory.c
@@ -1433,6 +1433,7 @@
     unsigned size = memop_size(op);
     MemTxResult r;
 
+    fuzz_dma_read_cb(addr, size, mr, false);
     if (!memory_region_access_valid(mr, addr, size, false, attrs)) {
         *pval = unassigned_mem_read(mr, addr, size);
         return MEMTX_DECODE_ERROR;