1 /*
2 * QTest test cases for virtio balloon device
3 *
4 * Copyright (c) 2024 Gao Shiyuan <gaoshiyuan@baidu.com>
5 *
6 * SPDX-License-Identifier: GPL-2.0-or-later
7 */
8
9 #include "qemu/osdep.h"
10 #include "libqtest.h"
11 #include "standard-headers/linux/virtio_balloon.h"
12
13 /*
14 * https://gitlab.com/qemu-project/qemu/-/issues/2576
15 * Used to trigger:
16 * virtio_address_space_lookup: Assertion `mrs.mr' failed.
17 */
oss_fuzz_71649(void)18 static void oss_fuzz_71649(void)
19 {
20 QTestState *s = qtest_init("-device virtio-balloon -machine q35"
21 " -nodefaults");
22
23 qtest_outl(s, 0xcf8, 0x80000890);
24 qtest_outl(s, 0xcfc, 0x2);
25 qtest_outl(s, 0xcf8, 0x80000891);
26 qtest_inl(s, 0xcfc);
27 qtest_quit(s);
28 }
29
query_stats(void)30 static void query_stats(void)
31 {
32 QTestState *s = qtest_init("-device virtio-balloon,id=balloon"
33 " -nodefaults");
34 QDict *ret = qtest_qmp_assert_success_ref(
35 s,
36 "{ 'execute': 'qom-get', 'arguments': " \
37 "{ 'path': '/machine/peripheral/balloon', " \
38 " 'property': 'guest-stats' } }");
39 QDict *stats = qdict_get_qdict(ret, "stats");
40
41 /* We expect 1 entry in the dict for each known kernel stat */
42 assert(qdict_size(stats) == VIRTIO_BALLOON_S_NR);
43
44 qobject_unref(ret);
45 qtest_quit(s);
46 }
47
main(int argc,char ** argv)48 int main(int argc, char **argv)
49 {
50 g_test_init(&argc, &argv, NULL);
51
52 qtest_add_func("virtio-balloon/oss_fuzz_71649", oss_fuzz_71649);
53 qtest_add_func("virtio-balloon/query-stats", query_stats);
54
55 return g_test_run();
56 }
57
58