Expand description
libafl_qemu_sys
is the crate exporting C symbols from QEMU.
Have a look at libafl_qemu
for higher-level abstractions.
Warning: The documentation is built by default for x86_64
in usermode
. To access the documentation of other architectures or systemmode, the documentation must be rebuilt with the right features.
Macros§
- extern_
c_ checked - Safe linking with of extern “C” functions.
Structs§
- AccelCPU
Class - AccelCPU
State - Address
Space - ArchCPU
- X86CPU: @env: #CPUX86State @migratable: If set, only migratable flags will be accepted when “enforce” mode is used, and only migratable flags will be included in the “host” CPU model.
- ArchCPU__
bindgen_ ty_ 1 - BNDCS
Reg - BNDReg
- BusChild
- BusState
- struct BusState: @obj: parent object @parent: parent Device @name: name of bus @hotplug_handler: link to a hotplug handler associated with bus. @max_index: max number of child buses @realized: is the bus itself realized? @full: is the bus full? @num_children: current number of child buses
- BusState
Entry - BusState
Head - CPUAddress
Space - CPUArch
State - CPUArch
State__ bindgen_ ty_ 1 - CPUArch
State__ bindgen_ ty_ 2 - CPUArch
State__ bindgen_ ty_ 4 - CPUBreakpoint
- CPUCache
Info - CPUCaches
- CPUClass
- CPUClass: @class_by_name: Callback to map -cpu command line model name to an instantiatable CPU type. @parse_features: Callback to parse command line arguments. @reset_dump_flags: #CPUDumpFlags to use for reset logging. @mmu_index: Callback for choosing softmmu mmu index; may be used internally by memory_rw_debug without TCG. @memory_rw_debug: Callback for GDB memory access. @dump_state: Callback for dumping state. @query_cpu_fast: Fill in target specific information for the “query-cpus-fast” QAPI call. @get_arch_id: Callback for getting architecture-dependent CPU ID. @set_pc: Callback for setting the Program Counter register. This should have the semantics used by the target architecture when setting the PC from a source such as an ELF file entry point; for example on Arm it will also set the Thumb mode bit based on the least significant bit of the new PC value. If the target behaviour here is anything other than “set the PC register to the value passed in” then the target must also implement the synchronize_from_tb hook. @get_pc: Callback for getting the Program Counter register. As above, with the semantics of the target architecture. @gdb_read_register: Callback for letting GDB read a register. No more than @gdb_num_core_regs registers can be read. @gdb_write_register: Callback for letting GDB write a register. No more than @gdb_num_core_regs registers can be written. @gdb_adjust_breakpoint: Callback for adjusting the address of a breakpoint. Used by AVR to handle a gdb mis-feature with its Harvard architecture split code and data. @gdb_num_core_regs: Number of core registers accessible to GDB or 0 to infer from @gdb_core_xml_file. @gdb_core_xml_file: File name for core registers GDB XML description. @gdb_stop_before_watchpoint: Indicates whether GDB expects the CPU to stop before the insn which triggers a watchpoint rather than after it. @gdb_arch_name: Optional callback that returns the architecture name known to GDB. The caller must free the returned string with g_free. @disas_set_info: Setup architecture specific components of disassembly info @adjust_watchpoint_address: Perform a target-specific adjustment to an address before attempting to match it against watchpoints. @deprecation_note: If this CPUClass is deprecated, this field provides related information.
- CPUJump
Cache - CPUNegative
Offset State - CPUNegativeOffsetState: Elements of CPUState most efficiently accessed from CPUArchState, via small negative offsets. @can_do_io: True if memory-mapped IO is allowed. @plugin_mem_cbs: active plugin memory callbacks @plugin_mem_value_low: 64 lower bits of latest accessed mem value. @plugin_mem_value_high: 64 higher bits of latest accessed mem value.
- CPUPlugin
State - struct CPUPluginState - per-CPU state for plugins @event_mask: plugin event bitmap. Modified only via async work.
- CPUState
- struct CPUState - common state of one CPU core or thread.
- CPUState__
bindgen_ ty_ 1 - CPUTLB
- CPUTLB
Common - CPUTLB
Desc - CPUTLB
Desc Fast - CPUTLB
Entry Full - CPUTLB
Entry Full__ bindgen_ ty_ 1__ bindgen_ ty_ 1 - CPUTLB
Entry__ bindgen_ ty_ 1 - CPUWatchpoint
- Cache
Type - Clock
- CpuInfo
Fast - CpuInfo
S390 - CpuInstance
Properties - CpuTopology
Level - Device
Class - struct DeviceClass - The base class for all devices. @props: Properties accessing state fields. @realize: Callback function invoked when the #DeviceState:realized property is changed to %true. @unrealize: Callback function invoked when the #DeviceState:realized property is changed to %false. @sync_config: Callback function invoked when QMP command device-sync-config is called. Should synchronize device configuration from host to guest part and notify the guest about the change. @hotpluggable: indicates if #DeviceClass is hotpluggable, available as readonly “hotpluggable” property of #DeviceState instance
- Device
State - struct DeviceState - common device state, accessed with qdev helpers
- Error
- FatPtr
- Float2
NaNProp Rule - Float3
NaNProp Rule - FloatFTZ
Detection - Float
InfZero NaNRule - Float
Round Mode - Float
X80Behaviour - Float
X80Round Prec - Hotplug
Handler - IRQState
- Icount
Decr__ bindgen_ ty_ 1 - Interval
Tree Node - KVMState
- LBREntry
- MTRRVar
- MapInfo
- MemOp
- MemReentrancy
Guard - MemTx
Attrs - Memory
Region - Mmap
Perms Iter - An iterator over the variants of MmapPerms
- Named
Clock List - Named
Clock List Head - Named
Clock List__ bindgen_ ty_ 1 - NamedGPIO
List - NamedGPIO
List Head - NamedGPIO
List__ bindgen_ ty_ 1 - Notifier
- Notifier__
bindgen_ ty_ 1 - Object
- struct Object:
- Object
Class - struct ObjectClass:
- Object
Property - OnOff
Auto - Property
- Property: @set_default: true if the default value should be set from @defval, in which case @info->set_default_value must not be NULL (if false then no default value is set by the property system and the field retains whatever value it was given by instance_init). @defval: default value for the property. This is used only if @set_default is true.
- Property
Info - QEnum
Lookup - QObject
- QTailQ
Link - Qemu
Cond - Qemu
Lock Cnt - Qemu
Mutex - Qemu
Spin - Qemu
Thread - RAMBlock
- RBNode
- RBRoot
- RBRoot
Left Cached - Resettable
State - ResettableState: Structure holding reset related state. The fields should not be accessed directly; the definition is here to allow further inclusion into other objects.
- S390
CpuEntitlement - S390
CpuState - Segment
Cache - Shutdown
Cause - SysEmu
Target - SysemuCPU
Ops - TCGCPU
Ops - TCGCall
Argument Kind - TCGCall
Argument Loc - TCGCall
Return Kind - TCGHelper
Info - TCGReg
- TCGTemp
- TCGTemp
Kind - TCGTemp
Val - TCGType
- TCGv_
i64_ d - TPRAccess
- Translation
Block - Type
Impl - VMChange
State Entry - VMState
Description - Verify
Access Iter - An iterator over the variants of VerifyAccess
- Visitor
- X86CPU
Topo Info - _GArray
- _GByte
Array - _GHash
Table - _GSList
- _IO_
FILE - _IO_
codecvt - _IO_
marker - _IO_
wide_ data - __
Bindgen Bitfield Unit - __
Incomplete Array Field - __
atomic_ wide_ counter__ bindgen_ ty_ 1 - __
jmp_ buf_ tag - __
pthread_ cond_ s - __
pthread_ internal_ list - __
pthread_ mutex_ s - __
sigset_ t - bfd_
architecture - bfd_
endian - bfd_
flavour - dis_
insn_ type - disassemble_
info - float_
status - floatx80
- image_
info - kvm_
dirty_ gfn - kvm_
msrs - kvm_run
- libafl_
backdoor_ hook - libafl_
block_ hook - libafl_
breakpoint - libafl_
cmp_ hook - libafl_
cpu_ run_ hook - libafl_
custom_ gdb_ cmd - libafl_
custom_ insn_ kind - libafl_
edge_ hook - libafl_
exit_ reason - libafl_
exit_ reason_ breakpoint - libafl_
exit_ reason_ crash - libafl_
exit_ reason_ custom_ insn - libafl_
exit_ reason_ internal - libafl_
exit_ reason_ kind - libafl_
exit_ reason_ timeout - libafl_
instruction_ hook - libafl_
mapinfo - libafl_
new_ thread_ hook - libafl_
post_ syscall_ hook - libafl_
pre_ syscall_ hook - libafl_
qemu_ sig_ ctx - libafl_
rw_ hook - libafl_
syshook_ ret - libafl_
syshook_ ret_ tag - qemu_
plugin_ hwaddr - struct qemu_plugin_hwaddr - opaque hw address handle
- qemu_
plugin_ mem_ rw - qemu_
work_ item - rcu_
head - siginfo_
t__ bindgen_ ty_ 1__ bindgen_ ty_ 1 - siginfo_
t__ bindgen_ ty_ 1__ bindgen_ ty_ 2 - siginfo_
t__ bindgen_ ty_ 1__ bindgen_ ty_ 3 - siginfo_
t__ bindgen_ ty_ 1__ bindgen_ ty_ 4 - siginfo_
t__ bindgen_ ty_ 1__ bindgen_ ty_ 5 - siginfo_
t__ bindgen_ ty_ 1__ bindgen_ ty_ 6 - siginfo_
t__ bindgen_ ty_ 1__ bindgen_ ty_ 7 - siginfo_
t__ bindgen_ ty_ 1__ bindgen_ ty_ 5__ bindgen_ ty_ 1__ bindgen_ ty_ 1 - symbol_
cache_ entry - tb_tc
Enums§
Constants§
- Cache
Type_ DATA_ CACHE - Cache
Type_ INSTRUCTION_ CACHE - Cache
Type_ UNIFIED_ CACHE - CpuTopology
Level_ CPU_ TOPOLOGY_ LEVEL_ BOOK - CpuTopology
Level_ CPU_ TOPOLOGY_ LEVEL_ CLUSTER - CpuTopology
Level_ CPU_ TOPOLOGY_ LEVEL_ CORE - CpuTopology
Level_ CPU_ TOPOLOGY_ LEVEL_ DEFAULT - CpuTopology
Level_ CPU_ TOPOLOGY_ LEVEL_ DIE - CpuTopology
Level_ CPU_ TOPOLOGY_ LEVEL_ DRAWER - CpuTopology
Level_ CPU_ TOPOLOGY_ LEVEL_ MODULE - CpuTopology
Level_ CPU_ TOPOLOGY_ LEVEL_ SOCKET - CpuTopology
Level_ CPU_ TOPOLOGY_ LEVEL_ THREAD - CpuTopology
Level_ CPU_ TOPOLOGY_ LEVEL__ MAX - Float2
NaNProp Rule_ float_ 2nan_ prop_ ab - Float2
NaNProp Rule_ float_ 2nan_ prop_ ba - Float2
NaNProp Rule_ float_ 2nan_ prop_ none - Float2
NaNProp Rule_ float_ 2nan_ prop_ s_ ab - Float2
NaNProp Rule_ float_ 2nan_ prop_ s_ ba - Float2
NaNProp Rule_ float_ 2nan_ prop_ x87 - Float3
NaNProp Rule_ float_ 3nan_ prop_ abc - Float3
NaNProp Rule_ float_ 3nan_ prop_ acb - Float3
NaNProp Rule_ float_ 3nan_ prop_ bac - Float3
NaNProp Rule_ float_ 3nan_ prop_ bca - Float3
NaNProp Rule_ float_ 3nan_ prop_ cab - Float3
NaNProp Rule_ float_ 3nan_ prop_ cba - Float3
NaNProp Rule_ float_ 3nan_ prop_ none - Float3
NaNProp Rule_ float_ 3nan_ prop_ s_ abc - Float3
NaNProp Rule_ float_ 3nan_ prop_ s_ acb - Float3
NaNProp Rule_ float_ 3nan_ prop_ s_ bac - Float3
NaNProp Rule_ float_ 3nan_ prop_ s_ bca - Float3
NaNProp Rule_ float_ 3nan_ prop_ s_ cab - Float3
NaNProp Rule_ float_ 3nan_ prop_ s_ cba - FloatFTZ
Detection_ float_ ftz_ after_ rounding - FloatFTZ
Detection_ float_ ftz_ before_ rounding - Float
InfZero NaNRule_ float_ infzeronan_ dnan_ always - Float
InfZero NaNRule_ float_ infzeronan_ dnan_ if_ qnan - Float
InfZero NaNRule_ float_ infzeronan_ dnan_ never - Float
InfZero NaNRule_ float_ infzeronan_ none - Float
InfZero NaNRule_ float_ infzeronan_ suppress_ invalid - Float
Round Mode_ float_ round_ down - Float
Round Mode_ float_ round_ nearest_ even - Float
Round Mode_ float_ round_ nearest_ even_ max - Float
Round Mode_ float_ round_ ties_ away - Float
Round Mode_ float_ round_ to_ odd - Float
Round Mode_ float_ round_ to_ odd_ inf - Float
Round Mode_ float_ round_ to_ zero - Float
Round Mode_ float_ round_ up - Float
X80Behaviour_ floatx80_ default_ inf_ int_ bit_ is_ zero - Float
X80Behaviour_ floatx80_ pseudo_ denormal_ valid - Float
X80Behaviour_ floatx80_ pseudo_ inf_ valid - Float
X80Behaviour_ floatx80_ pseudo_ nan_ valid - Float
X80Behaviour_ floatx80_ unnormal_ valid - Float
X80Round Prec_ floatx80_ precision_ d - Float
X80Round Prec_ floatx80_ precision_ s - Float
X80Round Prec_ floatx80_ precision_ x - MemOp_
MO_ 8 - MemOp_
MO_ 16 - MemOp_
MO_ 32 - MemOp_
MO_ 64 - MemOp_
MO_ 128 - MemOp_
MO_ 256 - MemOp_
MO_ 512 - MemOp_
MO_ 1024 - MemOp_
MO_ ALIGN - MemOp_
MO_ ALIGN_ 2 - MemOp_
MO_ ALIGN_ 4 - MemOp_
MO_ ALIGN_ 8 - MemOp_
MO_ ALIGN_ 16 - MemOp_
MO_ ALIGN_ 32 - MemOp_
MO_ ALIGN_ 64 - MemOp_
MO_ AMASK - MemOp_
MO_ ASHIFT - MemOp_
MO_ ATOM_ IFALIGN - MemOp_
MO_ ATOM_ IFALIGN_ PAIR - MemOp_
MO_ ATOM_ MASK - MemOp_
MO_ ATOM_ NONE - MemOp_
MO_ ATOM_ SHIFT - MemOp_
MO_ ATOM_ SUBALIGN - MemOp_
MO_ ATOM_ WITHI N16 - MemOp_
MO_ ATOM_ WITHI N16_ PAIR - MemOp_
MO_ BE - MemOp_
MO_ BESL - MemOp_
MO_ BESQ - MemOp_
MO_ BESW - MemOp_
MO_ BEUL - MemOp_
MO_ BEUQ - MemOp_
MO_ BEUW - MemOp_
MO_ BSWAP - MemOp_
MO_ LE - MemOp_
MO_ LESL - MemOp_
MO_ LESQ - MemOp_
MO_ LESW - MemOp_
MO_ LEUL - MemOp_
MO_ LEUQ - MemOp_
MO_ LEUW - MemOp_
MO_ SB - MemOp_
MO_ SIGN - MemOp_
MO_ SIZE - MemOp_
MO_ SL - MemOp_
MO_ SO - MemOp_
MO_ SQ - MemOp_
MO_ SSIZE - MemOp_
MO_ SW - MemOp_
MO_ TE - MemOp_
MO_ TESL - MemOp_
MO_ TESQ - MemOp_
MO_ TESW - MemOp_
MO_ TEUL - MemOp_
MO_ TEUO - MemOp_
MO_ TEUQ - MemOp_
MO_ TEUW - MemOp_
MO_ UB - MemOp_
MO_ UL - MemOp_
MO_ UNALN - MemOp_
MO_ UO - MemOp_
MO_ UQ - MemOp_
MO_ UW - OnOff
Auto_ ON_ OFF_ AUTO_ AUTO - OnOff
Auto_ ON_ OFF_ AUTO_ OFF - OnOff
Auto_ ON_ OFF_ AUTO_ ON - OnOff
Auto_ ON_ OFF_ AUTO__ MAX - S390
CpuEntitlement_ S390_ CPU_ ENTITLEMENT_ AUTO - S390
CpuEntitlement_ S390_ CPU_ ENTITLEMENT_ HIGH - S390
CpuEntitlement_ S390_ CPU_ ENTITLEMENT_ LOW - S390
CpuEntitlement_ S390_ CPU_ ENTITLEMENT_ MEDIUM - S390
CpuEntitlement_ S390_ CPU_ ENTITLEMENT__ MAX - S390
CpuState_ S390_ CPU_ STATE_ CHECK_ STOP - S390
CpuState_ S390_ CPU_ STATE_ LOAD - S390
CpuState_ S390_ CPU_ STATE_ OPERATING - S390
CpuState_ S390_ CPU_ STATE_ STOPPED - S390
CpuState_ S390_ CPU_ STATE_ UNINITIALIZED - S390
CpuState_ S390_ CPU_ STATE__ MAX - Shutdown
Cause_ SHUTDOWN_ CAUSE_ GUEST_ PANIC - Shutdown
Cause_ SHUTDOWN_ CAUSE_ GUEST_ RESET - Shutdown
Cause_ SHUTDOWN_ CAUSE_ GUEST_ SHUTDOWN - Shutdown
Cause_ SHUTDOWN_ CAUSE_ HOST_ ERROR - Shutdown
Cause_ SHUTDOWN_ CAUSE_ HOST_ QMP_ QUIT - Shutdown
Cause_ SHUTDOWN_ CAUSE_ HOST_ QMP_ SYSTEM_ RESET - Shutdown
Cause_ SHUTDOWN_ CAUSE_ HOST_ SIGNAL - Shutdown
Cause_ SHUTDOWN_ CAUSE_ HOST_ UI - Shutdown
Cause_ SHUTDOWN_ CAUSE_ NONE - Shutdown
Cause_ SHUTDOWN_ CAUSE_ SNAPSHOT_ LOAD - Shutdown
Cause_ SHUTDOWN_ CAUSE_ SUBSYSTEM_ RESET - Shutdown
Cause_ SHUTDOWN_ CAUSE__ MAX - SysEmu
Target_ SYS_ EMU_ TARGET_ AARC H64 - SysEmu
Target_ SYS_ EMU_ TARGET_ ALPHA - SysEmu
Target_ SYS_ EMU_ TARGET_ ARM - SysEmu
Target_ SYS_ EMU_ TARGET_ AVR - SysEmu
Target_ SYS_ EMU_ TARGET_ HPPA - SysEmu
Target_ SYS_ EMU_ TARGET_ I386 - SysEmu
Target_ SYS_ EMU_ TARGET_ LOONGARC H64 - SysEmu
Target_ SYS_ EMU_ TARGET_ M68K - SysEmu
Target_ SYS_ EMU_ TARGET_ MICROBLAZE - SysEmu
Target_ SYS_ EMU_ TARGET_ MICROBLAZEEL - SysEmu
Target_ SYS_ EMU_ TARGET_ MIPS - SysEmu
Target_ SYS_ EMU_ TARGET_ MIPS64 - SysEmu
Target_ SYS_ EMU_ TARGET_ MIPS64EL - SysEmu
Target_ SYS_ EMU_ TARGET_ MIPSEL - SysEmu
Target_ SYS_ EMU_ TARGET_ OR1K - SysEmu
Target_ SYS_ EMU_ TARGET_ PPC - SysEmu
Target_ SYS_ EMU_ TARGET_ PPC64 - SysEmu
Target_ SYS_ EMU_ TARGET_ RISC V32 - SysEmu
Target_ SYS_ EMU_ TARGET_ RISC V64 - SysEmu
Target_ SYS_ EMU_ TARGET_ RX - SysEmu
Target_ SYS_ EMU_ TARGET_ S390X - SysEmu
Target_ SYS_ EMU_ TARGET_ SH4 - SysEmu
Target_ SYS_ EMU_ TARGET_ SH4EB - SysEmu
Target_ SYS_ EMU_ TARGET_ SPARC - SysEmu
Target_ SYS_ EMU_ TARGET_ SPAR C64 - SysEmu
Target_ SYS_ EMU_ TARGET_ TRICORE - SysEmu
Target_ SYS_ EMU_ TARGET_ X86_ 64 - SysEmu
Target_ SYS_ EMU_ TARGET_ XTENSA - SysEmu
Target_ SYS_ EMU_ TARGET_ XTENSAEB - SysEmu
Target_ SYS_ EMU_ TARGET__ MAX - TCGCall
Argument Kind_ TCG_ CALL_ ARG_ BY_ REF - TCGCall
Argument Kind_ TCG_ CALL_ ARG_ BY_ REF_ N - TCGCall
Argument Kind_ TCG_ CALL_ ARG_ EVEN - TCGCall
Argument Kind_ TCG_ CALL_ ARG_ EXTEND - TCGCall
Argument Kind_ TCG_ CALL_ ARG_ EXTEND_ S - TCGCall
Argument Kind_ TCG_ CALL_ ARG_ EXTEND_ U - TCGCall
Argument Kind_ TCG_ CALL_ ARG_ NORMAL - TCGCall
Return Kind_ TCG_ CALL_ RET_ BY_ REF - TCGCall
Return Kind_ TCG_ CALL_ RET_ BY_ VEC - TCGCall
Return Kind_ TCG_ CALL_ RET_ NORMAL - TCGReg_
TCG_ AREG0 - TCGReg_
TCG_ REG_ CALL_ STACK - TCGReg_
TCG_ REG_ EAX - TCGReg_
TCG_ REG_ EBP - TCGReg_
TCG_ REG_ EBX - TCGReg_
TCG_ REG_ ECX - TCGReg_
TCG_ REG_ EDI - TCGReg_
TCG_ REG_ EDX - TCGReg_
TCG_ REG_ ESI - TCGReg_
TCG_ REG_ ESP - TCGReg_
TCG_ REG_ R8 - TCGReg_
TCG_ REG_ R9 - TCGReg_
TCG_ REG_ R10 - TCGReg_
TCG_ REG_ R11 - TCGReg_
TCG_ REG_ R12 - TCGReg_
TCG_ REG_ R13 - TCGReg_
TCG_ REG_ R14 - TCGReg_
TCG_ REG_ R15 - TCGReg_
TCG_ REG_ RAX - TCGReg_
TCG_ REG_ RBP - TCGReg_
TCG_ REG_ RBX - TCGReg_
TCG_ REG_ RCX - TCGReg_
TCG_ REG_ RDI - TCGReg_
TCG_ REG_ RDX - TCGReg_
TCG_ REG_ RSI - TCGReg_
TCG_ REG_ RSP - TCGReg_
TCG_ REG_ XMM0 - TCGReg_
TCG_ REG_ XMM1 - TCGReg_
TCG_ REG_ XMM2 - TCGReg_
TCG_ REG_ XMM3 - TCGReg_
TCG_ REG_ XMM4 - TCGReg_
TCG_ REG_ XMM5 - TCGReg_
TCG_ REG_ XMM6 - TCGReg_
TCG_ REG_ XMM7 - TCGReg_
TCG_ REG_ XMM8 - TCGReg_
TCG_ REG_ XMM9 - TCGReg_
TCG_ REG_ XMM10 - TCGReg_
TCG_ REG_ XMM11 - TCGReg_
TCG_ REG_ XMM12 - TCGReg_
TCG_ REG_ XMM13 - TCGReg_
TCG_ REG_ XMM14 - TCGReg_
TCG_ REG_ XMM15 - TCGTemp
Kind_ TEMP_ CONST - TCGTemp
Kind_ TEMP_ EBB - TCGTemp
Kind_ TEMP_ FIXED - TCGTemp
Kind_ TEMP_ GLOBAL - TCGTemp
Kind_ TEMP_ TB - TCGTemp
Val_ TEMP_ VAL_ CONST - TCGTemp
Val_ TEMP_ VAL_ DEAD - TCGTemp
Val_ TEMP_ VAL_ MEM - TCGTemp
Val_ TEMP_ VAL_ REG - TCGType_
TCG_ TYPE_ I32 - TCGType_
TCG_ TYPE_ I64 - TCGType_
TCG_ TYPE_ I128 - TCGType_
TCG_ TYPE_ PTR - TCGType_
TCG_ TYPE_ REG - TCGType_
TCG_ TYPE_ V64 - TCGType_
TCG_ TYPE_ V128 - TCGType_
TCG_ TYPE_ V256 - TPRAccess_
TPR_ ACCESS_ READ - TPRAccess_
TPR_ ACCESS_ WRITE - bfd_
architecture_ bfd_ arch_ a29k - bfd_
architecture_ bfd_ arch_ alliant - bfd_
architecture_ bfd_ arch_ alpha - bfd_
architecture_ bfd_ arch_ arc - bfd_
architecture_ bfd_ arch_ arm - bfd_
architecture_ bfd_ arch_ avr - bfd_
architecture_ bfd_ arch_ convex - bfd_
architecture_ bfd_ arch_ d10v - bfd_
architecture_ bfd_ arch_ h8300 - bfd_
architecture_ bfd_ arch_ h8500 - bfd_
architecture_ bfd_ arch_ hppa - bfd_
architecture_ bfd_ arch_ i386 - bfd_
architecture_ bfd_ arch_ i860 - bfd_
architecture_ bfd_ arch_ i960 - bfd_
architecture_ bfd_ arch_ ia64 - bfd_
architecture_ bfd_ arch_ last - bfd_
architecture_ bfd_ arch_ loongarch - bfd_
architecture_ bfd_ arch_ m32r - bfd_
architecture_ bfd_ arch_ m68k - bfd_
architecture_ bfd_ arch_ m88k - bfd_
architecture_ bfd_ arch_ microblaze - bfd_
architecture_ bfd_ arch_ mips - bfd_
architecture_ bfd_ arch_ mn10200 - bfd_
architecture_ bfd_ arch_ mn10300 - bfd_
architecture_ bfd_ arch_ moxie - bfd_
architecture_ bfd_ arch_ ns32k - bfd_
architecture_ bfd_ arch_ obscure - bfd_
architecture_ bfd_ arch_ powerpc - bfd_
architecture_ bfd_ arch_ pyramid - bfd_
architecture_ bfd_ arch_ romp - bfd_
architecture_ bfd_ arch_ rs6000 - bfd_
architecture_ bfd_ arch_ rx - bfd_
architecture_ bfd_ arch_ sh - bfd_
architecture_ bfd_ arch_ sparc - bfd_
architecture_ bfd_ arch_ tahoe - bfd_
architecture_ bfd_ arch_ tic30 - bfd_
architecture_ bfd_ arch_ unknown - bfd_
architecture_ bfd_ arch_ v850 - bfd_
architecture_ bfd_ arch_ vax - bfd_
architecture_ bfd_ arch_ w65 - bfd_
architecture_ bfd_ arch_ we32k - bfd_
architecture_ bfd_ arch_ z8k - bfd_
endian_ BFD_ ENDIAN_ BIG - bfd_
endian_ BFD_ ENDIAN_ LITTLE - bfd_
endian_ BFD_ ENDIAN_ UNKNOWN - bfd_
flavour_ bfd_ target_ aout_ flavour - bfd_
flavour_ bfd_ target_ coff_ flavour - bfd_
flavour_ bfd_ target_ ecoff_ flavour - bfd_
flavour_ bfd_ target_ elf_ flavour - bfd_
flavour_ bfd_ target_ evax_ flavour - bfd_
flavour_ bfd_ target_ ieee_ flavour - bfd_
flavour_ bfd_ target_ ihex_ flavour - bfd_
flavour_ bfd_ target_ msdos_ flavour - bfd_
flavour_ bfd_ target_ nlm_ flavour - bfd_
flavour_ bfd_ target_ oasys_ flavour - bfd_
flavour_ bfd_ target_ os9k_ flavour - bfd_
flavour_ bfd_ target_ som_ flavour - bfd_
flavour_ bfd_ target_ srec_ flavour - bfd_
flavour_ bfd_ target_ tekhex_ flavour - bfd_
flavour_ bfd_ target_ unknown_ flavour - bfd_
flavour_ bfd_ target_ versados_ flavour - dis_
insn_ type_ dis_ branch - dis_
insn_ type_ dis_ condbranch - dis_
insn_ type_ dis_ condjsr - dis_
insn_ type_ dis_ dref - dis_
insn_ type_ dis_ dref2 - dis_
insn_ type_ dis_ jsr - dis_
insn_ type_ dis_ nonbranch - dis_
insn_ type_ dis_ noninsn - libafl_
custom_ insn_ kind_ LIBAFL_ CUSTOM_ INSN_ LIBAFL - libafl_
custom_ insn_ kind_ LIBAFL_ CUSTOM_ INSN_ NYX - libafl_
custom_ insn_ kind_ LIBAFL_ CUSTOM_ INSN_ UNDEFINED - libafl_
exit_ reason_ kind_ BREAKPOINT - libafl_
exit_ reason_ kind_ CRASH - libafl_
exit_ reason_ kind_ CUSTOM_ INSN - libafl_
exit_ reason_ kind_ INTERNAL - libafl_
exit_ reason_ kind_ TIMEOUT - libafl_
syshook_ ret_ tag_ LIBAFL_ SYSHOOK_ RUN - libafl_
syshook_ ret_ tag_ LIBAFL_ SYSHOOK_ SKIP - qemu_
plugin_ mem_ rw_ QEMU_ PLUGIN_ MEM_ R - qemu_
plugin_ mem_ rw_ QEMU_ PLUGIN_ MEM_ RW - qemu_
plugin_ mem_ rw_ QEMU_ PLUGIN_ MEM_ W
Statics§
Functions§
- cpu_env⚠
- Safety
- cpu_
memory_ ⚠rw_ debug - cpu_
reset ⚠ - cpu_reset: @cpu: The CPU whose state is to be reset.
- free_
self_ ⚠maps - free_self_maps: @info: an interval tree
- libafl_
add_ ⚠backdoor_ hook - libafl_
add_ ⚠block_ hook - libafl_
add_ ⚠cmp_ hook - libafl_
add_ ⚠edge_ hook - libafl_
add_ ⚠new_ thread_ hook - libafl_
add_ ⚠post_ syscall_ hook - libafl_
add_ ⚠pre_ syscall_ hook - libafl_
add_ ⚠read_ hook - libafl_
add_ ⚠write_ hook - libafl_
breakpoint_ ⚠invalidate - libafl_
exit_ ⚠asap - libafl_
exit_ ⚠request_ breakpoint - libafl_
exit_ ⚠request_ crash - libafl_
exit_ ⚠request_ custom_ insn - libafl_
exit_ ⚠request_ internal - libafl_
exit_ ⚠request_ timeout - libafl_
exit_ ⚠signal_ vm_ start - libafl_
flush_ ⚠jit - libafl_
gen_ ⚠cmp - libafl_
gen_ ⚠edge - libafl_
gen_ ⚠read - libafl_
gen_ ⚠write - libafl_
get_ ⚠brk - libafl_
get_ ⚠exit_ reason - libafl_
get_ ⚠image_ info - libafl_
get_ ⚠initial_ brk - libafl_
get_ ⚠return_ on_ crash - libafl_
hook_ ⚠cpu_ run_ add - libafl_
hook_ ⚠cpu_ run_ post_ exec - libafl_
hook_ ⚠cpu_ run_ pre_ exec - libafl_
hook_ ⚠cpu_ run_ remove - libafl_
hook_ ⚠new_ thread_ run - libafl_
hook_ ⚠syscall_ post_ run - libafl_
hook_ ⚠syscall_ pre_ run - libafl_
jit_ ⚠trace_ block_ hitcount - libafl_
jit_ ⚠trace_ block_ single - libafl_
jit_ ⚠trace_ edge_ hitcount - libafl_
jit_ ⚠trace_ edge_ single - libafl_
last_ ⚠exit_ cpu - libafl_
load_ ⚠addr - libafl_
maps_ ⚠first - libafl_
maps_ ⚠next - libafl_
page_ ⚠from_ addr - libafl_
qemu_ ⚠add_ gdb_ cmd - libafl_
qemu_ ⚠add_ instruction_ hooks - libafl_
qemu_ ⚠block_ hook_ set_ jit - libafl_
qemu_ ⚠breakpoint_ run - libafl_
qemu_ ⚠cpu_ index - libafl_
qemu_ ⚠current_ cpu - libafl_
qemu_ ⚠edge_ hook_ set_ jit - libafl_
qemu_ ⚠gdb_ exec - libafl_
qemu_ ⚠gdb_ reply - libafl_
qemu_ ⚠get_ cpu - libafl_
qemu_ ⚠handle_ crash - libafl_
qemu_ ⚠hook_ backdoor_ run - libafl_
qemu_ ⚠hook_ block_ post_ run - libafl_
qemu_ ⚠hook_ block_ pre_ run - libafl_
qemu_ ⚠hook_ edge_ gen - libafl_
qemu_ ⚠hook_ edge_ run - libafl_
qemu_ ⚠hook_ instruction_ run - libafl_
qemu_ ⚠host_ page_ size - libafl_
qemu_ ⚠init - libafl_
qemu_ ⚠main - libafl_
qemu_ ⚠native_ signal_ handler - libafl_
qemu_ ⚠num_ cpus - libafl_
qemu_ ⚠num_ regs - libafl_
qemu_ ⚠read_ reg - libafl_
qemu_ ⚠remove_ backdoor_ hook - libafl_
qemu_ ⚠remove_ block_ hook - libafl_
qemu_ ⚠remove_ breakpoint - libafl_
qemu_ ⚠remove_ cmp_ hook - libafl_
qemu_ ⚠remove_ cpu_ run_ hook - libafl_
qemu_ ⚠remove_ edge_ hook - libafl_
qemu_ ⚠remove_ instruction_ hook - libafl_
qemu_ ⚠remove_ instruction_ hooks_ at - libafl_
qemu_ ⚠remove_ new_ thread_ hook - libafl_
qemu_ ⚠remove_ post_ syscall_ hook - libafl_
qemu_ ⚠remove_ pre_ syscall_ hook - libafl_
qemu_ ⚠remove_ read_ hook - libafl_
qemu_ ⚠remove_ write_ hook - libafl_
qemu_ ⚠run - libafl_
qemu_ ⚠set_ breakpoint - libafl_
qemu_ ⚠signal_ context - libafl_
qemu_ ⚠trigger_ breakpoint - libafl_
qemu_ ⚠write_ reg - libafl_
search_ ⚠instruction_ hook - libafl_
set_ ⚠brk - libafl_
set_ ⚠in_ host_ signal_ ctx - libafl_
set_ ⚠in_ target_ signal_ ctx - libafl_
set_ ⚠qemu_ env - libafl_
set_ ⚠return_ on_ crash - libafl_
sync_ ⚠exit_ cpu - libafl_
tcg_ ⚠gen_ asan - libafl_
unset_ ⚠in_ signal_ ctx - make_
plugin_ meminfo - memop_
big_ endian - memop_
size - page_
check_ ⚠range - page_check_range @start: first byte of range @len: length of range @flags: flags required for each page
- pageflags_
get_ ⚠root - — Begin LibAFL code —
- qemu_
plugin_ ⚠get_ hwaddr - qemu_plugin_get_hwaddr() - return handle for memory operation @info: opaque memory info structure @vaddr: the virtual address of the memory operation
- qemu_
plugin_ ⚠hwaddr_ phys_ addr - qemu_plugin_hwaddr_phys_addr() - query physical address for memory operation @haddr: address handle from qemu_plugin_get_hwaddr()
- read_
self_ ⚠maps - read_self_maps:
- target_
mmap ⚠ - target_
mprotect ⚠ - target_
munmap ⚠ - tlb_
plugin_ ⚠lookup - tlb_plugin_lookup: query last TLB lookup @cpu: cpu environment
Type Aliases§
- CPUArch
State Ptr - CPUState
Ptr - CPUX86
State - Device
Realize - Device
Reset - Device
Sync Config - Device
Unrealize - Exit
Reason Ptr - FILE
- Feature
Word Array - GArray
- GByte
Array - GHash
Table - GSList
- Guest
Addr - Guest
HwAddr Info - Guest
Isize - Guest
Phys Addr - Guest
Usize - Guest
Virt Addr - Interval
Tree Root - MemOp
Idx - Object
Free - typedef ObjectFree: @obj: the object being freed
- Object
Property Accessor - typedef ObjectPropertyAccessor: @obj: the object that owns the property @v: the visitor that contains the property data @name: the name of the property @opaque: the object property opaque @errp: a pointer to an Error that is filled if getting/setting fails.
- Object
Property Init - typedef ObjectPropertyInit: @obj: the object that owns the property @prop: the property to set
- Object
Property Release - typedef ObjectPropertyRelease: @obj: the object that owns the property @name: the name of the property @opaque: the opaque registered with the property
- Object
Property Resolve - typedef ObjectPropertyResolve: @obj: the object that owns the property @opaque: the opaque registered with the property @part: the name of the property
- Object
Unparent - typedef ObjectUnparent: @obj: the object that is being removed from the composition tree
- PTR
- RCUCB
Func - TCGv
- TCGv_
i64 - Type
- X86CPU
- X86CPU: @env: #CPUX86State @migratable: If set, only migratable flags will be accepted when “enforce” mode is used, and only migratable flags will be included in the “host” CPU model.
- _IO_
lock_ t - __
clock_ t - __
jmp_ buf - __
off64_ t - __off_t
- __pid_t
- __
pthread_ list_ t - __
sigval_ t - __uid_t
- __
uint32_ t - abi_
long - abi_
ulong - asymbol
- bfd_
byte - bfd_vma
- float16
- float32
- float64
- fprintf_
function - gchar
- gpointer
- guint
- guint8
- hwaddr
- libafl_
backdoor_ exec_ cb - libafl_
block_ exec_ cb - libafl_
block_ jit_ cb - libafl_
block_ post_ gen_ cb - libafl_
block_ pre_ gen_ cb - libafl_
cmp_ exec1_ cb - libafl_
cmp_ exec2_ cb - libafl_
cmp_ exec4_ cb - libafl_
cmp_ exec8_ cb - libafl_
cmp_ gen_ cb - libafl_
cpu_ run_ fn - libafl_
edge_ exec_ cb - libafl_
edge_ gen_ cb - libafl_
edge_ jit_ cb - libafl_
instruction_ cb - libafl_
post_ syscall_ cb - libafl_
pre_ syscall_ cb - libafl_
rw_ execN_ cb - libafl_
rw_ exec_ cb - libafl_
rw_ gen_ cb - off_t
- pthread_
t - qemu_
irq - qemu_
plugin_ meminfo_ t - typedef qemu_plugin_meminfo_t - opaque memory transaction handle
- sigjmp_
buf - target_
long - target_
ulong - vaddr
- vaddr: Type wide enough to contain any #target_ulong virtual address. We do not support 64-bit guest on 32-host and detect at configure time. Therefore, a host pointer width will always fit a guest pointer.
Unions§
- BusChild
Head - BusChild__
bindgen_ ty_ 1 - CPUArch
State__ bindgen_ ty_ 3 - CPUBreakpoint__
bindgen_ ty_ 1 - CPUState__
bindgen_ ty_ 2 - CPUState__
bindgen_ ty_ 3 - CPUState__
bindgen_ ty_ 4 - CPUTLB
Entry - CPUTLB
Entry Full__ bindgen_ ty_ 1 - CPUWatchpoint__
bindgen_ ty_ 1 - CpuInfo
Fast__ bindgen_ ty_ 1 - FPReg
- Icount
Decr - MMXReg
- Property__
bindgen_ ty_ 1 - XMMReg
- YMMReg
- ZMMReg
- __
atomic_ wide_ counter - libafl_
exit_ reason__ bindgen_ ty_ 1 - libafl_
syshook_ ret__ bindgen_ ty_ 1 - pthread_
cond_ t - pthread_
mutex_ t - siginfo_
t__ bindgen_ ty_ 1 - siginfo_
t__ bindgen_ ty_ 1__ bindgen_ ty_ 5__ bindgen_ ty_ 1 - sigval
- symbol_
cache_ entry__ bindgen_ ty_ 1