Crate libafl_qemu_sys

Source
Expand description

libafl_qemu_sys is the crate exporting C symbols from QEMU. Have a look at libafl_qemu for higher-level abstractions.

Warning: The documentation is built by default for x86_64 in usermode. To access the documentation of other architectures or systemmode, the documentation must be rebuilt with the right features.

Macros§

extern_c_checked
Safe linking with of extern “C” functions.

Structs§

AccelCPUClass
AccelCPUState
AddressSpace
ArchCPU
X86CPU: @env: #CPUX86State @migratable: If set, only migratable flags will be accepted when “enforce” mode is used, and only migratable flags will be included in the “host” CPU model.
ArchCPU__bindgen_ty_1
BNDCSReg
BNDReg
BusChild
BusState
struct BusState: @obj: parent object @parent: parent Device @name: name of bus @hotplug_handler: link to a hotplug handler associated with bus. @max_index: max number of child buses @realized: is the bus itself realized? @full: is the bus full? @num_children: current number of child buses
BusStateEntry
BusStateHead
CPUAddressSpace
CPUArchState
CPUArchState__bindgen_ty_1
CPUArchState__bindgen_ty_2
CPUArchState__bindgen_ty_4
CPUBreakpoint
CPUCacheInfo
CPUCaches
CPUClass
CPUClass: @class_by_name: Callback to map -cpu command line model name to an instantiatable CPU type. @parse_features: Callback to parse command line arguments. @reset_dump_flags: #CPUDumpFlags to use for reset logging. @mmu_index: Callback for choosing softmmu mmu index; may be used internally by memory_rw_debug without TCG. @memory_rw_debug: Callback for GDB memory access. @dump_state: Callback for dumping state. @query_cpu_fast: Fill in target specific information for the “query-cpus-fast” QAPI call. @get_arch_id: Callback for getting architecture-dependent CPU ID. @set_pc: Callback for setting the Program Counter register. This should have the semantics used by the target architecture when setting the PC from a source such as an ELF file entry point; for example on Arm it will also set the Thumb mode bit based on the least significant bit of the new PC value. If the target behaviour here is anything other than “set the PC register to the value passed in” then the target must also implement the synchronize_from_tb hook. @get_pc: Callback for getting the Program Counter register. As above, with the semantics of the target architecture. @gdb_read_register: Callback for letting GDB read a register. No more than @gdb_num_core_regs registers can be read. @gdb_write_register: Callback for letting GDB write a register. No more than @gdb_num_core_regs registers can be written. @gdb_adjust_breakpoint: Callback for adjusting the address of a breakpoint. Used by AVR to handle a gdb mis-feature with its Harvard architecture split code and data. @gdb_num_core_regs: Number of core registers accessible to GDB or 0 to infer from @gdb_core_xml_file. @gdb_core_xml_file: File name for core registers GDB XML description. @gdb_stop_before_watchpoint: Indicates whether GDB expects the CPU to stop before the insn which triggers a watchpoint rather than after it. @gdb_arch_name: Optional callback that returns the architecture name known to GDB. The caller must free the returned string with g_free. @disas_set_info: Setup architecture specific components of disassembly info @adjust_watchpoint_address: Perform a target-specific adjustment to an address before attempting to match it against watchpoints. @deprecation_note: If this CPUClass is deprecated, this field provides related information.
CPUJumpCache
CPUNegativeOffsetState
CPUNegativeOffsetState: Elements of CPUState most efficiently accessed from CPUArchState, via small negative offsets. @can_do_io: True if memory-mapped IO is allowed. @plugin_mem_cbs: active plugin memory callbacks @plugin_mem_value_low: 64 lower bits of latest accessed mem value. @plugin_mem_value_high: 64 higher bits of latest accessed mem value.
CPUPluginState
struct CPUPluginState - per-CPU state for plugins @event_mask: plugin event bitmap. Modified only via async work.
CPUState
struct CPUState - common state of one CPU core or thread.
CPUState__bindgen_ty_1
CPUTLB
CPUTLBCommon
CPUTLBDesc
CPUTLBDescFast
CPUTLBEntryFull
CPUTLBEntryFull__bindgen_ty_1__bindgen_ty_1
CPUTLBEntry__bindgen_ty_1
CPUWatchpoint
CacheType
Clock
CpuInfoFast
CpuInfoS390
CpuInstanceProperties
CpuTopologyLevel
DeviceClass
struct DeviceClass - The base class for all devices. @props: Properties accessing state fields. @realize: Callback function invoked when the #DeviceState:realized property is changed to %true. @unrealize: Callback function invoked when the #DeviceState:realized property is changed to %false. @sync_config: Callback function invoked when QMP command device-sync-config is called. Should synchronize device configuration from host to guest part and notify the guest about the change. @hotpluggable: indicates if #DeviceClass is hotpluggable, available as readonly “hotpluggable” property of #DeviceState instance
DeviceState
struct DeviceState - common device state, accessed with qdev helpers
Error
FatPtr
Float2NaNPropRule
Float3NaNPropRule
FloatFTZDetection
FloatInfZeroNaNRule
FloatRoundMode
FloatX80Behaviour
FloatX80RoundPrec
HotplugHandler
IRQState
IcountDecr__bindgen_ty_1
IntervalTreeNode
KVMState
LBREntry
MTRRVar
MapInfo
MemOp
MemReentrancyGuard
MemTxAttrs
MemoryRegion
MmapPermsIter
An iterator over the variants of MmapPerms
NamedClockList
NamedClockListHead
NamedClockList__bindgen_ty_1
NamedGPIOList
NamedGPIOListHead
NamedGPIOList__bindgen_ty_1
Notifier
Notifier__bindgen_ty_1
Object
struct Object:
ObjectClass
struct ObjectClass:
ObjectProperty
OnOffAuto
Property
Property: @set_default: true if the default value should be set from @defval, in which case @info->set_default_value must not be NULL (if false then no default value is set by the property system and the field retains whatever value it was given by instance_init). @defval: default value for the property. This is used only if @set_default is true.
PropertyInfo
QEnumLookup
QObject
QTailQLink
QemuCond
QemuLockCnt
QemuMutex
QemuSpin
QemuThread
RAMBlock
RBNode
RBRoot
RBRootLeftCached
ResettableState
ResettableState: Structure holding reset related state. The fields should not be accessed directly; the definition is here to allow further inclusion into other objects.
S390CpuEntitlement
S390CpuState
SegmentCache
ShutdownCause
SysEmuTarget
SysemuCPUOps
TCGCPUOps
TCGCallArgumentKind
TCGCallArgumentLoc
TCGCallReturnKind
TCGHelperInfo
TCGReg
TCGTemp
TCGTempKind
TCGTempVal
TCGType
TCGv_i64_d
TPRAccess
TranslationBlock
TypeImpl
VMChangeStateEntry
VMStateDescription
VerifyAccessIter
An iterator over the variants of VerifyAccess
Visitor
X86CPUTopoInfo
_GArray
_GByteArray
_GHashTable
_GSList
_IO_FILE
_IO_codecvt
_IO_marker
_IO_wide_data
__BindgenBitfieldUnit
__IncompleteArrayField
__atomic_wide_counter__bindgen_ty_1
__jmp_buf_tag
__pthread_cond_s
__pthread_internal_list
__pthread_mutex_s
__sigset_t
bfd_architecture
bfd_endian
bfd_flavour
dis_insn_type
disassemble_info
float_status
floatx80
image_info
kvm_dirty_gfn
kvm_msrs
kvm_run
libafl_backdoor_hook
libafl_block_hook
libafl_breakpoint
libafl_cmp_hook
libafl_cpu_run_hook
libafl_custom_gdb_cmd
libafl_custom_insn_kind
libafl_edge_hook
libafl_exit_reason
libafl_exit_reason_breakpoint
libafl_exit_reason_crash
libafl_exit_reason_custom_insn
libafl_exit_reason_internal
libafl_exit_reason_kind
libafl_exit_reason_timeout
libafl_instruction_hook
libafl_mapinfo
libafl_new_thread_hook
libafl_post_syscall_hook
libafl_pre_syscall_hook
libafl_qemu_sig_ctx
libafl_rw_hook
libafl_syshook_ret
libafl_syshook_ret_tag
qemu_plugin_hwaddr
struct qemu_plugin_hwaddr - opaque hw address handle
qemu_plugin_mem_rw
qemu_work_item
rcu_head
siginfo_t__bindgen_ty_1__bindgen_ty_1
siginfo_t__bindgen_ty_1__bindgen_ty_2
siginfo_t__bindgen_ty_1__bindgen_ty_3
siginfo_t__bindgen_ty_1__bindgen_ty_4
siginfo_t__bindgen_ty_1__bindgen_ty_5
siginfo_t__bindgen_ty_1__bindgen_ty_6
siginfo_t__bindgen_ty_1__bindgen_ty_7
siginfo_t__bindgen_ty_1__bindgen_ty_5__bindgen_ty_1__bindgen_ty_1
symbol_cache_entry
tb_tc

Enums§

MmapPerms
VerifyAccess

Constants§

CacheType_DATA_CACHE
CacheType_INSTRUCTION_CACHE
CacheType_UNIFIED_CACHE
CpuTopologyLevel_CPU_TOPOLOGY_LEVEL_BOOK
CpuTopologyLevel_CPU_TOPOLOGY_LEVEL_CLUSTER
CpuTopologyLevel_CPU_TOPOLOGY_LEVEL_CORE
CpuTopologyLevel_CPU_TOPOLOGY_LEVEL_DEFAULT
CpuTopologyLevel_CPU_TOPOLOGY_LEVEL_DIE
CpuTopologyLevel_CPU_TOPOLOGY_LEVEL_DRAWER
CpuTopologyLevel_CPU_TOPOLOGY_LEVEL_MODULE
CpuTopologyLevel_CPU_TOPOLOGY_LEVEL_SOCKET
CpuTopologyLevel_CPU_TOPOLOGY_LEVEL_THREAD
CpuTopologyLevel_CPU_TOPOLOGY_LEVEL__MAX
Float2NaNPropRule_float_2nan_prop_ab
Float2NaNPropRule_float_2nan_prop_ba
Float2NaNPropRule_float_2nan_prop_none
Float2NaNPropRule_float_2nan_prop_s_ab
Float2NaNPropRule_float_2nan_prop_s_ba
Float2NaNPropRule_float_2nan_prop_x87
Float3NaNPropRule_float_3nan_prop_abc
Float3NaNPropRule_float_3nan_prop_acb
Float3NaNPropRule_float_3nan_prop_bac
Float3NaNPropRule_float_3nan_prop_bca
Float3NaNPropRule_float_3nan_prop_cab
Float3NaNPropRule_float_3nan_prop_cba
Float3NaNPropRule_float_3nan_prop_none
Float3NaNPropRule_float_3nan_prop_s_abc
Float3NaNPropRule_float_3nan_prop_s_acb
Float3NaNPropRule_float_3nan_prop_s_bac
Float3NaNPropRule_float_3nan_prop_s_bca
Float3NaNPropRule_float_3nan_prop_s_cab
Float3NaNPropRule_float_3nan_prop_s_cba
FloatFTZDetection_float_ftz_after_rounding
FloatFTZDetection_float_ftz_before_rounding
FloatInfZeroNaNRule_float_infzeronan_dnan_always
FloatInfZeroNaNRule_float_infzeronan_dnan_if_qnan
FloatInfZeroNaNRule_float_infzeronan_dnan_never
FloatInfZeroNaNRule_float_infzeronan_none
FloatInfZeroNaNRule_float_infzeronan_suppress_invalid
FloatRoundMode_float_round_down
FloatRoundMode_float_round_nearest_even
FloatRoundMode_float_round_nearest_even_max
FloatRoundMode_float_round_ties_away
FloatRoundMode_float_round_to_odd
FloatRoundMode_float_round_to_odd_inf
FloatRoundMode_float_round_to_zero
FloatRoundMode_float_round_up
FloatX80Behaviour_floatx80_default_inf_int_bit_is_zero
FloatX80Behaviour_floatx80_pseudo_denormal_valid
FloatX80Behaviour_floatx80_pseudo_inf_valid
FloatX80Behaviour_floatx80_pseudo_nan_valid
FloatX80Behaviour_floatx80_unnormal_valid
FloatX80RoundPrec_floatx80_precision_d
FloatX80RoundPrec_floatx80_precision_s
FloatX80RoundPrec_floatx80_precision_x
MemOp_MO_8
MemOp_MO_16
MemOp_MO_32
MemOp_MO_64
MemOp_MO_128
MemOp_MO_256
MemOp_MO_512
MemOp_MO_1024
MemOp_MO_ALIGN
MemOp_MO_ALIGN_2
MemOp_MO_ALIGN_4
MemOp_MO_ALIGN_8
MemOp_MO_ALIGN_16
MemOp_MO_ALIGN_32
MemOp_MO_ALIGN_64
MemOp_MO_AMASK
MemOp_MO_ASHIFT
MemOp_MO_ATOM_IFALIGN
MemOp_MO_ATOM_IFALIGN_PAIR
MemOp_MO_ATOM_MASK
MemOp_MO_ATOM_NONE
MemOp_MO_ATOM_SHIFT
MemOp_MO_ATOM_SUBALIGN
MemOp_MO_ATOM_WITHIN16
MemOp_MO_ATOM_WITHIN16_PAIR
MemOp_MO_BE
MemOp_MO_BESL
MemOp_MO_BESQ
MemOp_MO_BESW
MemOp_MO_BEUL
MemOp_MO_BEUQ
MemOp_MO_BEUW
MemOp_MO_BSWAP
MemOp_MO_LE
MemOp_MO_LESL
MemOp_MO_LESQ
MemOp_MO_LESW
MemOp_MO_LEUL
MemOp_MO_LEUQ
MemOp_MO_LEUW
MemOp_MO_SB
MemOp_MO_SIGN
MemOp_MO_SIZE
MemOp_MO_SL
MemOp_MO_SO
MemOp_MO_SQ
MemOp_MO_SSIZE
MemOp_MO_SW
MemOp_MO_TE
MemOp_MO_TESL
MemOp_MO_TESQ
MemOp_MO_TESW
MemOp_MO_TEUL
MemOp_MO_TEUO
MemOp_MO_TEUQ
MemOp_MO_TEUW
MemOp_MO_UB
MemOp_MO_UL
MemOp_MO_UNALN
MemOp_MO_UO
MemOp_MO_UQ
MemOp_MO_UW
OnOffAuto_ON_OFF_AUTO_AUTO
OnOffAuto_ON_OFF_AUTO_OFF
OnOffAuto_ON_OFF_AUTO_ON
OnOffAuto_ON_OFF_AUTO__MAX
S390CpuEntitlement_S390_CPU_ENTITLEMENT_AUTO
S390CpuEntitlement_S390_CPU_ENTITLEMENT_HIGH
S390CpuEntitlement_S390_CPU_ENTITLEMENT_LOW
S390CpuEntitlement_S390_CPU_ENTITLEMENT_MEDIUM
S390CpuEntitlement_S390_CPU_ENTITLEMENT__MAX
S390CpuState_S390_CPU_STATE_CHECK_STOP
S390CpuState_S390_CPU_STATE_LOAD
S390CpuState_S390_CPU_STATE_OPERATING
S390CpuState_S390_CPU_STATE_STOPPED
S390CpuState_S390_CPU_STATE_UNINITIALIZED
S390CpuState_S390_CPU_STATE__MAX
ShutdownCause_SHUTDOWN_CAUSE_GUEST_PANIC
ShutdownCause_SHUTDOWN_CAUSE_GUEST_RESET
ShutdownCause_SHUTDOWN_CAUSE_GUEST_SHUTDOWN
ShutdownCause_SHUTDOWN_CAUSE_HOST_ERROR
ShutdownCause_SHUTDOWN_CAUSE_HOST_QMP_QUIT
ShutdownCause_SHUTDOWN_CAUSE_HOST_QMP_SYSTEM_RESET
ShutdownCause_SHUTDOWN_CAUSE_HOST_SIGNAL
ShutdownCause_SHUTDOWN_CAUSE_HOST_UI
ShutdownCause_SHUTDOWN_CAUSE_NONE
ShutdownCause_SHUTDOWN_CAUSE_SNAPSHOT_LOAD
ShutdownCause_SHUTDOWN_CAUSE_SUBSYSTEM_RESET
ShutdownCause_SHUTDOWN_CAUSE__MAX
SysEmuTarget_SYS_EMU_TARGET_AARCH64
SysEmuTarget_SYS_EMU_TARGET_ALPHA
SysEmuTarget_SYS_EMU_TARGET_ARM
SysEmuTarget_SYS_EMU_TARGET_AVR
SysEmuTarget_SYS_EMU_TARGET_HPPA
SysEmuTarget_SYS_EMU_TARGET_I386
SysEmuTarget_SYS_EMU_TARGET_LOONGARCH64
SysEmuTarget_SYS_EMU_TARGET_M68K
SysEmuTarget_SYS_EMU_TARGET_MICROBLAZE
SysEmuTarget_SYS_EMU_TARGET_MICROBLAZEEL
SysEmuTarget_SYS_EMU_TARGET_MIPS
SysEmuTarget_SYS_EMU_TARGET_MIPS64
SysEmuTarget_SYS_EMU_TARGET_MIPS64EL
SysEmuTarget_SYS_EMU_TARGET_MIPSEL
SysEmuTarget_SYS_EMU_TARGET_OR1K
SysEmuTarget_SYS_EMU_TARGET_PPC
SysEmuTarget_SYS_EMU_TARGET_PPC64
SysEmuTarget_SYS_EMU_TARGET_RISCV32
SysEmuTarget_SYS_EMU_TARGET_RISCV64
SysEmuTarget_SYS_EMU_TARGET_RX
SysEmuTarget_SYS_EMU_TARGET_S390X
SysEmuTarget_SYS_EMU_TARGET_SH4
SysEmuTarget_SYS_EMU_TARGET_SH4EB
SysEmuTarget_SYS_EMU_TARGET_SPARC
SysEmuTarget_SYS_EMU_TARGET_SPARC64
SysEmuTarget_SYS_EMU_TARGET_TRICORE
SysEmuTarget_SYS_EMU_TARGET_X86_64
SysEmuTarget_SYS_EMU_TARGET_XTENSA
SysEmuTarget_SYS_EMU_TARGET_XTENSAEB
SysEmuTarget_SYS_EMU_TARGET__MAX
TCGCallArgumentKind_TCG_CALL_ARG_BY_REF
TCGCallArgumentKind_TCG_CALL_ARG_BY_REF_N
TCGCallArgumentKind_TCG_CALL_ARG_EVEN
TCGCallArgumentKind_TCG_CALL_ARG_EXTEND
TCGCallArgumentKind_TCG_CALL_ARG_EXTEND_S
TCGCallArgumentKind_TCG_CALL_ARG_EXTEND_U
TCGCallArgumentKind_TCG_CALL_ARG_NORMAL
TCGCallReturnKind_TCG_CALL_RET_BY_REF
TCGCallReturnKind_TCG_CALL_RET_BY_VEC
TCGCallReturnKind_TCG_CALL_RET_NORMAL
TCGReg_TCG_AREG0
TCGReg_TCG_REG_CALL_STACK
TCGReg_TCG_REG_EAX
TCGReg_TCG_REG_EBP
TCGReg_TCG_REG_EBX
TCGReg_TCG_REG_ECX
TCGReg_TCG_REG_EDI
TCGReg_TCG_REG_EDX
TCGReg_TCG_REG_ESI
TCGReg_TCG_REG_ESP
TCGReg_TCG_REG_R8
TCGReg_TCG_REG_R9
TCGReg_TCG_REG_R10
TCGReg_TCG_REG_R11
TCGReg_TCG_REG_R12
TCGReg_TCG_REG_R13
TCGReg_TCG_REG_R14
TCGReg_TCG_REG_R15
TCGReg_TCG_REG_RAX
TCGReg_TCG_REG_RBP
TCGReg_TCG_REG_RBX
TCGReg_TCG_REG_RCX
TCGReg_TCG_REG_RDI
TCGReg_TCG_REG_RDX
TCGReg_TCG_REG_RSI
TCGReg_TCG_REG_RSP
TCGReg_TCG_REG_XMM0
TCGReg_TCG_REG_XMM1
TCGReg_TCG_REG_XMM2
TCGReg_TCG_REG_XMM3
TCGReg_TCG_REG_XMM4
TCGReg_TCG_REG_XMM5
TCGReg_TCG_REG_XMM6
TCGReg_TCG_REG_XMM7
TCGReg_TCG_REG_XMM8
TCGReg_TCG_REG_XMM9
TCGReg_TCG_REG_XMM10
TCGReg_TCG_REG_XMM11
TCGReg_TCG_REG_XMM12
TCGReg_TCG_REG_XMM13
TCGReg_TCG_REG_XMM14
TCGReg_TCG_REG_XMM15
TCGTempKind_TEMP_CONST
TCGTempKind_TEMP_EBB
TCGTempKind_TEMP_FIXED
TCGTempKind_TEMP_GLOBAL
TCGTempKind_TEMP_TB
TCGTempVal_TEMP_VAL_CONST
TCGTempVal_TEMP_VAL_DEAD
TCGTempVal_TEMP_VAL_MEM
TCGTempVal_TEMP_VAL_REG
TCGType_TCG_TYPE_I32
TCGType_TCG_TYPE_I64
TCGType_TCG_TYPE_I128
TCGType_TCG_TYPE_PTR
TCGType_TCG_TYPE_REG
TCGType_TCG_TYPE_V64
TCGType_TCG_TYPE_V128
TCGType_TCG_TYPE_V256
TPRAccess_TPR_ACCESS_READ
TPRAccess_TPR_ACCESS_WRITE
bfd_architecture_bfd_arch_a29k
bfd_architecture_bfd_arch_alliant
bfd_architecture_bfd_arch_alpha
bfd_architecture_bfd_arch_arc
bfd_architecture_bfd_arch_arm
bfd_architecture_bfd_arch_avr
bfd_architecture_bfd_arch_convex
bfd_architecture_bfd_arch_d10v
bfd_architecture_bfd_arch_h8300
bfd_architecture_bfd_arch_h8500
bfd_architecture_bfd_arch_hppa
bfd_architecture_bfd_arch_i386
bfd_architecture_bfd_arch_i860
bfd_architecture_bfd_arch_i960
bfd_architecture_bfd_arch_ia64
bfd_architecture_bfd_arch_last
bfd_architecture_bfd_arch_loongarch
bfd_architecture_bfd_arch_m32r
bfd_architecture_bfd_arch_m68k
bfd_architecture_bfd_arch_m88k
bfd_architecture_bfd_arch_microblaze
bfd_architecture_bfd_arch_mips
bfd_architecture_bfd_arch_mn10200
bfd_architecture_bfd_arch_mn10300
bfd_architecture_bfd_arch_moxie
bfd_architecture_bfd_arch_ns32k
bfd_architecture_bfd_arch_obscure
bfd_architecture_bfd_arch_powerpc
bfd_architecture_bfd_arch_pyramid
bfd_architecture_bfd_arch_romp
bfd_architecture_bfd_arch_rs6000
bfd_architecture_bfd_arch_rx
bfd_architecture_bfd_arch_sh
bfd_architecture_bfd_arch_sparc
bfd_architecture_bfd_arch_tahoe
bfd_architecture_bfd_arch_tic30
bfd_architecture_bfd_arch_unknown
bfd_architecture_bfd_arch_v850
bfd_architecture_bfd_arch_vax
bfd_architecture_bfd_arch_w65
bfd_architecture_bfd_arch_we32k
bfd_architecture_bfd_arch_z8k
bfd_endian_BFD_ENDIAN_BIG
bfd_endian_BFD_ENDIAN_LITTLE
bfd_endian_BFD_ENDIAN_UNKNOWN
bfd_flavour_bfd_target_aout_flavour
bfd_flavour_bfd_target_coff_flavour
bfd_flavour_bfd_target_ecoff_flavour
bfd_flavour_bfd_target_elf_flavour
bfd_flavour_bfd_target_evax_flavour
bfd_flavour_bfd_target_ieee_flavour
bfd_flavour_bfd_target_ihex_flavour
bfd_flavour_bfd_target_msdos_flavour
bfd_flavour_bfd_target_nlm_flavour
bfd_flavour_bfd_target_oasys_flavour
bfd_flavour_bfd_target_os9k_flavour
bfd_flavour_bfd_target_som_flavour
bfd_flavour_bfd_target_srec_flavour
bfd_flavour_bfd_target_tekhex_flavour
bfd_flavour_bfd_target_unknown_flavour
bfd_flavour_bfd_target_versados_flavour
dis_insn_type_dis_branch
dis_insn_type_dis_condbranch
dis_insn_type_dis_condjsr
dis_insn_type_dis_dref
dis_insn_type_dis_dref2
dis_insn_type_dis_jsr
dis_insn_type_dis_nonbranch
dis_insn_type_dis_noninsn
libafl_custom_insn_kind_LIBAFL_CUSTOM_INSN_LIBAFL
libafl_custom_insn_kind_LIBAFL_CUSTOM_INSN_NYX
libafl_custom_insn_kind_LIBAFL_CUSTOM_INSN_UNDEFINED
libafl_exit_reason_kind_BREAKPOINT
libafl_exit_reason_kind_CRASH
libafl_exit_reason_kind_CUSTOM_INSN
libafl_exit_reason_kind_INTERNAL
libafl_exit_reason_kind_TIMEOUT
libafl_syshook_ret_tag_LIBAFL_SYSHOOK_RUN
libafl_syshook_ret_tag_LIBAFL_SYSHOOK_SKIP
qemu_plugin_mem_rw_QEMU_PLUGIN_MEM_R
qemu_plugin_mem_rw_QEMU_PLUGIN_MEM_RW
qemu_plugin_mem_rw_QEMU_PLUGIN_MEM_W

Statics§

exec_path
guest_base
libafl_force_dfl
mmap_next_start

Functions§

cpu_env
Safety
cpu_memory_rw_debug
cpu_reset
cpu_reset: @cpu: The CPU whose state is to be reset.
free_self_maps
free_self_maps: @info: an interval tree
libafl_add_backdoor_hook
libafl_add_block_hook
libafl_add_cmp_hook
libafl_add_edge_hook
libafl_add_new_thread_hook
libafl_add_post_syscall_hook
libafl_add_pre_syscall_hook
libafl_add_read_hook
libafl_add_write_hook
libafl_breakpoint_invalidate
libafl_exit_asap
libafl_exit_request_breakpoint
libafl_exit_request_crash
libafl_exit_request_custom_insn
libafl_exit_request_internal
libafl_exit_request_timeout
libafl_exit_signal_vm_start
libafl_flush_jit
libafl_gen_cmp
libafl_gen_edge
libafl_gen_read
libafl_gen_write
libafl_get_brk
libafl_get_exit_reason
libafl_get_image_info
libafl_get_initial_brk
libafl_get_return_on_crash
libafl_hook_cpu_run_add
libafl_hook_cpu_run_post_exec
libafl_hook_cpu_run_pre_exec
libafl_hook_cpu_run_remove
libafl_hook_new_thread_run
libafl_hook_syscall_post_run
libafl_hook_syscall_pre_run
libafl_jit_trace_block_hitcount
libafl_jit_trace_block_single
libafl_jit_trace_edge_hitcount
libafl_jit_trace_edge_single
libafl_last_exit_cpu
libafl_load_addr
libafl_maps_first
libafl_maps_next
libafl_page_from_addr
libafl_qemu_add_gdb_cmd
libafl_qemu_add_instruction_hooks
libafl_qemu_block_hook_set_jit
libafl_qemu_breakpoint_run
libafl_qemu_cpu_index
libafl_qemu_current_cpu
libafl_qemu_edge_hook_set_jit
libafl_qemu_gdb_exec
libafl_qemu_gdb_reply
libafl_qemu_get_cpu
libafl_qemu_handle_crash
libafl_qemu_hook_backdoor_run
libafl_qemu_hook_block_post_run
libafl_qemu_hook_block_pre_run
libafl_qemu_hook_edge_gen
libafl_qemu_hook_edge_run
libafl_qemu_hook_instruction_run
libafl_qemu_host_page_size
libafl_qemu_init
libafl_qemu_main
libafl_qemu_native_signal_handler
libafl_qemu_num_cpus
libafl_qemu_num_regs
libafl_qemu_read_reg
libafl_qemu_remove_backdoor_hook
libafl_qemu_remove_block_hook
libafl_qemu_remove_breakpoint
libafl_qemu_remove_cmp_hook
libafl_qemu_remove_cpu_run_hook
libafl_qemu_remove_edge_hook
libafl_qemu_remove_instruction_hook
libafl_qemu_remove_instruction_hooks_at
libafl_qemu_remove_new_thread_hook
libafl_qemu_remove_post_syscall_hook
libafl_qemu_remove_pre_syscall_hook
libafl_qemu_remove_read_hook
libafl_qemu_remove_write_hook
libafl_qemu_run
libafl_qemu_set_breakpoint
libafl_qemu_signal_context
libafl_qemu_trigger_breakpoint
libafl_qemu_write_reg
libafl_search_instruction_hook
libafl_set_brk
libafl_set_in_host_signal_ctx
libafl_set_in_target_signal_ctx
libafl_set_qemu_env
libafl_set_return_on_crash
libafl_sync_exit_cpu
libafl_tcg_gen_asan
libafl_unset_in_signal_ctx
make_plugin_meminfo
memop_big_endian
memop_size
page_check_range
page_check_range @start: first byte of range @len: length of range @flags: flags required for each page
pageflags_get_root
— Begin LibAFL code —
qemu_plugin_get_hwaddr
qemu_plugin_get_hwaddr() - return handle for memory operation @info: opaque memory info structure @vaddr: the virtual address of the memory operation
qemu_plugin_hwaddr_phys_addr
qemu_plugin_hwaddr_phys_addr() - query physical address for memory operation @haddr: address handle from qemu_plugin_get_hwaddr()
read_self_maps
read_self_maps:
target_mmap
target_mprotect
target_munmap
tlb_plugin_lookup
tlb_plugin_lookup: query last TLB lookup @cpu: cpu environment

Type Aliases§

CPUArchStatePtr
CPUStatePtr
CPUX86State
DeviceRealize
DeviceReset
DeviceSyncConfig
DeviceUnrealize
ExitReasonPtr
FILE
FeatureWordArray
GArray
GByteArray
GHashTable
GSList
GuestAddr
GuestHwAddrInfo
GuestIsize
GuestPhysAddr
GuestUsize
GuestVirtAddr
IntervalTreeRoot
MemOpIdx
ObjectFree
typedef ObjectFree: @obj: the object being freed
ObjectPropertyAccessor
typedef ObjectPropertyAccessor: @obj: the object that owns the property @v: the visitor that contains the property data @name: the name of the property @opaque: the object property opaque @errp: a pointer to an Error that is filled if getting/setting fails.
ObjectPropertyInit
typedef ObjectPropertyInit: @obj: the object that owns the property @prop: the property to set
ObjectPropertyRelease
typedef ObjectPropertyRelease: @obj: the object that owns the property @name: the name of the property @opaque: the opaque registered with the property
ObjectPropertyResolve
typedef ObjectPropertyResolve: @obj: the object that owns the property @opaque: the opaque registered with the property @part: the name of the property
ObjectUnparent
typedef ObjectUnparent: @obj: the object that is being removed from the composition tree
PTR
RCUCBFunc
TCGv
TCGv_i64
Type
X86CPU
X86CPU: @env: #CPUX86State @migratable: If set, only migratable flags will be accepted when “enforce” mode is used, and only migratable flags will be included in the “host” CPU model.
_IO_lock_t
__clock_t
__jmp_buf
__off64_t
__off_t
__pid_t
__pthread_list_t
__sigval_t
__uid_t
__uint32_t
abi_long
abi_ulong
asymbol
bfd_byte
bfd_vma
float16
float32
float64
fprintf_function
gchar
gpointer
guint
guint8
hwaddr
libafl_backdoor_exec_cb
libafl_block_exec_cb
libafl_block_jit_cb
libafl_block_post_gen_cb
libafl_block_pre_gen_cb
libafl_cmp_exec1_cb
libafl_cmp_exec2_cb
libafl_cmp_exec4_cb
libafl_cmp_exec8_cb
libafl_cmp_gen_cb
libafl_cpu_run_fn
libafl_edge_exec_cb
libafl_edge_gen_cb
libafl_edge_jit_cb
libafl_instruction_cb
libafl_post_syscall_cb
libafl_pre_syscall_cb
libafl_rw_execN_cb
libafl_rw_exec_cb
libafl_rw_gen_cb
off_t
pthread_t
qemu_irq
qemu_plugin_meminfo_t
typedef qemu_plugin_meminfo_t - opaque memory transaction handle
sigjmp_buf
target_long
target_ulong
vaddr
vaddr: Type wide enough to contain any #target_ulong virtual address. We do not support 64-bit guest on 32-host and detect at configure time. Therefore, a host pointer width will always fit a guest pointer.

Unions§

BusChildHead
BusChild__bindgen_ty_1
CPUArchState__bindgen_ty_3
CPUBreakpoint__bindgen_ty_1
CPUState__bindgen_ty_2
CPUState__bindgen_ty_3
CPUState__bindgen_ty_4
CPUTLBEntry
CPUTLBEntryFull__bindgen_ty_1
CPUWatchpoint__bindgen_ty_1
CpuInfoFast__bindgen_ty_1
FPReg
IcountDecr
MMXReg
Property__bindgen_ty_1
XMMReg
YMMReg
ZMMReg
__atomic_wide_counter
libafl_exit_reason__bindgen_ty_1
libafl_syshook_ret__bindgen_ty_1
pthread_cond_t
pthread_mutex_t
siginfo_t__bindgen_ty_1
siginfo_t__bindgen_ty_1__bindgen_ty_5__bindgen_ty_1
sigval
symbol_cache_entry__bindgen_ty_1