Use the autogenerated fuzzer test cases as the basis for a set of am53c974
regression tests.
Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
---
MAINTAINERS | 1 +
tests/qtest/am53c974-test.c | 216 ++++++++++++++++++++++++++++++++++++
tests/qtest/meson.build | 1 +
3 files changed, 218 insertions(+)
create mode 100644 tests/qtest/am53c974-test.c
diff --git a/MAINTAINERS b/MAINTAINERS
index 554be84b32..675f35d3af 100644
--- a/MAINTAINERS
+++ b/MAINTAINERS
@@ -1776,6 +1776,7 @@ F: include/hw/scsi/*
F: hw/scsi/*
F: tests/qtest/virtio-scsi-test.c
F: tests/qtest/fuzz-virtio-scsi-test.c
+F: tests/qtest/am53c974-test.c
T: git https://github.com/bonzini/qemu.git scsi-next
SSI
diff --git a/tests/qtest/am53c974-test.c b/tests/qtest/am53c974-test.c
new file mode 100644
index 0000000000..9c4285d0c0
--- /dev/null
+++ b/tests/qtest/am53c974-test.c
@@ -0,0 +1,216 @@
+/*
+ * QTest testcase for am53c974
+ *
+ * This work is licensed under the terms of the GNU GPL, version 2 or
+ * later. See the COPYING file in the top-level directory.
+ */
+
+#include "qemu/osdep.h"
+
+#include "libqos/libqtest.h"
+
+
+static void test_cmdfifo_underflow_ok(void)
+{
+ QTestState *s = qtest_init(
+ "-device am53c974,id=scsi "
+ "-device scsi-hd,drive=disk0 -drive "
+ "id=disk0,if=none,file=null-co://,format=raw -nodefaults");
+ qtest_outl(s, 0xcf8, 0x80001004);
+ qtest_outw(s, 0xcfc, 0x01);
+ qtest_outl(s, 0xcf8, 0x8000100e);
+ qtest_outl(s, 0xcfc, 0x8a000000);
+ qtest_outl(s, 0x8a09, 0x42000000);
+ qtest_outl(s, 0x8a0d, 0x00);
+ qtest_outl(s, 0x8a0b, 0x1000);
+ qtest_quit(s);
+}
+
+/* Reported as crash_1548bd10e7 */
+static void test_cmdfifo_underflow2_ok(void)
+{
+ QTestState *s = qtest_init(
+ "-m 512M -device am53c974,id=scsi -device scsi-hd,drive=disk0 "
+ "-drive id=disk0,if=none,file=null-co://,format=raw -nodefaults");
+ qtest_outl(s, 0xcf8, 0x80001010);
+ qtest_outl(s, 0xcfc, 0xc000);
+ qtest_outl(s, 0xcf8, 0x80001004);
+ qtest_outw(s, 0xcfc, 0x01);
+ qtest_outw(s, 0xc00c, 0x41);
+ qtest_outw(s, 0xc00a, 0x00);
+ qtest_outl(s, 0xc00a, 0x00);
+ qtest_outw(s, 0xc00c, 0x43);
+ qtest_outw(s, 0xc00b, 0x00);
+ qtest_outw(s, 0xc00b, 0x00);
+ qtest_outw(s, 0xc00c, 0x00);
+ qtest_outl(s, 0xc00a, 0x00);
+ qtest_outw(s, 0xc00a, 0x00);
+ qtest_outl(s, 0xc00a, 0x00);
+ qtest_outw(s, 0xc00c, 0x00);
+ qtest_outl(s, 0xc00a, 0x00);
+ qtest_outw(s, 0xc00a, 0x00);
+ qtest_outl(s, 0xc00a, 0x00);
+ qtest_outw(s, 0xc00c, 0x00);
+ qtest_outl(s, 0xc00a, 0x00);
+ qtest_outw(s, 0xc00a, 0x00);
+ qtest_outl(s, 0xc00a, 0x00);
+ qtest_outw(s, 0xc00c, 0x00);
+ qtest_outl(s, 0xc00a, 0x00);
+ qtest_outl(s, 0xc006, 0x00);
+ qtest_outl(s, 0xc00b, 0x00);
+ qtest_outw(s, 0xc00b, 0x0800);
+ qtest_outw(s, 0xc00b, 0x00);
+ qtest_outw(s, 0xc00b, 0x00);
+ qtest_outl(s, 0xc006, 0x00);
+ qtest_outl(s, 0xc00b, 0x00);
+ qtest_outw(s, 0xc00b, 0x0800);
+ qtest_outw(s, 0xc00b, 0x00);
+ qtest_outw(s, 0xc00b, 0x4100);
+ qtest_outw(s, 0xc00a, 0x00);
+ qtest_outl(s, 0xc00a, 0x100000);
+ qtest_outl(s, 0xc00a, 0x00);
+ qtest_outw(s, 0xc00c, 0x43);
+ qtest_outl(s, 0xc00a, 0x100000);
+ qtest_outl(s, 0xc00a, 0x100000);
+ qtest_quit(s);
+}
+
+static void test_cmdfifo_overflow_ok(void)
+{
+ QTestState *s = qtest_init(
+ "-device am53c974,id=scsi "
+ "-device scsi-hd,drive=disk0 -drive "
+ "id=disk0,if=none,file=null-co://,format=raw -nodefaults");
+ qtest_outl(s, 0xcf8, 0x80001004);
+ qtest_outw(s, 0xcfc, 0x01);
+ qtest_outl(s, 0xcf8, 0x8000100e);
+ qtest_outl(s, 0xcfc, 0x0e000000);
+ qtest_outl(s, 0xe40, 0x03);
+ qtest_outl(s, 0xe0b, 0x4100);
+ qtest_outl(s, 0xe0b, 0x9000);
+ qtest_quit(s);
+}
+
+/* Reported as crash_530ff2e211 */
+static void test_cmdfifo_overflow2_ok(void)
+{
+ QTestState *s = qtest_init(
+ "-m 512M -device am53c974,id=scsi -device scsi-hd,drive=disk0 "
+ "-drive id=disk0,if=none,file=null-co://,format=raw -nodefaults");
+ qtest_outl(s, 0xcf8, 0x80001010);
+ qtest_outl(s, 0xcfc, 0xc000);
+ qtest_outl(s, 0xcf8, 0x80001004);
+ qtest_outw(s, 0xcfc, 0x01);
+ qtest_outl(s, 0xc00b, 0x4100);
+ qtest_outw(s, 0xc00b, 0xc200);
+ qtest_outl(s, 0xc03f, 0x0300);
+ qtest_quit(s);
+}
+
+/* Reported as crash_0900379669 */
+static void test_fifo_pop_buf(void)
+{
+ QTestState *s = qtest_init(
+ "-m 512M -device am53c974,id=scsi -device scsi-hd,drive=disk0 "
+ "-drive id=disk0,if=none,file=null-co://,format=raw -nodefaults");
+ qtest_outl(s, 0xcf8, 0x80001010);
+ qtest_outl(s, 0xcfc, 0xc000);
+ qtest_outl(s, 0xcf8, 0x80001004);
+ qtest_outw(s, 0xcfc, 0x01);
+ qtest_outb(s, 0xc000, 0x4);
+ qtest_outb(s, 0xc008, 0xa0);
+ qtest_outl(s, 0xc03f, 0x0300);
+ qtest_outl(s, 0xc00b, 0xc300);
+ qtest_outw(s, 0xc00b, 0x9000);
+ qtest_outl(s, 0xc00b, 0xc300);
+ qtest_outl(s, 0xc00b, 0xc300);
+ qtest_outl(s, 0xc00b, 0xc300);
+ qtest_outw(s, 0xc00b, 0x9000);
+ qtest_outw(s, 0xc00b, 0x1000);
+ qtest_quit(s);
+}
+
+static void test_target_selected_ok(void)
+{
+ QTestState *s = qtest_init(
+ "-device am53c974,id=scsi "
+ "-device scsi-hd,drive=disk0 -drive "
+ "id=disk0,if=none,file=null-co://,format=raw -nodefaults");
+ qtest_outl(s, 0xcf8, 0x80001001);
+ qtest_outl(s, 0xcfc, 0x01000000);
+ qtest_outl(s, 0xcf8, 0x8000100e);
+ qtest_outl(s, 0xcfc, 0xef800000);
+ qtest_outl(s, 0xef8b, 0x4100);
+ qtest_outw(s, 0xef80, 0x01);
+ qtest_outl(s, 0xefc0, 0x03);
+ qtest_outl(s, 0xef8b, 0xc100);
+ qtest_outl(s, 0xef8b, 0x9000);
+ qtest_quit(s);
+}
+
+static void test_fifo_underflow_on_write_ok(void)
+{
+ QTestState *s = qtest_init(
+ "-device am53c974,id=scsi "
+ "-device scsi-hd,drive=disk0 -drive "
+ "id=disk0,if=none,file=null-co://,format=raw -nodefaults");
+ qtest_outl(s, 0xcf8, 0x80001010);
+ qtest_outl(s, 0xcfc, 0xc000);
+ qtest_outl(s, 0xcf8, 0x80001004);
+ qtest_outw(s, 0xcfc, 0x01);
+ qtest_outl(s, 0xc008, 0x0a);
+ qtest_outl(s, 0xc009, 0x41000000);
+ qtest_outl(s, 0xc009, 0x41000000);
+ qtest_outl(s, 0xc00b, 0x1000);
+ qtest_quit(s);
+}
+
+static void test_cancelled_request_ok(void)
+{
+ QTestState *s = qtest_init(
+ "-device am53c974,id=scsi "
+ "-device scsi-hd,drive=disk0 -drive "
+ "id=disk0,if=none,file=null-co://,format=raw -nodefaults");
+ qtest_outl(s, 0xcf8, 0x80001010);
+ qtest_outl(s, 0xcfc, 0xc000);
+ qtest_outl(s, 0xcf8, 0x80001004);
+ qtest_outw(s, 0xcfc, 0x05);
+ qtest_outb(s, 0xc046, 0x02);
+ qtest_outl(s, 0xc00b, 0xc100);
+ qtest_outl(s, 0xc040, 0x03);
+ qtest_outl(s, 0xc040, 0x03);
+ qtest_bufwrite(s, 0x0, "\x41", 0x1);
+ qtest_outl(s, 0xc00b, 0xc100);
+ qtest_outw(s, 0xc040, 0x02);
+ qtest_outw(s, 0xc040, 0x81);
+ qtest_outl(s, 0xc00b, 0x9000);
+ qtest_quit(s);
+}
+
+int main(int argc, char **argv)
+{
+ const char *arch = qtest_get_arch();
+
+ g_test_init(&argc, &argv, NULL);
+
+ if (strcmp(arch, "i386") == 0) {
+ qtest_add_func("am53c974/test_cmdfifo_underflow_ok",
+ test_cmdfifo_underflow_ok);
+ qtest_add_func("am53c974/test_cmdfifo_underflow2_ok",
+ test_cmdfifo_underflow2_ok);
+ qtest_add_func("am53c974/test_cmdfifo_overflow_ok",
+ test_cmdfifo_overflow_ok);
+ qtest_add_func("am53c974/test_cmdfifo_overflow2_ok",
+ test_cmdfifo_overflow2_ok);
+ qtest_add_func("am53c974/test_fifo_pop_buf",
+ test_fifo_pop_buf);
+ qtest_add_func("am53c974/test_target_selected_ok",
+ test_target_selected_ok);
+ qtest_add_func("am53c974/test_fifo_underflow_on_write_ok",
+ test_fifo_underflow_on_write_ok);
+ qtest_add_func("am53c974/test_cancelled_request_ok",
+ test_cancelled_request_ok);
+ }
+
+ return g_test_run();
+}
diff --git a/tests/qtest/meson.build b/tests/qtest/meson.build
index 902cfef7cb..25f605cf1d 100644
--- a/tests/qtest/meson.build
+++ b/tests/qtest/meson.build
@@ -68,6 +68,7 @@ qtests_i386 = \
(config_all_devices.has_key('CONFIG_TPM_TIS_ISA') ? ['tpm-tis-swtpm-test'] : []) + \
(config_all_devices.has_key('CONFIG_RTL8139_PCI') ? ['rtl8139-test'] : []) + \
(config_all_devices.has_key('CONFIG_E1000E_PCI_EXPRESS') ? ['fuzz-e1000e-test'] : []) + \
+ (config_all_devices.has_key('CONFIG_ESP_PCI') ? ['am53c974-test'] : []) + \
qtests_pci + \
['fdc-test',
'ide-test',
--
2.20.1
On 210401 0849, Mark Cave-Ayland wrote:
> Use the autogenerated fuzzer test cases as the basis for a set of am53c974
> regression tests.
>
> Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
> ---
> MAINTAINERS | 1 +
> tests/qtest/am53c974-test.c | 216 ++++++++++++++++++++++++++++++++++++
> tests/qtest/meson.build | 1 +
> 3 files changed, 218 insertions(+)
> create mode 100644 tests/qtest/am53c974-test.c
>
> diff --git a/MAINTAINERS b/MAINTAINERS
> index 554be84b32..675f35d3af 100644
> --- a/MAINTAINERS
> +++ b/MAINTAINERS
> @@ -1776,6 +1776,7 @@ F: include/hw/scsi/*
> F: hw/scsi/*
> F: tests/qtest/virtio-scsi-test.c
> F: tests/qtest/fuzz-virtio-scsi-test.c
> +F: tests/qtest/am53c974-test.c
> T: git https://github.com/bonzini/qemu.git scsi-next
>
> SSI
> diff --git a/tests/qtest/am53c974-test.c b/tests/qtest/am53c974-test.c
> new file mode 100644
> index 0000000000..9c4285d0c0
> --- /dev/null
> +++ b/tests/qtest/am53c974-test.c
> @@ -0,0 +1,216 @@
> +/*
> + * QTest testcase for am53c974
> + *
> + * This work is licensed under the terms of the GNU GPL, version 2 or
> + * later. See the COPYING file in the top-level directory.
> + */
> +
> +#include "qemu/osdep.h"
> +
> +#include "libqos/libqtest.h"
> +
> +
> +static void test_cmdfifo_underflow_ok(void)
> +{
> + QTestState *s = qtest_init(
> + "-device am53c974,id=scsi "
> + "-device scsi-hd,drive=disk0 -drive "
> + "id=disk0,if=none,file=null-co://,format=raw -nodefaults");
> + qtest_outl(s, 0xcf8, 0x80001004);
> + qtest_outw(s, 0xcfc, 0x01);
> + qtest_outl(s, 0xcf8, 0x8000100e);
> + qtest_outl(s, 0xcfc, 0x8a000000);
> + qtest_outl(s, 0x8a09, 0x42000000);
> + qtest_outl(s, 0x8a0d, 0x00);
> + qtest_outl(s, 0x8a0b, 0x1000);
> + qtest_quit(s);
> +}
> +
Hi Mark,
> +/* Reported as crash_1548bd10e7 */
^^^
These numbers were just the filename/hash of the crashing test-case. I'm
not sure if they are useful to keep them around - I just needed some way
to name a bunch of functions :)
-Alex
On 01/04/2021 17:55, Alexander Bulekov wrote:
> On 210401 0849, Mark Cave-Ayland wrote:
>> Use the autogenerated fuzzer test cases as the basis for a set of am53c974
>> regression tests.
>>
>> Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
>> ---
>> MAINTAINERS | 1 +
>> tests/qtest/am53c974-test.c | 216 ++++++++++++++++++++++++++++++++++++
>> tests/qtest/meson.build | 1 +
>> 3 files changed, 218 insertions(+)
>> create mode 100644 tests/qtest/am53c974-test.c
>>
>> diff --git a/MAINTAINERS b/MAINTAINERS
>> index 554be84b32..675f35d3af 100644
>> --- a/MAINTAINERS
>> +++ b/MAINTAINERS
>> @@ -1776,6 +1776,7 @@ F: include/hw/scsi/*
>> F: hw/scsi/*
>> F: tests/qtest/virtio-scsi-test.c
>> F: tests/qtest/fuzz-virtio-scsi-test.c
>> +F: tests/qtest/am53c974-test.c
>> T: git https://github.com/bonzini/qemu.git scsi-next
>>
>> SSI
>> diff --git a/tests/qtest/am53c974-test.c b/tests/qtest/am53c974-test.c
>> new file mode 100644
>> index 0000000000..9c4285d0c0
>> --- /dev/null
>> +++ b/tests/qtest/am53c974-test.c
>> @@ -0,0 +1,216 @@
>> +/*
>> + * QTest testcase for am53c974
>> + *
>> + * This work is licensed under the terms of the GNU GPL, version 2 or
>> + * later. See the COPYING file in the top-level directory.
>> + */
>> +
>> +#include "qemu/osdep.h"
>> +
>> +#include "libqos/libqtest.h"
>> +
>> +
>> +static void test_cmdfifo_underflow_ok(void)
>> +{
>> + QTestState *s = qtest_init(
>> + "-device am53c974,id=scsi "
>> + "-device scsi-hd,drive=disk0 -drive "
>> + "id=disk0,if=none,file=null-co://,format=raw -nodefaults");
>> + qtest_outl(s, 0xcf8, 0x80001004);
>> + qtest_outw(s, 0xcfc, 0x01);
>> + qtest_outl(s, 0xcf8, 0x8000100e);
>> + qtest_outl(s, 0xcfc, 0x8a000000);
>> + qtest_outl(s, 0x8a09, 0x42000000);
>> + qtest_outl(s, 0x8a0d, 0x00);
>> + qtest_outl(s, 0x8a0b, 0x1000);
>> + qtest_quit(s);
>> +}
>> +
>
> Hi Mark,
>> +/* Reported as crash_1548bd10e7 */
> ^^^
> These numbers were just the filename/hash of the crashing test-case. I'm
> not sure if they are useful to keep them around - I just needed some way
> to name a bunch of functions :)
> -Alex
Hi Alex,
No worries, I figured as much but thought it was worth keeping them in case anyone
was curious enough to want to read the original LP bug report :)
ATB,
Mark.
© 2016 - 2026 Red Hat, Inc.