Re: [PATCH v1 04/10] tools: add kfuzztest-bridge utility

From: SeongJae Park
Date: Wed Sep 17 2025 - 09:26:36 EST


On Tue, 16 Sep 2025 09:01:03 +0000 Ethan Graham <ethan.w.s.graham@xxxxxxxxx> wrote:

> From: Ethan Graham <ethangraham@xxxxxxxxxx>
>
> Introduce the kfuzztest-bridge tool, a userspace utility for sending
> structured inputs to KFuzzTest harnesses via debugfs.
>
> The bridge takes a textual description of the expected input format, a
> file containing random bytes, and the name of the target fuzz test. It
> parses the description, encodes the random data into the binary format
> expected by the kernel, and writes the result to the corresponding
> debugfs entry.
>
> This allows for both simple manual testing and integration with
> userspace fuzzing engines. For example, it can be used for smoke testing
> by providing data from /dev/urandom, or act as a bridge for blob-based
> fuzzers (e.g., AFL) to target KFuzzTest harnesses.

Thank you for doing this great work, Ethan! I think this will be very helpful
for finding bugs of DAMON.

>
> Signed-off-by: Ethan Graham <ethangraham@xxxxxxxxxx>
>
> ---
> v3:
> - Add additional context in header comment of kfuzztest-bridge/parser.c.
> - Add some missing NULL checks.
> - Refactor skip_whitespace() function in input_lexer.c.
> - Use ctx->minalign to compute correct region alignment, which is read
> from /sys/kernel/debug/kfuzztest/_config/minalign.
> ---
> ---
> tools/Makefile | 15 +-
> tools/kfuzztest-bridge/.gitignore | 2 +
> tools/kfuzztest-bridge/Build | 6 +
> tools/kfuzztest-bridge/Makefile | 48 ++++
> tools/kfuzztest-bridge/bridge.c | 103 +++++++
> tools/kfuzztest-bridge/byte_buffer.c | 87 ++++++
> tools/kfuzztest-bridge/byte_buffer.h | 31 ++
> tools/kfuzztest-bridge/encoder.c | 391 +++++++++++++++++++++++++
> tools/kfuzztest-bridge/encoder.h | 16 ++
> tools/kfuzztest-bridge/input_lexer.c | 242 ++++++++++++++++
> tools/kfuzztest-bridge/input_lexer.h | 57 ++++
> tools/kfuzztest-bridge/input_parser.c | 395 ++++++++++++++++++++++++++
> tools/kfuzztest-bridge/input_parser.h | 81 ++++++
> tools/kfuzztest-bridge/rand_stream.c | 77 +++++
> tools/kfuzztest-bridge/rand_stream.h | 57 ++++
> 15 files changed, 1602 insertions(+), 6 deletions(-)
> create mode 100644 tools/kfuzztest-bridge/.gitignore
> create mode 100644 tools/kfuzztest-bridge/Build
> create mode 100644 tools/kfuzztest-bridge/Makefile
> create mode 100644 tools/kfuzztest-bridge/bridge.c
> create mode 100644 tools/kfuzztest-bridge/byte_buffer.c
> create mode 100644 tools/kfuzztest-bridge/byte_buffer.h
> create mode 100644 tools/kfuzztest-bridge/encoder.c
> create mode 100644 tools/kfuzztest-bridge/encoder.h
> create mode 100644 tools/kfuzztest-bridge/input_lexer.c
> create mode 100644 tools/kfuzztest-bridge/input_lexer.h
> create mode 100644 tools/kfuzztest-bridge/input_parser.c
> create mode 100644 tools/kfuzztest-bridge/input_parser.h
> create mode 100644 tools/kfuzztest-bridge/rand_stream.c
> create mode 100644 tools/kfuzztest-bridge/rand_stream.h

I'm wondering if it makes sense to put the files under tools/testing/ like
kselftest and kunit.


Thanks,
SJ

[...]