From: Fam Zheng <famz@redhat.com>
To: Maria Kustova <maxa@catit.be>
Cc: kwolf@redhat.com, qemu-devel@nongnu.org, stefanha@redhat.com,
Maria Kustova <maria.k@catit.be>
Subject: Re: [Qemu-devel] [PATCH 3/3] layout: Add generators for refcount tbles and blocks
Date: Tue, 19 Aug 2014 17:36:30 +0800 [thread overview]
Message-ID: <20140819093630.GC32354@T430.nay.redhat.com> (raw)
In-Reply-To: <c6a1f10550cce1ac6a5672d5752dc09686b2d694.1407757272.git.maria.k@catit.be>
On Mon, 08/11 15:55, Maria Kustova wrote:
> Refcount structures are placed in clusters randomly selected from all not
> allocated host clusters.
s/not allocated/unallocated/
>
> Signed-off-by: Maria Kustova <maria.k@catit.be>
> ---
> tests/image-fuzzer/qcow2/layout.py | 136 ++++++++++++++++++++++++++++++++++++-
> 1 file changed, 135 insertions(+), 1 deletion(-)
>
> diff --git a/tests/image-fuzzer/qcow2/layout.py b/tests/image-fuzzer/qcow2/layout.py
> index 730c771..2239789 100644
> --- a/tests/image-fuzzer/qcow2/layout.py
> +++ b/tests/image-fuzzer/qcow2/layout.py
> @@ -102,6 +102,8 @@ class Image(object):
> self.end_of_extension_area = FieldsList()
> self.l2_tables = FieldsList()
> self.l1_table = FieldsList()
> + self.refcount_table = FieldsList()
> + self.refcount_blocks = FieldsList()
> self.ext_offset = 0
> self.create_header(cluster_bits, backing_file_name)
> self.set_backing_file_name(backing_file_name)
> @@ -113,7 +115,8 @@ class Image(object):
> def __iter__(self):
> return chain(self.header, self.backing_file_format,
> self.feature_name_table, self.end_of_extension_area,
> - self.backing_file_name, self.l1_table, self.l2_tables)
> + self.backing_file_name, self.l1_table, self.l2_tables,
> + self.refcount_table, self.refcount_blocks)
>
> def create_header(self, cluster_bits, backing_file_name=None):
> """Generate a random valid header."""
> @@ -330,6 +333,136 @@ class Image(object):
> float(self.cluster_size**2)))
> self.header['l1_table_offset'][0].value = l1_offset
>
> + def create_refcount_structures(self):
> + """Generate random refcount blocks and refcount table."""
> + def allocate_rfc_blocks(data, size):
> + """Return indices of clusters allocated for recount blocks."""
s/recount/refcount/
> + cluster_ids = set()
> + diff = block_ids = set([x / size for x in data])
> + while len(diff) != 0:
> + # Allocate all yet not allocated clusters
> + new = self._get_available_clusters(data | cluster_ids,
> + len(diff))
> + # Indices of new refcount blocks necessary to cover clusters
> + # in 'new'
> + diff = set([x / size for x in new]) - block_ids
> + cluster_ids |= new
> + block_ids |= diff
> + return cluster_ids, block_ids
> +
> + def allocate_rfc_table(data, init_blocks, block_size):
> + """Return indices of clusters allocated for the refcount table
> + and updated indices of clusters allocated for blocks and indices
> + of blocks.
> + """
> + blocks = set(init_blocks)
> + clusters = set()
> + # Number of entries in one cluster of the refcount table
> + size = self.cluster_size / UINT64_S
> + # Number of clusters necessary for the refcount table based on
> + # the current number of refcount blocks
> + table_size = int(ceil((max(blocks) + 1) / float(size)))
> + # Index of the first cluster of the refcount table
> + table_start = self._get_adjacent_clusters(data, table_size + 1)
> + # Clusters allocated for the current length of the refcount table
> + table_clusters = set(range(table_start, table_start + table_size))
> + # Clusters allocated for the refcount table including
> + # last optional one for potential l1 growth
> + table_clusters_allocated = set(range(table_start, table_start +
> + table_size + 1))
> + # New refcount blocks necessary for clusters occupied by the
> + # refcount table
> + diff = set([c / block_size for c in table_clusters]) - blocks
> + blocks |= diff
> + while len(diff) != 0:
> + # Allocate clusters for new refcount blocks
> + new = self._get_available_clusters((data | clusters) |
> + table_clusters_allocated,
> + len(diff))
> + # Indices of new refcount blocks necessary to cover
> + # clusters in 'new'
> + diff = set([x / block_size for x in new]) - blocks
> + clusters |= new
> + blocks |= diff
> + # Check if the refcount table needs one more cluster
> + if int(ceil((max(blocks) + 1) / float(size))) > table_size:
> + new_block_id = (table_start + table_size) / block_size
> + # Check if the additional table cluster needs
> + # one more refcount block
> + if new_block_id not in blocks:
> + diff.add(new_block_id)
> + table_clusters.add(table_start + table_size)
> + table_size += 1
> + return table_clusters, blocks, clusters
> +
> + def create_table_entry(table_offset, block_cluster, block_size,
> + cluster):
> + """Generate a refcount table entry."""
> + offset = table_offset + UINT64_S * (cluster / block_size)
> + return ['>Q', offset, block_cluster * self.cluster_size,
> + 'refcount_table_entry']
> +
> + def create_block_entry(block_cluster, block_size, cluster):
> + """Generate a list of entries for the current block."""
> + entry_size = self.cluster_size / block_size
> + offset = block_cluster * self.cluster_size
> + entry_offset = offset + entry_size * (cluster % block_size)
> + # While snapshots are not supported all refcounts are set to 1
> + return ['>H',entry_offset, 1, 'refcount_block_entry']
> +
> + # Number of refcount entries per refcount block
> + block_size = self.cluster_size / \
> + (1 << self.header['refcount_order'][0].value - 3)
Why minus 3? Could you use a named constant or a comment?
Fam
> + meta_data = self._get_metadata()
> + if len(self.data_clusters) == 0:
> + # All metadata for an empty guest image needs 4 clusters:
> + # header, rfc table, rfc block, L1 table.
> + # Header takes cluster #0, other clusters ##1-3 can be used
> + block_clusters = set([random.choice(list(set(range(1, 4)) -
> + meta_data))])
> + block_ids = set([0])
> + table_clusters = set([random.choice(list(set(range(1, 4)) -
> + meta_data -
> + block_clusters))])
> + else:
> + block_clusters, block_ids = \
> + allocate_rfc_blocks(self.data_clusters | \
> + meta_data, block_size)
> + table_clusters, block_ids, new_clusters = \
> + allocate_rfc_table(self.data_clusters | \
> + meta_data | \
> + block_clusters,
> + block_ids,
> + block_size)
> + block_clusters |= new_clusters
> +
> + meta_data |= block_clusters | table_clusters
> + table_offset = min(table_clusters) * self.cluster_size
> + block_id = None
> + # Clusters allocated for refcount blocks
> + block_clusters = list(block_clusters)
> + # Indices of refcount blocks
> + block_ids = list(block_ids)
> + # Refcount table entries
> + rfc_table = []
> + # Refcount entries
> + rfc_blocks = []
> +
> + for cluster in sorted(self.data_clusters | meta_data):
> + if cluster / block_size != block_id:
> + block_id = cluster / block_size
> + block_cluster = block_clusters[block_ids.index(block_id)]
> + rfc_table.append(create_table_entry(table_offset,
> + block_cluster,
> + block_size, cluster))
> + rfc_blocks.append(create_block_entry(block_cluster, block_size,
> + cluster))
> + self.refcount_table = FieldsList(rfc_table)
> + self.refcount_blocks = FieldsList(rfc_blocks)
> +
> + self.header['refcount_table_offset'][0].value = table_offset
> + self.header['refcount_table_clusters'][0].value = len(table_clusters)
> +
> def fuzz(self, fields_to_fuzz=None):
> """Fuzz an image by corrupting values of a random subset of its fields.
>
> @@ -471,6 +604,7 @@ def create_image(test_img_path, backing_file_name=None, backing_file_fmt=None,
> image.create_feature_name_table()
> image.set_end_of_extension_area()
> image.create_l_structures()
> + image.create_refcount_structures()
> image.fuzz(fields_to_fuzz)
> image.write(test_img_path)
> return image.image_size
> --
> 1.9.3
>
next prev parent reply other threads:[~2014-08-19 9:36 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-08-11 11:55 [Qemu-devel] [PATCH 0/3] image-fuzzer: Support refcount structures in the qcow2 image generator Maria Kustova
2014-08-11 11:55 ` [Qemu-devel] [PATCH 1/3] docs: List all image elements currently supported by the fuzzer Maria Kustova
2014-08-19 7:16 ` Fam Zheng
2014-08-11 11:55 ` [Qemu-devel] [PATCH 2/3] fuzz: Add fuzzing functions for entries of refcount table and blocks Maria Kustova
2014-08-19 7:36 ` Fam Zheng
2014-08-11 11:55 ` [Qemu-devel] [PATCH 3/3] layout: Add generators for refcount tbles " Maria Kustova
2014-08-19 9:36 ` Fam Zheng [this message]
2014-08-19 10:12 ` M.Kustova
2014-08-19 10:31 ` [Qemu-devel] [PATCH 0/3] image-fuzzer: Support refcount structures in the qcow2 image generator Stefan Hajnoczi
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20140819093630.GC32354@T430.nay.redhat.com \
--to=famz@redhat.com \
--cc=kwolf@redhat.com \
--cc=maria.k@catit.be \
--cc=maxa@catit.be \
--cc=qemu-devel@nongnu.org \
--cc=stefanha@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).