blob: fed520e6eba3baab9af7f062997fcbfa96dff159 [file] [log] [blame]
# Copyright 2017 syzkaller project authors. All rights reserved.
# Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file.
foo$0(x fileoff, y int8, z buffer[in])
foo$1(x "bar") ### unexpected string "bar", expect type
foo$2(x 123, y "bar") ### unexpected int 123, expect type ### unexpected string "bar", expect type
foo$3(x string) ### string can't be syscall argument
resource r0[int32]: 0, 0x1
resource r1[string["foo"]] ### string can't be resource base (int types can)
resource r1[int32] ### type r1 redeclared, previously declared as resource at LOCATION
resource int32[int32] ### resource name int32 conflicts with builtin type
resource fileoff[intptr] ### resource name fileoff conflicts with builtin type
s1 {
f1 int32
}
s1 { ### type s1 redeclared, previously declared as struct at LOCATION
f1 int32
f1 intptr ### duplicate field f1 in struct s1
parent int8 ### reserved field name parent in struct s1
}
s2 { ### struct s2 has no fields, need at least 1 field
}
int32 { ### struct name int32 conflicts with builtin type
f1 int32
}
r0 { ### type r0 redeclared, previously declared as resource at LOCATION
f1 int32
}
u0 [
f1 int32
f2 fileoff[int32]
]
u1 [ ### union u1 has no fields, need at least 1 field
]
u2 [
f1 int8
f1 int16 ### duplicate field f1 in union u2
parent int32 ### reserved field name parent in union u2
]
foo$4(a int8, a int16) ### duplicate argument a in syscall foo$4
foo$4() ### syscall foo$4 redeclared, previously declared at LOCATION
foo()
foo() ### syscall foo redeclared, previously declared at LOCATION
foo$5(a0 int8, a1 int8, a2 int8, a3 int8, a4 int8, a5 int8, a6 int8, a7 int8, a8 int8, a9 int8) ### syscall foo$5 has 10 arguments, allowed maximum is 9
foo$6(parent int8) ### reserved argument name parent in syscall foo$6
f1 = 1
f2 = 1, 2
f2 = 1, 2 ### flags f2 redeclared, previously declared at LOCATION
sf1 = "a"
sf2 = "a", "b"
sf2 = "c" ### string flags sf2 redeclared, previously declared at LOCATION
resource r2[r0]: 2
resource r3[int32:1] ### unexpected ':', only struct fields can be bitfields
resource r4[int32[opt]] ### resource base can't be marked as opt
resource r5[non_existent] ### unknown type non_existent
resource r9["foo"] ### unexpected string "foo", expect type
foo$7(a r0, a1 r2[opt])
foo$8(a fileoff[a, b, c]) ### wrong number of arguments for type fileoff, expect no arguments
foo$9(a buffer[inout])
foo$10(a buffer[intout]) ### unexpected value intout for direction argument of buffer type, expect [in out inout]
foo$11(a buffer["in"]) ### unexpected string "in" for direction argument of buffer type, expect [in out inout]
foo$12(a buffer[10]) ### unexpected int 10 for direction argument of buffer type, expect [in out inout]
foo$13(a int32[2:3])
foo$14(a int32[2:2])
foo$16(a int32[3])
foo$17(a ptr[in, int32])
foo$18(a ptr[in, int32[2:3]])
foo$19(a ptr[in, int32[opt]])
foo$20(a ptr) ### wrong number of arguments for type ptr, expect direction, type, [opt]
foo$21(a ptr["foo"]) ### wrong number of arguments for type ptr, expect direction, type, [opt]
foo$22(a ptr[in]) ### wrong number of arguments for type ptr, expect direction, type, [opt]
foo$23(a ptr[in, s3[in]]) ### wrong number of arguments for type s3, expect no arguments
foo$25(a proc[0, "foo"]) ### unexpected string "foo" for per-proc values argument of proc type, expect int
foo$26(a flags[no]) ### unknown flags no
foo$27(a flags["foo"]) ### unexpected string "foo" for flags argument of flags type, expect identifier
foo$28(a ptr[in, string["foo"]], b ptr[in, string["foo", 4]])
foo$30(a ptr[in, string[no]]) ### unknown string flags no
foo$31(a int8, b ptr[in, csum[a, inet]]) ### wrong number of arguments for type csum, expect csum target, kind, [proto], base type
foo$32(a int8, b ptr[in, csum[a, inet, 1, int32]]) ### only pseudo csum can have proto
foo$33(a int8, b ptr[in, csum[a, pseudo, 1, int32]])
foo$34(a int32["foo"]) ### unexpected string "foo" for range argument of int32 type, expect int
foo$35(a ptr[in, s3[opt]]) ### s3 can't be marked as opt
foo$36(a const[1:2]) ### unexpected ':'
foo$39(a fileoff:1) ### unexpected ':'
foo$40(a len["a"]) ### unexpected string "a" for len target argument of len type, expect identifier
foo$41(a vma[C1:C2])
foo$43(a ptr[in, string[1]]) ### unexpected int 1, string arg must be a string literal or string flags
foo$44(a int32) len[a] ### len can't be syscall return
foo$45(a int32) len[b] ### len can't be syscall return
foo$46(a ptr[in, in]) ### unknown type in
foo$47(a int32:2) ### unexpected ':', only struct fields can be bitfields
foo$48(a ptr[in, int32:7]) ### unexpected ':', only struct fields can be bitfields
foo$49(a ptr[in, array[int32, 0:1]])
foo$52(a intptr, b bitsize[a])
foo$53(a proc[20, 10, opt])
# This must not error yet (consts are not patched).
foo$54(a ptr[in, string["foo", C1]])
foo$55(a int8[opt[int8]]) ### opt can't have arguments
foo$56(a void) ### void can't be syscall argument
foo$57(a ptr[in, stringnoz["foo", 10]]) ### fixed-size string can't be non-zero-terminated
foo$58(a ptr[in, stringnoz[sf2, 10]]) ### fixed-size string can't be non-zero-terminated
foo$59(a s1) ### s1 can't be syscall argument
foo$60() s1 ### s1 can't be syscall return
foo$61(a u6) ### u6 can't be syscall argument
foo$62() u6 ### u6 can't be syscall return
foo$63(a int32[1[2]]) ### range argument has subargs
foo$64(a ptr[in, flags[f1[int32], int32]]) ### flags argument has subargs
opt { ### struct uses reserved name opt
f1 int32
}
in = 1, 2 ### flags uses reserved name in
out = "1", "2" ### string flags uses reserved name out
out [ ### union uses reserved name out
f1 int32
f2 int8
]
resource inout[int32] ### resource uses reserved name inout
bar()
s3 {
f1 int8:0 ### bitfields of size 0 are not supported
f2 int8:1
f3 int8:7
f4 int8:8
f5 int8:9 ### bitfield of size 9 is too large for base type of size 8
f6 int32:32
f7 int32:33 ### bitfield of size 33 is too large for base type of size 32
f8 const[0, int32:C1] ### literal const bitfield sizes are not supported
} [packed, align_4]
s4 {
f1 int8
} [align_7] ### bad struct s4 alignment 7 (must be a sane power of 2)
s5 {
f1 int8
} [varlen] ### unknown struct s5 attribute varlen
s6 {
f1 int8
} [align_foo] ### bad struct s6 alignment foo
s7 {
f1 ptr64[in, int32]
}
s8 {
f1 int8
} [unknown] ### unknown struct s8 attribute unknown
s9 {
f1 int8
} ["foo"[0]] ### unexpected string "foo", expect attribute
s10 {
f1 int8
} [packed[0]] ### packed attribute has args
s11 {
f1 int8
} [size["foo"]] ### unexpected string "foo", expect int
s12 {
f1 int8
} [size[0:1]] ### size attribute has colon or args
s13 {
f1 int8
} [size[0[0]]] ### size attribute has colon or args
u3 [
f1 int8
f2 int32
] [varlen]
u4 [
f1 int8
f2 int32
] [packed] ### unknown union u4 attribute packed
u5 [
f1 int8:1 ### unexpected ':', only struct fields can be bitfields
f2 int8:2 ### unexpected ':', only struct fields can be bitfields
]
u6 [
f1 int8
f2 int64
f3 array[int8]
]
define d0 SOMETHING
define d1 `some C expression`
define d2 some C expression
define d2 SOMETHING ### duplicate define d2
define d3 1
# Type aliases.
type mybool8 int8[0:1]
type mybool16 int16[0:1]
type net_port proc[100, 1, int16be]
resource typeres0[mybool8]
typestruct {
f1 mybool8
f2 mybool16
}
type type0 int8
type type0 int8 ### type type0 redeclared, previously declared as type alias at LOCATION
resource type0[int32] ### type type0 redeclared, previously declared as type alias at LOCATION
type0 = 0, 1
type type1 type1 ### type instantiation loop: type1 -> type1
type type2 int8:4 ### unexpected ':', only struct fields can be bitfields
type type3 type2 ### unknown type type2
type type4 const[0] ### wrong number of arguments for type const, expect value, base type
type type6 len[foo, int32] ### len can't be type alias target
type type7 len[foo] ### len can't be type alias target
resource typeres1[int32]
type type8 typeres1 ### typeres1 can't be type alias target
type int8 int8 ### type name int8 conflicts with builtin type
type opt int8 ### type uses reserved name opt
type type9 const[0, int8]
type type12 proc[123, 2, int16, opt]
type type13 ptr[in, typestruct13]
type type14 flags[type0, int32]
type type15 const[0, type0] ### unexpected value type0 for base type argument of const type, expect [int8 int16 int32 int64 int16be int32be int64be intptr]
type bool8 int8[0:1] ### type name bool8 conflicts with builtin type
typestruct11 {
f type11 ### unknown type type11
}
typestruct12 {
f type11 ### unknown type type11
}
typestruct13 {
f1 type9
f2 type12
}
foo$100(a mybool8, b mybool16)
foo$102(a type2) ### unknown type type2
foo$103(a type0:4) ### type alias type0 with ':'
foo$104(a type0[opt]) ### type type0 is not a template
foo$105() type0 ### int8 can't be syscall return
foo$106() type6 ### unknown type type6
foo$107(a type9, b type12)
foo$108(a flags[type0])
foo$109(a ptr[in, type0])
# Type templates.
type templ0[A, B] const[A, B]
type templ2[A] A[0]
type templ3[A] ptr[in, A]
type templ4[A, A] ptr[in, A] ### duplicate type argument A
type templ5[abc] ptr[in, abc] ### type argument abc must be ALL_CAPS
type templ6[T] ptr[in, T]
type templ7 templ0[templ6, int8]
# Note: here 42 is stripped as base type, so const ends up without arguments.
foo$201(a templ1[42]) ### wrong number of arguments for type const, expect value
type templ1[A] const[A]
type templ_struct0[A, B] {
len len[parent, int16]
typ const[A, int16]
data B
} [align_4]
type templ_struct1[STR] {
f string[STR, 40]
f int32 ### duplicate field f in template struct templ_struct1
}
type templ_struct2[A] {
f B ### unknown type B
}
type templ_base0[TYPE] {
f1 TYPE
}
type templ_templ0[BASE] {
f1 BASE
}
type templ_templ1[BASE] {
f1 BASE[int16] ### both template parameter BASE and its usage have sub-arguments
}
templ_templ_use0 {
f1 templ_templ0[templ_base0] ### template templ_base0 needs 1 arguments instead of 0
f2 templ_templ1[templ_base0[int32]]
}
foo$200(a templ0[42, int8])
foo$202(a templ0) ### template templ0 needs 2 arguments instead of 0
foo$203(a type0[42]) ### type type0 is not a template
foo$204(a ptr[in, templ_struct0[42, int8]])
foo$205(a ptr[in, templ_struct0[int8, int8]])
foo$207(a ptr[in, templ_struct2[1]])
# fmt
foo$fmt0(a ptr[in, fmt]) ### wrong number of arguments for type fmt, expect format, value
foo$fmt1(a fmt[dec, int8]) ### fmt can't be syscall argument
foo$fmt2(a ptr[in, fmt[dec, ptr[in, int8]]]) ### bad fmt value ptr, expect an integer
foo$fmt3(a ptr[in, fmt[foo, int8]]) ### unexpected value foo for format argument of fmt type, expect [dec hex oct]
foo$fmt4(a ptr[in, fmt[dec, int8:3]]) ### unexpected ':', only struct fields can be bitfields
struct$fmt0 {
f0 fmt[dec, int8:3] ### unexpected ':', only struct fields can be bitfields
f1 int32:-1 ### bitfield of size 18446744073709551615 is too large for base type of size 32
}