Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Audit all raw images used in testsuite #772

Open
kdave opened this issue Apr 2, 2024 · 0 comments
Open

Audit all raw images used in testsuite #772

kdave opened this issue Apr 2, 2024 · 0 comments
Labels
docs Changes in documentation or help text enhancement meta/tests Testsuite and test cases

Comments

@kdave
Copy link
Owner

kdave commented Apr 2, 2024

In the light of xz backdoor and the way the payload got in via the testsuite, let's do an audit just in case. Most images come from known people (for the btrfs check cases), however some images have been copied from bugzilla.kernel.org reports without change (fuzz-tests/images). Image formats are either raw partition (plain or compressed by ehm xz) or the custom image dump format managed by btrfs-image (also plain or compressed).

Task list:

  • go through all images and make a list of the problamatic ones
  • look which images could be replaced by a series of steps to recreate the state, add/update tools to do the changes on fresh images
  • look for other binary blobs like partition layout for loop devices
  • document how images should be created as needed instead of blobs

Expected result is minimal number of blobs, better tools for fuzz and targeted corruption testing. As a bonus the internal image format should be documented and fuzzed.

@kdave kdave added enhancement docs Changes in documentation or help text meta/tests Testsuite and test cases labels Apr 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docs Changes in documentation or help text enhancement meta/tests Testsuite and test cases
Projects
None yet
Development

No branches or pull requests

1 participant