Syzkaller syzlang syntax basics for describing ioctl syscalls
The English summary is being prepared. Showing the original description.
See how to installReview the instructions the agent will receive before you install.
Syzkaller's description language (syzlang) describes syscalls for fuzzing.
Description files are located at /opt/syzkaller/sys/linux/*.txt.
Basic form:
syscall_name(arg1 type1, arg2 type2, ...) return_type
Specialized syscalls use $ suffix:
syscall$VARIANT(args...) return_type
| Pattern | Meaning |
|---|---|
const[VALUE] | Fixed constant value |
flags[flag_set, type] | Bitfield from flag set |
ptr[direction, type] | Pointer (in, out, inout) |
intptr[min:max] | Integer pointer with range |
int8, int16, int32 | Fixed-size integers |
int16be, int32be | Big-endian integers |
array[type] | Variable-length array |
array[type, count] | Fixed-length array |
For ioctls with output:
ioctl$CMD(fd fd_type, cmd const[CMD], arg ptr[out, int32])
For ioctls with input:
ioctl$CMD(fd fd_type, cmd const[CMD], arg ptr[in, struct_type])
For simple value ioctls:
ioctl$CMD(fd fd_type, cmd const[CMD], arg intptr[0:1])
For ioctls using ifreq structure (from socket.txt):
ioctl$CMD(fd fd_type, cmd const[CMD], arg ptr[in, ifreq_t[flags[flag_set, int16]]])
Structs must have typed fields:
struct_name {
field1 type1
field2 type2
}
Define reusable flag sets:
flag_set_name = FLAG1, FLAG2, FLAG3
Then use with flags[flag_set_name, int16].
File descriptor resources:
resource resource_name[fd]
For specialized read/write:
read$suffix(fd fd_type, buf ptr[out, buffer_type], count len[buf])
write$suffix(fd fd_type, buf ptr[in, buffer_type], count len[buf])
sys/linux/socket.txt)make descriptions after edits to validate syntaxptr[in, ...] for input, ptr[out, ...] for outputNo reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Perform various data analysis on SEC 13-F and obtain some insights of fund activities such as number of holdings, AUM, and change of holdings between two quarters.
The English summary is being prepared. Showing the original description.
AC branch pi-model power flow equations (P/Q and |S|) with transformer tap ratio and phase shift, matching `acopf-math-model.md` and MATPOWER branch fields. Use when computing branch flows in either direction, aggregating bus injections for nodal balance, checking MVA (rateA) limits, computing branch loading %, or debugging sign/units issues in AC power flow.
The English summary is being prepared. Showing the original description.
Redact text from PDF documents for blind review anonymization
The English summary is being prepared. Showing the original description.
Use when checking simplified ADA-derived plan-view bathroom accessibility constraints such as turning space, door clear width, toilet centerline, grab bars, and lavatory knee/toe clearance.
The English summary is being prepared. Showing the original description.
Analyze failed GitHub Action jobs for a pull request.
The English summary is being prepared. Showing the original description.
Use when extracting plan-view architectural geometry from DXF files with semantic CAD layers, especially when outputs must normalize rooms, doors, fixtures, clearances, and grab bars into machine-checkable JSON.
The English summary is being prepared. Showing the original description.