github.com/google/syzkaller@v0.0.0-20251211124644-a066d2bc4b02/tools/syz-kconf/kconf.go

// Copyright 2020 syzkaller project authors. All rights reserved.
// Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file.

// syz-kconf generates Linux kernel configs in dashboard/config/linux.
// See dashboard/config/linux/README.md for details.
package main

import (
	"errors"
	"flag"
	"fmt"
	"os"
	"path/filepath"
	"regexp"
	"runtime"
	"sort"
	"strconv"
	"strings"
	"time"

	"github.com/google/syzkaller/pkg/build"
	"github.com/google/syzkaller/pkg/kconfig"
	"github.com/google/syzkaller/pkg/osutil"
	"github.com/google/syzkaller/pkg/tool"
	"github.com/google/syzkaller/pkg/vcs"
	"github.com/google/syzkaller/sys/targets"
)

const (
	featOverride   = "override"
	featOptional   = "optional"
	featAppend     = "append"
	featWeak       = "weak"
	featBaseline   = "baseline"    // disables extra configs
	featBaseConfig = "base-config" // only set for `-base.config` files
	featModules    = "modules"
	featReduced    = "reduced"
	featClang      = "clang"
	featAndroid    = "android"
	featChromeos   = "chromeos"
)

func main() {
	var (
		flagSourceDir = flag.String("sourcedir", "", "sourcedir")
		flagConfig    = flag.String("config", "", "config")
		flagInstance  = flag.String("instance", "", "instance")
	)
	flag.Parse()
	if *flagSourceDir == "" {
		tool.Failf("missing mandatory flag -sourcedir")
	}
	repo, err := vcs.NewRepo(targets.Linux, "", *flagSourceDir, vcs.OptPrecious)
	if err != nil {
		tool.Failf("failed to create repo: %v", err)
	}
	instances, unusedFeatures, err := parseMainSpec(*flagConfig)
	if err != nil {
		tool.Fail(err)
	}
	if err := checkConfigs(instances, unusedFeatures); err != nil {
		tool.Fail(err)
	}
	// In order to speed up the process we generate instances that use the same kernel revision in parallel.
	generated := make(map[string]bool)
	for _, inst := range instances {
		// Find the first instance that we did not generate yet.
		if *flagInstance != "" && *flagInstance != inst.Name || generated[inst.Name] {
			continue
		}
		fmt.Printf("git checkout %v %v\n", inst.Kernel.Repo, inst.Kernel.Tag)
		if _, err := repo.SwitchCommit(inst.Kernel.Tag); err != nil {
			if _, err := repo.CheckoutCommit(inst.Kernel.Repo, inst.Kernel.Tag); err != nil {
				tool.Failf("failed to checkout %v/%v: %v", inst.Kernel.Repo, inst.Kernel.Tag, err)
			}
		}
		releaseTag, err := releaseTag(*flagSourceDir)
		if err != nil {
			tool.Fail(err)
		}
		fmt.Printf("kernel release %v\n", releaseTag)
		// Now generate all instances that use this kernel revision in parallel (each will use own build dir).
		batch := 0
		results := make(chan error)
		for _, inst1 := range instances {
			if *flagInstance != "" && *flagInstance != inst1.Name || generated[inst1.Name] || inst1.Kernel != inst.Kernel {
				continue
			}
			fmt.Printf("generating %v...\n", inst1.Name)
			generated[inst1.Name] = true
			batch++
			ctx := &Context{
				Inst:       inst1,
				ConfigDir:  filepath.Dir(*flagConfig),
				SourceDir:  *flagSourceDir,
				ReleaseTag: releaseTag,
			}
			go func() {
				if err := ctx.generate(); err != nil {
					results <- fmt.Errorf("%v failed:\n%w", ctx.Inst.Name, err)
				}
				results <- nil
			}()
		}
		failed := false
		for i := 0; i < batch; i++ {
			if err := <-results; err != nil {
				fmt.Printf("%v\n", err)
				failed = true
			}
		}
		if failed {
			tool.Failf("some configs failed")
		}
	}
	if len(generated) == 0 {
		tool.Failf("unknown instance name")
	}
}

func checkConfigs(instances []*Instance, unusedFeatures []string) error {
	allFeatures := make(Features)
	for _, feat := range unusedFeatures {
		allFeatures[feat] = true
	}
	for _, inst := range instances {
		for feat := range inst.Features {
			allFeatures[feat] = true
		}
	}
	dedup := make(map[string]bool)
	errorString := ""
	for _, inst := range instances {
		for _, cfg := range inst.Configs {
			if strings.HasPrefix(cfg.Name, "CONFIG_") {
				msg := fmt.Sprintf("Warning: excessive CONFIG_ in %v at %v:%v ?", cfg.Name, cfg.File, cfg.Line)
				errorString += "\n" + msg
			}
			for _, feat := range cfg.Constraints {
				if feat[0] == '-' {
					feat = feat[1:]
				}
				if allFeatures[feat] || releaseRe.MatchString(feat) {
					continue
				}
				msg := fmt.Sprintf("%v:%v: unknown feature %v", cfg.File, cfg.Line, feat)
				if dedup[msg] {
					continue
				}
				dedup[msg] = true
				errorString += "\n" + msg
			}
		}
	}
	if errorString != "" {
		return errors.New(errorString[1:])
	}
	return nil
}

// Generation context for a single instance.
type Context struct {
	Inst       *Instance
	Target     *targets.Target
	Kconf      *kconfig.KConfig
	ConfigDir  string
	BuildDir   string
	SourceDir  string
	ReleaseTag string
}

func (ctx *Context) generate() error {
	var err error
	if ctx.BuildDir, err = os.MkdirTemp("", "syz-kconf"); err != nil {
		return err
	}
	defer os.RemoveAll(ctx.BuildDir)
	if err := ctx.setTarget(); err != nil {
		return err
	}
	if ctx.Kconf, err = kconfig.Parse(ctx.Target, filepath.Join(ctx.SourceDir, "Kconfig")); err != nil {
		return err
	}
	if err := ctx.setReleaseFeatures(); err != nil {
		return err
	}
	if err := ctx.mrProper(); err != nil {
		return err
	}
	if err := ctx.executeShell(); err != nil {
		return err
	}
	configFile := filepath.Join(ctx.BuildDir, ".config")
	cf, err := kconfig.ParseConfig(configFile)
	if err != nil {
		return err
	}
	if !ctx.Inst.Features[featBaseline] {
		if err := ctx.addUSBConfigs(cf); err != nil {
			return err
		}
	}
	ctx.applyConfigs(cf)
	if !ctx.Inst.Features[featModules] {
		cf.ModToYes()
	}
	// Set all configs that are not present (actually not present, rather than "is not set") to "is not set".
	// This avoids olddefconfig turning on random things we did not ask for.
	var missing []string
	for _, cfg := range ctx.Kconf.Configs {
		if (cfg.Type == kconfig.TypeTristate || cfg.Type == kconfig.TypeBool) && cf.Map[cfg.Name] == nil {
			missing = append(missing, cfg.Name)
		}
	}
	// Without sorting we can get random changes in the config after olddefconfig.
	sort.Strings(missing)
	for _, name := range missing {
		cf.Set(name, kconfig.No)
	}
	original := cf.Serialize()
	if err := osutil.WriteFile(configFile, original); err != nil {
		return fmt.Errorf("failed to write .config file: %w", err)
	}
	// Save what we've got before olddefconfig for debugging purposes, it allows to see if we did not set a config,
	// or olddefconfig removed it. Save as .tmp so that it's not checked-in accidentially.
	outputFile := filepath.Join(ctx.ConfigDir, ctx.Inst.Name+".config")
	outputFileTmp := outputFile + ".tmp"
	if err := osutil.WriteFile(outputFileTmp, original); err != nil {
		return fmt.Errorf("failed to write tmp config file: %w", err)
	}
	if err := ctx.Make("olddefconfig"); err != nil {
		return err
	}
	cf, err = kconfig.ParseConfig(configFile)
	if err != nil {
		return err
	}
	if err := ctx.verifyConfigs(cf); err != nil {
		return fmt.Errorf("%w: saved config before olddefconfig to %v", err, outputFileTmp)
	}
	if !ctx.Inst.Features[featModules] {
		cf.ModToNo()
	}
	config := []byte(fmt.Sprintf(`# Automatically generated by syz-kconf; DO NOT EDIT.
# Kernel: %v %v

%s
%s
`,
		ctx.Inst.Kernel.Repo, ctx.Inst.Kernel.Tag, cf.Serialize(), ctx.Inst.Verbatim))
	return osutil.WriteFile(outputFile, config)
}

func (ctx *Context) executeShell() error {
	envRe := regexp.MustCompile("^[A-Z0-9_]+=")
	for _, shell := range ctx.Inst.Shell {
		if !ctx.Inst.Features.Match(shell.Constraints) {
			continue
		}
		args := strings.Split(shell.Cmd, " ")
		for i := 1; i < len(args); i++ {
			args[i] = ctx.replaceVars(args[i])
		}
		if args[0] == "make" {
			if err := ctx.Make(args[1:]...); err != nil {
				return err
			}
			continue
		}
		env := os.Environ()
		for len(args) > 1 {
			if !envRe.MatchString(args[0]) {
				break
			}
			env = append(env, args[0])
			args = args[1:]
		}
		cmd := osutil.Command(args[0], args[1:]...)
		cmd.Dir = ctx.SourceDir
		cmd.Env = env
		if _, err := osutil.Run(10*time.Minute, cmd); err != nil {
			return err
		}
	}
	return nil
}

func (ctx *Context) applyConfigs(cf *kconfig.ConfigFile) {
	for _, cfg := range ctx.Inst.Configs {
		if !ctx.Inst.Features.Match(cfg.Constraints) {
			continue
		}
		if cfg.Value != kconfig.No {
			// If this is a choice, first unset all other options.
			// If we leave 2 choice options enabled, the last one will win.
			// It can make sense to move this code to kconfig in some form,
			// it's needed everywhere configs are changed.
			if m := ctx.Kconf.Configs[cfg.Name]; m != nil && m.Parent.Kind == kconfig.MenuChoice {
				for _, choice := range m.Parent.Elems {
					cf.Unset(choice.Name)
				}
			}
		}
		cf.Set(cfg.Name, cfg.Value)
	}
}

func (ctx *Context) verifyConfigs(cf *kconfig.ConfigFile) error {
	errs := new(Errors)
	for _, cfg := range ctx.Inst.Configs {
		act := cf.Value(cfg.Name)
		if act == cfg.Value || cfg.Optional || !ctx.Inst.Features.Match(cfg.Constraints) {
			continue
		}
		if act == kconfig.No {
			errs.push("%v:%v: %v is not present in the final config", cfg.File, cfg.Line, cfg.Name)
		} else if cfg.Value == kconfig.No {
			var selectedBy []string
			for name := range ctx.Kconf.SelectedBy(cfg.Name) {
				if cf.Value(name) == kconfig.Yes {
					selectedBy = append(selectedBy, name)
				}
			}
			selectedByStr := ""
			if len(selectedBy) > 0 {
				selectedByStr = fmt.Sprintf(", possibly selected by %q", selectedBy)
			}
			errs.push("%v:%v: %v is present in the final config%s", cfg.File, cfg.Line, cfg.Name, selectedByStr)
		} else {
			errs.push("%v:%v: %v does not match final config %v vs %v",
				cfg.File, cfg.Line, cfg.Name, cfg.Value, act)
		}
	}
	return errs.err()
}

func (ctx *Context) addUSBConfigs(cf *kconfig.ConfigFile) error {
	prefix := ""
	switch {
	case ctx.Inst.Features[featAndroid]:
		prefix = "android"
	case ctx.Inst.Features[featChromeos]:
		prefix = "chromeos"
	}
	distroConfig := filepath.Join(ctx.ConfigDir, "distros", prefix+"*")
	// Some USB drivers don't depend on any USB related symbols, but rather on a generic symbol
	// for some input subsystem (e.g. HID), so include it as well.
	return ctx.addDependentConfigs(cf, []string{"USB_SUPPORT", "HID"}, distroConfig)
}

func (ctx *Context) addDependentConfigs(dst *kconfig.ConfigFile, include []string, configGlob string) error {
	configFiles, err := filepath.Glob(configGlob)
	if err != nil {
		return err
	}
	includes := func(a []string, b map[string]bool) bool {
		for _, x := range a {
			if b[x] {
				return true
			}
		}
		return false
	}
	selected := make(map[string]bool)
	for _, cfg := range ctx.Kconf.Configs {
		deps := cfg.DependsOn()
		if !includes(include, deps) {
			continue
		}
		selected[cfg.Name] = true
		for dep := range deps {
			selected[dep] = true
		}
	}
	dedup := make(map[string]bool)
	for _, file := range configFiles {
		cf, err := kconfig.ParseConfig(file)
		if err != nil {
			return err
		}
		for _, cfg := range cf.Configs {
			if cfg.Value == kconfig.No || dedup[cfg.Name] || !selected[cfg.Name] {
				continue
			}
			dedup[cfg.Name] = true
			dst.Set(cfg.Name, cfg.Value)
		}
	}
	return nil
}

func (ctx *Context) setTarget() error {
	for _, target := range targets.List[targets.Linux] {
		if ctx.Inst.Features[target.KernelArch] {
			if ctx.Target != nil {
				return fmt.Errorf("arch is set twice")
			}
			ctx.Target = targets.GetEx(targets.Linux, target.Arch, ctx.Inst.Features[featClang])
		}
	}
	if ctx.Target == nil {
		return fmt.Errorf("no arch feature")
	}
	return nil
}

func (ctx *Context) setReleaseFeatures() error {
	tag := ctx.ReleaseTag
	match := releaseRe.FindStringSubmatch(tag)
	if match == nil {
		return fmt.Errorf("bad release tag %q", tag)
	}
	major, err := strconv.ParseInt(match[1], 10, 32)
	if err != nil {
		return fmt.Errorf("bad release tag %q: %w", tag, err)
	}
	minor, err := strconv.ParseInt(match[2], 10, 32)
	if err != nil {
		return fmt.Errorf("bad release tag %q: %w", tag, err)
	}
	for ; major >= 2; major-- {
		for ; minor >= 0; minor-- {
			ctx.Inst.Features[fmt.Sprintf("v%v.%v", major, minor)] = true
		}
		minor = 99
	}
	return nil
}

var releaseRe = regexp.MustCompile(`^v([0-9]+)\.([0-9]+)(?:-rc([0-9]+))?(?:\.([0-9]+))?$`)

func (ctx *Context) mrProper() error {
	// Run 'make mrproper', otherwise out-of-tree build fails.
	// However, it takes unreasonable amount of time,
	// so first check few files and if they are missing hope for best.
	files := []string{
		".config",
		"init/main.o",
		"include/config",
		"include/generated/compile.h",
		"arch/" + ctx.Target.KernelArch + "/include/generated",
	}
	for _, file := range files {
		if osutil.IsExist(filepath.Join(ctx.SourceDir, filepath.FromSlash(file))) {
			goto clean
		}
	}
	return nil
clean:
	buildDir := ctx.BuildDir
	ctx.BuildDir = ctx.SourceDir
	err := ctx.Make("mrproper")
	ctx.BuildDir = buildDir
	return err
}

func (ctx *Context) Make(args ...string) error {
	compiler, linker := "", ""
	if ctx.Inst.Compiler != "" {
		compiler = ctx.replaceVars(ctx.Inst.Compiler)
	}
	if ctx.Inst.Linker != "" {
		linker = ctx.replaceVars(ctx.Inst.Linker)
	}
	args = append(args, build.LinuxMakeArgs(
		ctx.Target,
		compiler,
		linker,
		"", // ccache
		ctx.BuildDir,
		runtime.NumCPU(),
	)...)
	_, err := osutil.RunCmd(10*time.Minute, ctx.SourceDir, "make", args...)
	return err
}

func (ctx *Context) replaceVars(str string) string {
	str = strings.ReplaceAll(str, "${SOURCEDIR}", ctx.SourceDir)
	str = strings.ReplaceAll(str, "${BUILDDIR}", ctx.BuildDir)
	str = strings.ReplaceAll(str, "${ARCH}", ctx.Target.KernelArch)
	return str
}

func releaseTag(dir string) (string, error) {
	data, err := os.ReadFile(filepath.Join(dir, "Makefile"))
	if err != nil {
		return "", err
	}
	return releaseTagImpl(data)
}

func releaseTagImpl(data []byte) (string, error) {
	match := makefileReleaseRe.FindSubmatch(data)
	if match == nil {
		return "", fmt.Errorf("did not find VERSION/PATCHLEVEL in the kernel Makefile")
	}
	return fmt.Sprintf("v%s.%s", match[1], match[2]), nil
}

var makefileReleaseRe = regexp.MustCompile(`\nVERSION = ([0-9]+)(?:\n.*)*\nPATCHLEVEL = ([0-9]+)\n`)