tree 8e5ad59e8c3e6892dfbc8cc01042c366de540ec0
parent c6ec708375e0f0f670f8ae7c11c94f09ce03f673
author Space Meyer <spm@google.com> 1681211813 +0200
committer Space Meyer <spm@google.com> 1681723337 +0200

docs: add GREBE reference

Tl;Dr They try to identify the data structure involved in a crash,
e.g. by parsing the WARN_ON condition. They modify the compiler
instrumentation to overwrite some of the upper bits in the program
counters, for program counters that modify the data structure. Then
they guide coverage by these magic PCs. They do this to find other
failure modes of buggy code found by syzkaller.