1/* 2 * Copyright (c) 2023 Huawei Device Co., Ltd. 3 * Licensed under the Apache License, Version 2.0 (the "License"); 4 * you may not use this file except in compliance with the License. 5 * You may obtain a copy of the License at 6 * 7 * http://www.apache.org/licenses/LICENSE-2.0 8 * 9 * Unless required by applicable law or agreed to in writing, software 10 * distributed under the License is distributed on an "AS IS" BASIS, 11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 * See the License for the specific language governing permissions and 13 * limitations under the License. 14 */ 15 16 17#include "ecmascript/global_env.h" 18#include "ecmascript/js_map.h" 19#include "ecmascript/js_map_iterator.h" 20#include "ecmascript/js_set.h" 21#include "ecmascript/js_set_iterator.h" 22#include "ecmascript/js_weak_container.h" 23#include "ecmascript/linked_hash_table.h" 24#include "ecmascript/napi/include/jsnapi.h" 25#include "ecmascript/napi/jsnapi_helper.h" 26#include "weakmapref_fuzzer.h" 27 28using namespace panda; 29using namespace panda::ecmascript; 30 31namespace OHOS { 32 void WeakMapRefFuzzTest(const uint8_t* data, size_t size) 33 { 34 RuntimeOption option; 35 option.SetLogLevel(RuntimeOption::LOG_LEVEL::ERROR); 36 EcmaVM *vm = JSNApi::CreateJSVM(option); 37 { 38 JsiFastNativeScope scope(vm); 39 if (data == nullptr || size <= 0) { 40 LOG_ECMA(ERROR) << "illegal input!"; 41 return; 42 } 43 uint8_t* ptr = nullptr; 44 ptr = const_cast<uint8_t*>(data); 45 JSThread *thread = vm->GetJSThread(); 46 ObjectFactory *factory = thread->GetEcmaVM()->GetFactory(); 47 JSHandle<GlobalEnv> env = thread->GetEcmaVM()->GetGlobalEnv(); 48 JSHandle<JSTaggedValue> constructor = env->GetBuiltinsWeakMapFunction(); 49 JSHandle<JSWeakMap> weakMap = 50 JSHandle<JSWeakMap>::Cast(factory->NewJSObjectByConstructor(JSHandle<JSFunction>(constructor), 51 constructor)); 52 JSHandle<LinkedHashMap> hashMap = LinkedHashMap::Create(thread); 53 weakMap->SetLinkedMap(thread, hashMap); 54 JSHandle<JSTaggedValue> weakMapTag = JSHandle<JSTaggedValue>::Cast(weakMap); 55 Local<WeakMapRef> map = JSNApiHelper::ToLocal<WeakMapRef>(weakMapTag); 56 JSHandle<JSTaggedValue> value(factory->NewFromASCII("value")); 57 JSHandle<JSTaggedValue> key(factory->NewFromASCII("key")); 58 JSWeakMap::Set(thread, weakMap, key, value); 59 map->GetSize(vm); 60 map->GetTotalElements(vm); 61 map->GetKey(vm, 0); 62 map->GetValue(vm, 0); 63 } 64 JSNApi::DestroyJSVM(vm); 65 } 66} 67 68// Fuzzer entry point. 69extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) 70{ 71 // Run your code on data. 72 OHOS::WeakMapRefFuzzTest(data, size); 73 return 0; 74}