14514f5e3Sopenharmony_ci/* 24514f5e3Sopenharmony_ci * Copyright (c) 2023 Huawei Device Co., Ltd. 34514f5e3Sopenharmony_ci * Licensed under the Apache License, Version 2.0 (the "License"); 44514f5e3Sopenharmony_ci * you may not use this file except in compliance with the License. 54514f5e3Sopenharmony_ci * You may obtain a copy of the License at 64514f5e3Sopenharmony_ci * 74514f5e3Sopenharmony_ci * http://www.apache.org/licenses/LICENSE-2.0 84514f5e3Sopenharmony_ci * 94514f5e3Sopenharmony_ci * Unless required by applicable law or agreed to in writing, software 104514f5e3Sopenharmony_ci * distributed under the License is distributed on an "AS IS" BASIS, 114514f5e3Sopenharmony_ci * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 124514f5e3Sopenharmony_ci * See the License for the specific language governing permissions and 134514f5e3Sopenharmony_ci * limitations under the License. 144514f5e3Sopenharmony_ci */ 154514f5e3Sopenharmony_ci 164514f5e3Sopenharmony_ci#include "weaksetref_fuzzer.h" 174514f5e3Sopenharmony_ci#include "ecmascript/base/utf_helper.h" 184514f5e3Sopenharmony_ci#include "ecmascript/ecma_string-inl.h" 194514f5e3Sopenharmony_ci#include "ecmascript/global_env.h" 204514f5e3Sopenharmony_ci#include "ecmascript/js_handle.h" 214514f5e3Sopenharmony_ci#include "ecmascript/js_weak_container.h" 224514f5e3Sopenharmony_ci#include "ecmascript/napi/include/jsnapi.h" 234514f5e3Sopenharmony_ci#include "ecmascript/napi/jsnapi_helper.h" 244514f5e3Sopenharmony_ci#include "ecmascript/linked_hash_table.h" 254514f5e3Sopenharmony_ci 264514f5e3Sopenharmony_ciusing namespace panda; 274514f5e3Sopenharmony_ciusing namespace panda::ecmascript; 284514f5e3Sopenharmony_ciusing namespace panda::ecmascript::base::utf_helper; 294514f5e3Sopenharmony_ci 304514f5e3Sopenharmony_cinamespace OHOS { 314514f5e3Sopenharmony_civoid WeakSetRefGetSizeFuzzTest([[maybe_unused]]const uint8_t *data, size_t size) 324514f5e3Sopenharmony_ci{ 334514f5e3Sopenharmony_ci RuntimeOption option; 344514f5e3Sopenharmony_ci option.SetLogLevel(RuntimeOption::LOG_LEVEL::ERROR); 354514f5e3Sopenharmony_ci EcmaVM *vm = JSNApi::CreateJSVM(option); 364514f5e3Sopenharmony_ci { 374514f5e3Sopenharmony_ci JsiFastNativeScope scope(vm); 384514f5e3Sopenharmony_ci if (size <= 0) { 394514f5e3Sopenharmony_ci return; 404514f5e3Sopenharmony_ci } 414514f5e3Sopenharmony_ci JSThread *thread = vm->GetJSThread(); 424514f5e3Sopenharmony_ci ObjectFactory *factory = thread->GetEcmaVM()->GetFactory(); 434514f5e3Sopenharmony_ci JSHandle<GlobalEnv> env = thread->GetEcmaVM()->GetGlobalEnv(); 444514f5e3Sopenharmony_ci JSHandle<JSTaggedValue> constructor = env->GetBuiltinsWeakSetFunction(); 454514f5e3Sopenharmony_ci auto obj = factory->NewJSObjectByConstructor(JSHandle<JSFunction>(constructor), constructor); 464514f5e3Sopenharmony_ci JSHandle<JSWeakSet> weakSet = JSHandle<JSWeakSet>::Cast(obj); 474514f5e3Sopenharmony_ci JSHandle<LinkedHashSet> hashSet = LinkedHashSet::Create(thread); 484514f5e3Sopenharmony_ci weakSet->SetLinkedSet(thread, hashSet); 494514f5e3Sopenharmony_ci JSHandle<JSTaggedValue> weakSetTag = JSHandle<JSTaggedValue>::Cast(weakSet); 504514f5e3Sopenharmony_ci Local<WeakSetRef> set = JSNApiHelper::ToLocal<WeakSetRef>(weakSetTag); 514514f5e3Sopenharmony_ci JSHandle<JSTaggedValue> value(factory->NewFromASCII("value")); 524514f5e3Sopenharmony_ci JSWeakSet::Add(thread, weakSet, value); 534514f5e3Sopenharmony_ci set->GetSize(vm); 544514f5e3Sopenharmony_ci } 554514f5e3Sopenharmony_ci JSNApi::DestroyJSVM(vm); 564514f5e3Sopenharmony_ci return; 574514f5e3Sopenharmony_ci} 584514f5e3Sopenharmony_ci 594514f5e3Sopenharmony_civoid WeakSetRefGetTotalElementsFuzzTest([[maybe_unused]]const uint8_t *data, size_t size) 604514f5e3Sopenharmony_ci{ 614514f5e3Sopenharmony_ci RuntimeOption option; 624514f5e3Sopenharmony_ci option.SetLogLevel(RuntimeOption::LOG_LEVEL::ERROR); 634514f5e3Sopenharmony_ci EcmaVM *vm = JSNApi::CreateJSVM(option); 644514f5e3Sopenharmony_ci { 654514f5e3Sopenharmony_ci JsiFastNativeScope scope(vm); 664514f5e3Sopenharmony_ci if (size <= 0) { 674514f5e3Sopenharmony_ci return; 684514f5e3Sopenharmony_ci } 694514f5e3Sopenharmony_ci JSThread *thread = vm->GetJSThread(); 704514f5e3Sopenharmony_ci ObjectFactory *factory = thread->GetEcmaVM()->GetFactory(); 714514f5e3Sopenharmony_ci JSHandle<GlobalEnv> env = thread->GetEcmaVM()->GetGlobalEnv(); 724514f5e3Sopenharmony_ci JSHandle<JSTaggedValue> constructor = env->GetBuiltinsWeakSetFunction(); 734514f5e3Sopenharmony_ci auto obj = factory->NewJSObjectByConstructor(JSHandle<JSFunction>(constructor), constructor); 744514f5e3Sopenharmony_ci JSHandle<JSWeakSet> weakSet = JSHandle<JSWeakSet>::Cast(obj); 754514f5e3Sopenharmony_ci JSHandle<LinkedHashSet> hashSet = LinkedHashSet::Create(thread); 764514f5e3Sopenharmony_ci weakSet->SetLinkedSet(thread, hashSet); 774514f5e3Sopenharmony_ci JSHandle<JSTaggedValue> weakSetTag = JSHandle<JSTaggedValue>::Cast(weakSet); 784514f5e3Sopenharmony_ci Local<WeakSetRef> set = JSNApiHelper::ToLocal<WeakSetRef>(weakSetTag); 794514f5e3Sopenharmony_ci JSHandle<JSTaggedValue> value(factory->NewFromASCII("value")); 804514f5e3Sopenharmony_ci JSWeakSet::Add(thread, weakSet, value); 814514f5e3Sopenharmony_ci set->GetTotalElements(vm); 824514f5e3Sopenharmony_ci } 834514f5e3Sopenharmony_ci JSNApi::DestroyJSVM(vm); 844514f5e3Sopenharmony_ci return; 854514f5e3Sopenharmony_ci} 864514f5e3Sopenharmony_ci 874514f5e3Sopenharmony_civoid WeakSetRefGetValueFuzzTest([[maybe_unused]]const uint8_t *data, size_t size) 884514f5e3Sopenharmony_ci{ 894514f5e3Sopenharmony_ci RuntimeOption option; 904514f5e3Sopenharmony_ci option.SetLogLevel(RuntimeOption::LOG_LEVEL::ERROR); 914514f5e3Sopenharmony_ci EcmaVM *vm = JSNApi::CreateJSVM(option); 924514f5e3Sopenharmony_ci { 934514f5e3Sopenharmony_ci JsiFastNativeScope scope(vm); 944514f5e3Sopenharmony_ci if (size <= 0) { 954514f5e3Sopenharmony_ci return; 964514f5e3Sopenharmony_ci } 974514f5e3Sopenharmony_ci JSThread *thread = vm->GetJSThread(); 984514f5e3Sopenharmony_ci ObjectFactory *factory = thread->GetEcmaVM()->GetFactory(); 994514f5e3Sopenharmony_ci JSHandle<GlobalEnv> env = thread->GetEcmaVM()->GetGlobalEnv(); 1004514f5e3Sopenharmony_ci JSHandle<JSTaggedValue> constructor = env->GetBuiltinsWeakSetFunction(); 1014514f5e3Sopenharmony_ci auto obj = factory->NewJSObjectByConstructor(JSHandle<JSFunction>(constructor), constructor); 1024514f5e3Sopenharmony_ci JSHandle<JSWeakSet> weakSet = JSHandle<JSWeakSet>::Cast(obj); 1034514f5e3Sopenharmony_ci JSHandle<LinkedHashSet> hashSet = LinkedHashSet::Create(thread); 1044514f5e3Sopenharmony_ci weakSet->SetLinkedSet(thread, hashSet); 1054514f5e3Sopenharmony_ci JSHandle<JSTaggedValue> weakSetTag = JSHandle<JSTaggedValue>::Cast(weakSet); 1064514f5e3Sopenharmony_ci Local<WeakSetRef> set = JSNApiHelper::ToLocal<WeakSetRef>(weakSetTag); 1074514f5e3Sopenharmony_ci JSHandle<JSTaggedValue> value(factory->NewFromASCII("value")); 1084514f5e3Sopenharmony_ci JSWeakSet::Add(thread, weakSet, value); 1094514f5e3Sopenharmony_ci set->GetValue(vm, 0); 1104514f5e3Sopenharmony_ci } 1114514f5e3Sopenharmony_ci JSNApi::DestroyJSVM(vm); 1124514f5e3Sopenharmony_ci return; 1134514f5e3Sopenharmony_ci} 1144514f5e3Sopenharmony_ci} 1154514f5e3Sopenharmony_ci 1164514f5e3Sopenharmony_ci// Fuzzer entry point. 1174514f5e3Sopenharmony_ciextern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) 1184514f5e3Sopenharmony_ci{ 1194514f5e3Sopenharmony_ci // Run your code on data. 1204514f5e3Sopenharmony_ci OHOS::WeakSetRefGetSizeFuzzTest(data, size); 1214514f5e3Sopenharmony_ci OHOS::WeakSetRefGetTotalElementsFuzzTest(data, size); 1224514f5e3Sopenharmony_ci OHOS::WeakSetRefGetValueFuzzTest(data, size); 1234514f5e3Sopenharmony_ci return 0; 1244514f5e3Sopenharmony_ci}