1/* 2 * Copyright (c) 2022-2022 Huawei Device Co., Ltd. 3 * Licensed under the Apache License, Version 2.0 (the "License"); 4 * you may not use this file except in compliance with the License. 5 * You may obtain a copy of the License at 6 * 7 * http://www.apache.org/licenses/LICENSE-2.0 8 * 9 * Unless required by applicable law or agreed to in writing, software 10 * distributed under the License is distributed on an "AS IS" BASIS, 11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 * See the License for the specific language governing permissions and 13 * limitations under the License. 14 */ 15 16#include "controlchannelstub_fuzzer.h" 17 18#include <cstddef> 19#include <cstdint> 20 21#include "global.h" 22#include "input_control_channel_stub.h" 23#include "message_parcel.h" 24 25using namespace OHOS::MiscServices; 26namespace OHOS { 27constexpr size_t THRESHOLD = 10; 28constexpr int32_t OFFSET = 4; 29const std::u16string CONTROLCHANNEL_INTERFACE_TOKEN = u"ohos.miscservices.inputmethod.InputControlChannel"; 30 31uint32_t ConvertToUint32(const uint8_t *ptr) 32{ 33 if (ptr == nullptr) { 34 return 0; 35 } 36 uint32_t bigVar = (ptr[0] << 24) | (ptr[1] << 16) | (ptr[2] << 8) | (ptr[3]); 37 return bigVar; 38} 39bool FuzzControlChannel(const uint8_t *rawData, size_t size) 40{ 41 constexpr int32_t MAIN_USER_ID = 100; 42 uint32_t code = ConvertToUint32(rawData); 43 rawData = rawData + OFFSET; 44 size = size - OFFSET; 45 46 MessageParcel data; 47 data.WriteInterfaceToken(CONTROLCHANNEL_INTERFACE_TOKEN); 48 data.WriteBuffer(rawData, size); 49 data.RewindRead(0); 50 MessageParcel reply; 51 MessageOption option; 52 53 sptr<InputControlChannelStub> controlChannel = new InputControlChannelStub(MAIN_USER_ID); 54 controlChannel->OnRemoteRequest(code, data, reply, option); 55 56 return true; 57} 58} // namespace OHOS 59/* Fuzzer entry point */ 60extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) 61{ 62 if (size < OHOS::THRESHOLD) { 63 return 0; 64 } 65 /* Run your code on data */ 66 OHOS::FuzzControlChannel(data, size); 67 return 0; 68}