1/* 2 * Copyright (c) 2024 Huawei Device Co., Ltd. 3 * Licensed under the Apache License, Version 2.0 (the "License"); 4 * you may not use this file except in compliance with the License. 5 * You may obtain a copy of the License at 6 * 7 * http://www.apache.org/licenses/LICENSE-2.0 8 * 9 * Unless required by applicable law or agreed to in writing, software 10 * distributed under the License is distributed on an "AS IS" BASIS, 11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 * See the License for the specific language governing permissions and 13 * limitations under the License. 14 */ 15 16#include "systemcmdchannelstub_fuzzer.h" 17 18#include <cstddef> 19#include <cstdint> 20 21#include "system_cmd_channel_stub.h" 22#include "message_parcel.h" 23 24using namespace OHOS::MiscServices; 25namespace OHOS { 26constexpr size_t THRESHOLD = 10; 27constexpr int32_t OFFSET = 4; 28constexpr int32_t PRIVATEDATAVALUE = 100; 29const std::u16string AGENTSTUB_INTERFACE_TOKEN = u"ohos.miscservices.inputmethod.ISystemCmdChannel"; 30uint32_t ConvertToUint32(const uint8_t *ptr) 31{ 32 if (ptr == nullptr) { 33 return 0; 34 } 35 uint32_t bigVar = (ptr[0] << 24) | (ptr[1] << 16) | (ptr[2] << 8) | (ptr[3]); 36 return bigVar; 37} 38bool FuzzSystemCmdChannelStub(const uint8_t *rawData, size_t size) 39{ 40 InputType fuzzedBool = static_cast<InputType>(rawData[0] % 2); 41 auto fuzzedUint32 = static_cast<uint32_t>(size); 42 43 uint32_t code = ConvertToUint32(rawData); 44 rawData = rawData + OFFSET; 45 size = size - OFFSET; 46 47 SysPanelStatus sysPanelStatus = {fuzzedBool, 0, fuzzedUint32, fuzzedUint32}; 48 49 std::unordered_map <std::string, PrivateDataValue> privateCommand; 50 PrivateDataValue privateDataValue1 = std::string("stringValue"); 51 PrivateDataValue privateDataValue2 = static_cast<int32_t>(fuzzedBool); 52 PrivateDataValue privateDataValue3 = PRIVATEDATAVALUE; 53 privateCommand.emplace("value1", privateDataValue1); 54 privateCommand.emplace("value2", privateDataValue2); 55 privateCommand.emplace("value3", privateDataValue3); 56 57 MessageParcel data; 58 data.WriteInterfaceToken(AGENTSTUB_INTERFACE_TOKEN); 59 data.WriteBuffer(rawData, size); 60 data.RewindRead(0); 61 MessageParcel reply; 62 MessageOption option; 63 64 sptr <SystemCmdChannelStub> stub = new SystemCmdChannelStub(); 65 stub->SendPrivateCommand(privateCommand); 66 stub->NotifyPanelStatus(sysPanelStatus); 67 stub->OnRemoteRequest(code, data, reply, option); 68 return true; 69} 70} // namespace OHOS 71/* Fuzzer entry point */ 72extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) 73{ 74 if (size < OHOS::THRESHOLD) { 75 return 0; 76 } 77 /* Run your code on data */ 78 OHOS::FuzzSystemCmdChannelStub(data, size); 79 return 0; 80}