12d43be4eSopenharmony_ci/* 22d43be4eSopenharmony_ci * Copyright (c) 2022 Huawei Device Co., Ltd. 32d43be4eSopenharmony_ci * Licensed under the Apache License, Version 2.0 (the "License"); 42d43be4eSopenharmony_ci * you may not use this file except in compliance with the License. 52d43be4eSopenharmony_ci * You may obtain a copy of the License at 62d43be4eSopenharmony_ci * 72d43be4eSopenharmony_ci * http://www.apache.org/licenses/LICENSE-2.0 82d43be4eSopenharmony_ci * 92d43be4eSopenharmony_ci * Unless required by applicable law or agreed to in writing, software 102d43be4eSopenharmony_ci * distributed under the License is distributed on an "AS IS" BASIS, 112d43be4eSopenharmony_ci * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 122d43be4eSopenharmony_ci * See the License for the specific language governing permissions and 132d43be4eSopenharmony_ci * limitations under the License. 142d43be4eSopenharmony_ci */ 152d43be4eSopenharmony_ci 162d43be4eSopenharmony_ci#include "updateinactivemachine_fuzzer.h" 172d43be4eSopenharmony_ci 182d43be4eSopenharmony_ci#define private public 192d43be4eSopenharmony_ci#define protected public 202d43be4eSopenharmony_ci 212d43be4eSopenharmony_ci#include "activating.h" 222d43be4eSopenharmony_ci#include "adddatatoken_fuzzer.h" 232d43be4eSopenharmony_ci#include "inactive.h" 242d43be4eSopenharmony_ci#include "statemachine_fuzzer.h" 252d43be4eSopenharmony_ci 262d43be4eSopenharmony_cinamespace OHOS { 272d43be4eSopenharmony_ciusing namespace OHOS::Telephony; 282d43be4eSopenharmony_ciusing namespace AppExecFwk; 292d43be4eSopenharmony_ciusing namespace OHOS::EventFwk; 302d43be4eSopenharmony_cistatic int32_t SIM_COUNT = 2; 312d43be4eSopenharmony_cibool g_flag = false; 322d43be4eSopenharmony_ci 332d43be4eSopenharmony_civoid UpdateInActiveMachineFuzz(const uint8_t *data, size_t size) 342d43be4eSopenharmony_ci{ 352d43be4eSopenharmony_ci std::shared_ptr<StateMachineFuzzer> machine = std::make_shared<StateMachineFuzzer>(); 362d43be4eSopenharmony_ci if (machine == nullptr) { 372d43be4eSopenharmony_ci return; 382d43be4eSopenharmony_ci } 392d43be4eSopenharmony_ci int32_t slotId = static_cast<int32_t>(size % SIM_COUNT); 402d43be4eSopenharmony_ci std::shared_ptr<CellularDataStateMachine> cellularMachine = machine->CreateCellularDataConnect(slotId); 412d43be4eSopenharmony_ci if (cellularMachine == nullptr) { 422d43be4eSopenharmony_ci return; 432d43be4eSopenharmony_ci } 442d43be4eSopenharmony_ci cellularMachine->Init(); 452d43be4eSopenharmony_ci 462d43be4eSopenharmony_ci sptr<Inactive> inactive = 472d43be4eSopenharmony_ci std::make_unique<Inactive>(std::weak_ptr<CellularDataStateMachine>(cellularMachine), "Inactive").release(); 482d43be4eSopenharmony_ci sptr<Activating> activating = 492d43be4eSopenharmony_ci std::make_unique<Activating>(std::weak_ptr<CellularDataStateMachine>(cellularMachine), "Activating").release(); 502d43be4eSopenharmony_ci 512d43be4eSopenharmony_ci if (inactive == nullptr || activating == nullptr) { 522d43be4eSopenharmony_ci TELEPHONY_LOGE("memory allocation failed"); 532d43be4eSopenharmony_ci return; 542d43be4eSopenharmony_ci } 552d43be4eSopenharmony_ci 562d43be4eSopenharmony_ci std::int32_t intValue = static_cast<int32_t>(size); 572d43be4eSopenharmony_ci std::unique_ptr<uint8_t> object = std::make_unique<uint8_t>(*data); 582d43be4eSopenharmony_ci if (object == nullptr) { 592d43be4eSopenharmony_ci return; 602d43be4eSopenharmony_ci } 612d43be4eSopenharmony_ci 622d43be4eSopenharmony_ci InnerEvent::Pointer event = InnerEvent::Get(intValue, object); 632d43be4eSopenharmony_ci inactive->SetDeActiveApnTypeId(intValue); 642d43be4eSopenharmony_ci inactive->StateProcess(event); 652d43be4eSopenharmony_ci 662d43be4eSopenharmony_ci activating->StateProcess(event); 672d43be4eSopenharmony_ci activating->RilErrorResponse(event); 682d43be4eSopenharmony_ci activating->ProcessConnectTimeout(event); 692d43be4eSopenharmony_ci activating->StateProcess(event); 702d43be4eSopenharmony_ci} 712d43be4eSopenharmony_ci 722d43be4eSopenharmony_civoid UpdateActiveMachineWithMyAPI(const uint8_t *data, size_t size) 732d43be4eSopenharmony_ci{ 742d43be4eSopenharmony_ci if (data == nullptr || size == 0) { 752d43be4eSopenharmony_ci return; 762d43be4eSopenharmony_ci } 772d43be4eSopenharmony_ci if (!g_flag) { 782d43be4eSopenharmony_ci UpdateInActiveMachineFuzz(data, size); 792d43be4eSopenharmony_ci g_flag = true; 802d43be4eSopenharmony_ci } 812d43be4eSopenharmony_ci} 822d43be4eSopenharmony_ci} // namespace OHOS 832d43be4eSopenharmony_ci 842d43be4eSopenharmony_ci/* Fuzzer entry point */ 852d43be4eSopenharmony_ciextern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) 862d43be4eSopenharmony_ci{ 872d43be4eSopenharmony_ci OHOS::AddDataTokenFuzzer token; 882d43be4eSopenharmony_ci /* Run your code on data */ 892d43be4eSopenharmony_ci OHOS::UpdateActiveMachineWithMyAPI(data, size); 902d43be4eSopenharmony_ci return 0; 912d43be4eSopenharmony_ci}