1/* 2 * Copyright (c) 2022 Huawei Device Co., Ltd. 3 * Licensed under the Apache License, Version 2.0 (the "License"); 4 * you may not use this file except in compliance with the License. 5 * You may obtain a copy of the License at 6 * 7 * http://www.apache.org/licenses/LICENSE-2.0 8 * 9 * Unless required by applicable law or agreed to in writing, software 10 * distributed under the License is distributed on an "AS IS" BASIS, 11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 * See the License for the specific language governing permissions and 13 * limitations under the License. 14 */ 15 16#include "usbmgrbulkread_fuzzer.h" 17 18#include "iremote_object.h" 19#include "usb_errors.h" 20#include "usb_callback_test.h" 21#include "usb_common_fuzz.h" 22 23namespace OHOS { 24const uint32_t OFFSET = 4; 25const uint32_t OFFSET_BYTE = 8; 26constexpr size_t THRESHOLD = 10; 27namespace USB { 28 bool UsbMgrBulkReadFuzzTest(const uint8_t* data, size_t /* size */) 29 { 30 auto[res, pipe, interface] = UsbMgrPrepareFuzzEnv(); 31 if (!res) { 32 USB_HILOGE(MODULE_USB_SERVICE, "prepare error"); 33 return false; 34 } 35 36 auto& usbSrvClient = UsbSrvClient::GetInstance(); 37 sptr<UsbCallbackTest> cb = new UsbCallbackTest(); 38 auto ret = usbSrvClient.RegBulkCallback( 39 const_cast<USBDevicePipe &>(pipe), const_cast<UsbInterface &>(interface).GetEndpoints().at(1), cb); 40 if (ret != UEC_OK) { 41 USB_HILOGE(MODULE_USB_SERVICE, "RegBulkCallback failed ret=%{public}d", ret); 42 return false; 43 } 44 45 if (usbSrvClient.BulkRead(reinterpret_cast<USBDevicePipe &>(data), 46 reinterpret_cast<const USBEndpoint &>(std::move(data + OFFSET)), 47 reinterpret_cast<sptr<Ashmem> &>(std::move(data + OFFSET_BYTE))) == UEC_OK) { 48 return false; 49 } 50 return true; 51 } 52} // USB 53} // OHOS 54 55/* Fuzzer entry point */ 56extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) 57{ 58 if (size < OHOS::THRESHOLD) { 59 return 0; 60 } 61 /* Run your code on data */ 62 OHOS::USB::UsbMgrBulkReadFuzzTest(data, size); 63 return 0; 64} 65 66