1/* 2 * Copyright (c) 2023 Huawei Device Co., Ltd. 3 * Licensed under the Apache License, Version 2.0 (the "License"); 4 * you may not use this file except in compliance with the License. 5 * You may obtain a copy of the License at 6 * 7 * http://www.apache.org/licenses/LICENSE-2.0 8 * 9 * Unless required by applicable law or agreed to in writing, software 10 * distributed under the License is distributed on an "AS IS" BASIS, 11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 * See the License for the specific language governing permissions and 13 * limitations under the License. 14 */ 15 16#include "huks_hdi_fuzzer.h" 17#include "huks_hdi_passthrough_adapter.h" 18#include "huks_hdi_fuzz_common.h" 19 20#include <cstddef> 21#include <cstdint> 22#include <securec.h> 23 24 25struct HuksHdi *g_instance = nullptr; 26 27#define SIZE_KEY 276 28#define SIZE_PARAMSET_INIT 172 29#define SIZE_PARAMSET_UPDATE 120 30#define SIZE_PARAMSET_FINISH 188 31#define ALLSIZE (SIZE_KEY + SIZE_PARAMSET_INIT + SIZE_PARAMSET_UPDATE + SIZE_PARAMSET_FINISH) 32 33bool DoSomethingInterestingWithMyAPI(const uint8_t* data, size_t size) 34{ 35 if (data == nullptr || size <= ALLSIZE) { 36 return false; 37 } 38 39 uint8_t *myData = static_cast<uint8_t *>(malloc(sizeof(uint8_t) * size)); 40 if (myData == nullptr) { 41 return false; 42 } 43 44 (void)memcpy_s(myData, size, data, size); 45 46 struct HksBlob key = { SIZE_KEY, myData }; 47 struct HksParamSet *paramSet = reinterpret_cast<struct HksParamSet *>(myData + SIZE_KEY); 48 paramSet->paramSetSize = SIZE_PARAMSET_INIT; 49 uint8_t buffer[32]; 50 struct HksBlob handle = { 51 .data = buffer, 52 .size = sizeof(buffer) 53 }; 54 55 struct HksBlob inData = { size, myData }; 56 struct HksParamSet *paramSetUpdate = reinterpret_cast<struct HksParamSet *>(myData + SIZE_KEY + SIZE_PARAMSET_INIT); 57 paramSetUpdate->paramSetSize = SIZE_PARAMSET_UPDATE; 58 59 struct HksParamSet *paramSetFinish = reinterpret_cast<struct HksParamSet *>(myData + SIZE_KEY + SIZE_PARAMSET_INIT + 60 SIZE_PARAMSET_UPDATE); 61 paramSetFinish->paramSetSize = SIZE_PARAMSET_FINISH; 62 63#ifdef HUKS_HDI_SOFTWARE 64 if (HuksFreshParamSet(paramSetUpdate, false) != 0 || HuksFreshParamSet(paramSetFinish, false) != 0) { 65 free(myData); 66 return false; 67 } 68#endif 69 uint8_t buffer2[1024]; 70 struct HksBlob out = { 71 .data = buffer2, 72 .size = sizeof(buffer2) 73 }; 74 75 (void)g_instance->HuksHdiInit(&key, paramSet, &handle, &out); 76 (void)g_instance->HuksHdiUpdate(&handle, paramSetUpdate, &inData, &out); 77 (void)g_instance->HuksHdiFinish(&handle, paramSetFinish, &inData, &out); 78 79 free(myData); 80 return true; 81} 82 83/* Fuzzer entry point */ 84extern "C" int32_t LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) 85{ 86 if (InitHuksCoreEngine(&g_instance) != 0) { 87 return -1; 88 } 89 DoSomethingInterestingWithMyAPI(data, size); 90 return 0; 91} 92