1e0857b17Sopenharmony_ci/* 2e0857b17Sopenharmony_ci * Copyright (c) 2022 Huawei Device Co., Ltd. 3e0857b17Sopenharmony_ci * Licensed under the Apache License, Version 2.0 (the "License"); 4e0857b17Sopenharmony_ci * you may not use this file except in compliance with the License. 5e0857b17Sopenharmony_ci * You may obtain a copy of the License at 6e0857b17Sopenharmony_ci * 7e0857b17Sopenharmony_ci * http://www.apache.org/licenses/LICENSE-2.0 8e0857b17Sopenharmony_ci * 9e0857b17Sopenharmony_ci * Unless required by applicable law or agreed to in writing, software 10e0857b17Sopenharmony_ci * distributed under the License is distributed on an "AS IS" BASIS, 11e0857b17Sopenharmony_ci * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12e0857b17Sopenharmony_ci * See the License for the specific language governing permissions and 13e0857b17Sopenharmony_ci * limitations under the License. 14e0857b17Sopenharmony_ci */ 15e0857b17Sopenharmony_ci 16e0857b17Sopenharmony_ci#include "wantparamssecond_fuzzer.h" 17e0857b17Sopenharmony_ci 18e0857b17Sopenharmony_ci#include <cstddef> 19e0857b17Sopenharmony_ci#include <cstdint> 20e0857b17Sopenharmony_ci#include <iostream> 21e0857b17Sopenharmony_ci 22e0857b17Sopenharmony_ci#define private public 23e0857b17Sopenharmony_ci#include "want_params.h" 24e0857b17Sopenharmony_ci#undef private 25e0857b17Sopenharmony_ci#include "float_wrapper.h" 26e0857b17Sopenharmony_ci#include "securec.h" 27e0857b17Sopenharmony_ci 28e0857b17Sopenharmony_ciusing namespace OHOS::AAFwk; 29e0857b17Sopenharmony_ci 30e0857b17Sopenharmony_cinamespace OHOS { 31e0857b17Sopenharmony_cinamespace { 32e0857b17Sopenharmony_ciconstexpr size_t FOO_MAX_LEN = 1024; 33e0857b17Sopenharmony_ciconstexpr size_t U32_AT_SIZE = 4; 34e0857b17Sopenharmony_ci} 35e0857b17Sopenharmony_ciuint32_t GetU32Data(const char* ptr) 36e0857b17Sopenharmony_ci{ 37e0857b17Sopenharmony_ci // convert fuzz input data to an integer 38e0857b17Sopenharmony_ci return (ptr[0] << 24) | (ptr[1] << 16) | (ptr[2] << 8) | ptr[3]; 39e0857b17Sopenharmony_ci} 40e0857b17Sopenharmony_cibool DoSomethingInterestingWithMyAPI(const char* data, size_t size) 41e0857b17Sopenharmony_ci{ 42e0857b17Sopenharmony_ci WantParams wantOther; 43e0857b17Sopenharmony_ci std::shared_ptr<WantParams> wantParams = std::make_shared<WantParams>(wantOther); 44e0857b17Sopenharmony_ci Parcel parcel; 45e0857b17Sopenharmony_ci IArray* ao = nullptr; 46e0857b17Sopenharmony_ci wantParams->WriteArrayToParcelChar(parcel, ao); 47e0857b17Sopenharmony_ci wantParams->WriteArrayToParcelShort(parcel, ao); 48e0857b17Sopenharmony_ci wantParams->WriteToParcelFD(parcel, wantOther); 49e0857b17Sopenharmony_ci wantParams->WriteToParcelRemoteObject(parcel, wantOther); 50e0857b17Sopenharmony_ci float floatValue = 0.0; 51e0857b17Sopenharmony_ci sptr<IInterface> floatIt = Float::Box(floatValue); 52e0857b17Sopenharmony_ci wantParams->WriteToParcelFloat(parcel, floatIt); 53e0857b17Sopenharmony_ci int depth = static_cast<int>(GetU32Data(data)); 54e0857b17Sopenharmony_ci wantParams->WriteArrayToParcelWantParams(parcel, ao, depth); 55e0857b17Sopenharmony_ci sptr<IArray> array; 56e0857b17Sopenharmony_ci wantParams->ReadFromParcelArrayChar(parcel, array); 57e0857b17Sopenharmony_ci wantParams->ReadFromParcelArrayShort(parcel, array); 58e0857b17Sopenharmony_ci std::string key(data ,size); 59e0857b17Sopenharmony_ci int type = static_cast<int>(GetU32Data(data)); 60e0857b17Sopenharmony_ci wantParams->ReadFromParcelWantParamWrapper(parcel, key, type, 1); 61e0857b17Sopenharmony_ci wantParams->ReadFromParcelFD(parcel, key); 62e0857b17Sopenharmony_ci wantParams->ReadFromParcelRemoteObject(parcel, key); 63e0857b17Sopenharmony_ci wantParams->ReadFromParcelFloat(parcel, key); 64e0857b17Sopenharmony_ci return true; 65e0857b17Sopenharmony_ci} 66e0857b17Sopenharmony_ci} 67e0857b17Sopenharmony_ci 68e0857b17Sopenharmony_ci/* Fuzzer entry point */ 69e0857b17Sopenharmony_ciextern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) 70e0857b17Sopenharmony_ci{ 71e0857b17Sopenharmony_ci /* Run your code on data */ 72e0857b17Sopenharmony_ci if (data == nullptr) { 73e0857b17Sopenharmony_ci std::cout << "invalid data" << std::endl; 74e0857b17Sopenharmony_ci return 0; 75e0857b17Sopenharmony_ci } 76e0857b17Sopenharmony_ci 77e0857b17Sopenharmony_ci /* Validate the length of size */ 78e0857b17Sopenharmony_ci if (size > OHOS::FOO_MAX_LEN || size < OHOS::U32_AT_SIZE) { 79e0857b17Sopenharmony_ci return 0; 80e0857b17Sopenharmony_ci } 81e0857b17Sopenharmony_ci 82e0857b17Sopenharmony_ci char* ch = (char *)malloc(size + 1); 83e0857b17Sopenharmony_ci if (ch == nullptr) { 84e0857b17Sopenharmony_ci std::cout << "malloc failed." << std::endl; 85e0857b17Sopenharmony_ci return 0; 86e0857b17Sopenharmony_ci } 87e0857b17Sopenharmony_ci 88e0857b17Sopenharmony_ci (void)memset_s(ch, size + 1, 0x00, size + 1); 89e0857b17Sopenharmony_ci if (memcpy_s(ch, size, data, size) != EOK) { 90e0857b17Sopenharmony_ci std::cout << "copy failed." << std::endl; 91e0857b17Sopenharmony_ci free(ch); 92e0857b17Sopenharmony_ci ch = nullptr; 93e0857b17Sopenharmony_ci return 0; 94e0857b17Sopenharmony_ci } 95e0857b17Sopenharmony_ci 96e0857b17Sopenharmony_ci OHOS::DoSomethingInterestingWithMyAPI(ch, size); 97e0857b17Sopenharmony_ci free(ch); 98e0857b17Sopenharmony_ci ch = nullptr; 99e0857b17Sopenharmony_ci return 0; 100e0857b17Sopenharmony_ci} 101