1e0857b17Sopenharmony_ci/* 2e0857b17Sopenharmony_ci * Copyright (c) 2022 Huawei Device Co., Ltd. 3e0857b17Sopenharmony_ci * Licensed under the Apache License, Version 2.0 (the "License"); 4e0857b17Sopenharmony_ci * you may not use this file except in compliance with the License. 5e0857b17Sopenharmony_ci * You may obtain a copy of the License at 6e0857b17Sopenharmony_ci * 7e0857b17Sopenharmony_ci * http://www.apache.org/licenses/LICENSE-2.0 8e0857b17Sopenharmony_ci * 9e0857b17Sopenharmony_ci * Unless required by applicable law or agreed to in writing, software 10e0857b17Sopenharmony_ci * distributed under the License is distributed on an "AS IS" BASIS, 11e0857b17Sopenharmony_ci * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12e0857b17Sopenharmony_ci * See the License for the specific language governing permissions and 13e0857b17Sopenharmony_ci * limitations under the License. 14e0857b17Sopenharmony_ci */ 15e0857b17Sopenharmony_ci 16e0857b17Sopenharmony_ci#include "wantparamsthird_fuzzer.h" 17e0857b17Sopenharmony_ci 18e0857b17Sopenharmony_ci#include <cstddef> 19e0857b17Sopenharmony_ci#include <cstdint> 20e0857b17Sopenharmony_ci#include <iostream> 21e0857b17Sopenharmony_ci 22e0857b17Sopenharmony_ci#define private public 23e0857b17Sopenharmony_ci#include "want_params.h" 24e0857b17Sopenharmony_ci#undef private 25e0857b17Sopenharmony_ci#include "zchar_wrapper.h" 26e0857b17Sopenharmony_ci#include "short_wrapper.h" 27e0857b17Sopenharmony_ci#include "double_wrapper.h" 28e0857b17Sopenharmony_ci#include "securec.h" 29e0857b17Sopenharmony_ci 30e0857b17Sopenharmony_ciusing namespace OHOS::AAFwk; 31e0857b17Sopenharmony_ci 32e0857b17Sopenharmony_cinamespace OHOS { 33e0857b17Sopenharmony_cinamespace { 34e0857b17Sopenharmony_ciconstexpr size_t FOO_MAX_LEN = 1024; 35e0857b17Sopenharmony_ciconstexpr size_t U32_AT_SIZE = 4; 36e0857b17Sopenharmony_ci} 37e0857b17Sopenharmony_ciuint32_t GetU32Data(const char* ptr) 38e0857b17Sopenharmony_ci{ 39e0857b17Sopenharmony_ci // convert fuzz input data to an integer 40e0857b17Sopenharmony_ci return (ptr[0] << 24) | (ptr[1] << 16) | (ptr[2] << 8) | ptr[3]; 41e0857b17Sopenharmony_ci} 42e0857b17Sopenharmony_cibool DoSomethingInterestingWithMyAPI(const char* data, size_t size) 43e0857b17Sopenharmony_ci{ 44e0857b17Sopenharmony_ci WantParams wantOther; 45e0857b17Sopenharmony_ci std::shared_ptr<WantParams> wantParams = std::make_shared<WantParams>(wantOther); 46e0857b17Sopenharmony_ci Parcel parcel; 47e0857b17Sopenharmony_ci char charValue = *data; 48e0857b17Sopenharmony_ci sptr<IInterface> charIt = Char::Box(charValue); 49e0857b17Sopenharmony_ci wantParams->WriteToParcelChar(parcel, charIt); 50e0857b17Sopenharmony_ci short shortValue = 0; 51e0857b17Sopenharmony_ci sptr<IInterface> shortIt = Short::Box(shortValue); 52e0857b17Sopenharmony_ci wantParams->WriteToParcelShort(parcel, shortIt); 53e0857b17Sopenharmony_ci double doubleValue = 0.0; 54e0857b17Sopenharmony_ci sptr<IInterface> doubleIt = Double::Box(doubleValue); 55e0857b17Sopenharmony_ci wantParams->WriteToParcelDouble(parcel, doubleIt); 56e0857b17Sopenharmony_ci IArray* ao = nullptr; 57e0857b17Sopenharmony_ci wantParams->WriteArrayToParcelString(parcel, ao); 58e0857b17Sopenharmony_ci wantParams->WriteArrayToParcelBool(parcel, ao); 59e0857b17Sopenharmony_ci wantParams->WriteArrayToParcelByte(parcel, ao); 60e0857b17Sopenharmony_ci wantParams->WriteArrayToParcelInt(parcel, ao); 61e0857b17Sopenharmony_ci wantParams->WriteArrayToParcelLong(parcel, ao); 62e0857b17Sopenharmony_ci wantParams->WriteArrayToParcelFloat(parcel, ao); 63e0857b17Sopenharmony_ci wantParams->WriteArrayToParcelDouble(parcel, ao); 64e0857b17Sopenharmony_ci return true; 65e0857b17Sopenharmony_ci} 66e0857b17Sopenharmony_ci} 67e0857b17Sopenharmony_ci 68e0857b17Sopenharmony_ci/* Fuzzer entry point */ 69e0857b17Sopenharmony_ciextern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) 70e0857b17Sopenharmony_ci{ 71e0857b17Sopenharmony_ci /* Run your code on data */ 72e0857b17Sopenharmony_ci if (data == nullptr) { 73e0857b17Sopenharmony_ci std::cout << "invalid data" << std::endl; 74e0857b17Sopenharmony_ci return 0; 75e0857b17Sopenharmony_ci } 76e0857b17Sopenharmony_ci 77e0857b17Sopenharmony_ci /* Validate the length of size */ 78e0857b17Sopenharmony_ci if (size > OHOS::FOO_MAX_LEN || size < OHOS::U32_AT_SIZE) { 79e0857b17Sopenharmony_ci return 0; 80e0857b17Sopenharmony_ci } 81e0857b17Sopenharmony_ci 82e0857b17Sopenharmony_ci char* ch = (char *)malloc(size + 1); 83e0857b17Sopenharmony_ci if (ch == nullptr) { 84e0857b17Sopenharmony_ci std::cout << "malloc failed." << std::endl; 85e0857b17Sopenharmony_ci return 0; 86e0857b17Sopenharmony_ci } 87e0857b17Sopenharmony_ci 88e0857b17Sopenharmony_ci (void)memset_s(ch, size + 1, 0x00, size + 1); 89e0857b17Sopenharmony_ci if (memcpy_s(ch, size, data, size) != EOK) { 90e0857b17Sopenharmony_ci std::cout << "copy failed." << std::endl; 91e0857b17Sopenharmony_ci free(ch); 92e0857b17Sopenharmony_ci ch = nullptr; 93e0857b17Sopenharmony_ci return 0; 94e0857b17Sopenharmony_ci } 95e0857b17Sopenharmony_ci 96e0857b17Sopenharmony_ci OHOS::DoSomethingInterestingWithMyAPI(ch, size); 97e0857b17Sopenharmony_ci free(ch); 98e0857b17Sopenharmony_ci ch = nullptr; 99e0857b17Sopenharmony_ci return 0; 100e0857b17Sopenharmony_ci} 101