1eace7efcSopenharmony_ci/* 2eace7efcSopenharmony_ci * Copyright (c) 2022 Huawei Device Co., Ltd. 3eace7efcSopenharmony_ci * Licensed under the Apache License, Version 2.0 (the "License"); 4eace7efcSopenharmony_ci * you may not use this file except in compliance with the License. 5eace7efcSopenharmony_ci * You may obtain a copy of the License at 6eace7efcSopenharmony_ci * 7eace7efcSopenharmony_ci * http://www.apache.org/licenses/LICENSE-2.0 8eace7efcSopenharmony_ci * 9eace7efcSopenharmony_ci * Unless required by applicable law or agreed to in writing, software 10eace7efcSopenharmony_ci * distributed under the License is distributed on an "AS IS" BASIS, 11eace7efcSopenharmony_ci * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12eace7efcSopenharmony_ci * See the License for the specific language governing permissions and 13eace7efcSopenharmony_ci * limitations under the License. 14eace7efcSopenharmony_ci */ 15eace7efcSopenharmony_ci 16eace7efcSopenharmony_ci#include "abilitymgrrest_fuzzer.h" 17eace7efcSopenharmony_ci 18eace7efcSopenharmony_ci#include <cstddef> 19eace7efcSopenharmony_ci#include <cstdint> 20eace7efcSopenharmony_ci 21eace7efcSopenharmony_ci#define private public 22eace7efcSopenharmony_ci#include "implicit_start_processor.h" 23eace7efcSopenharmony_ci#include "system_dialog_scheduler.h" 24eace7efcSopenharmony_ci#undef private 25eace7efcSopenharmony_ci#include "inner_mission_info.h" 26eace7efcSopenharmony_ci#include "parcel.h" 27eace7efcSopenharmony_ci#include "securec.h" 28eace7efcSopenharmony_ci 29eace7efcSopenharmony_ciusing namespace OHOS::AAFwk; 30eace7efcSopenharmony_ciusing namespace OHOS::AppExecFwk; 31eace7efcSopenharmony_ci 32eace7efcSopenharmony_cinamespace OHOS { 33eace7efcSopenharmony_cinamespace { 34eace7efcSopenharmony_ciconstexpr int INPUT_ZERO = 0; 35eace7efcSopenharmony_ciconstexpr int INPUT_ONE = 1; 36eace7efcSopenharmony_ciconstexpr int INPUT_TWO = 2; 37eace7efcSopenharmony_ciconstexpr int INPUT_THREE = 3; 38eace7efcSopenharmony_ciconstexpr size_t FOO_MAX_LEN = 1024; 39eace7efcSopenharmony_ciconstexpr size_t U32_AT_SIZE = 4; 40eace7efcSopenharmony_ciconstexpr size_t OFFSET_ZERO = 24; 41eace7efcSopenharmony_ciconstexpr size_t OFFSET_ONE = 16; 42eace7efcSopenharmony_ciconstexpr size_t OFFSET_TWO = 8; 43eace7efcSopenharmony_ci} 44eace7efcSopenharmony_ciuint32_t GetU32Data(const char* ptr) 45eace7efcSopenharmony_ci{ 46eace7efcSopenharmony_ci // convert fuzz input data to an integer 47eace7efcSopenharmony_ci return (ptr[INPUT_ZERO] << OFFSET_ZERO) | (ptr[INPUT_ONE] << OFFSET_ONE) | (ptr[INPUT_TWO] << OFFSET_TWO) | 48eace7efcSopenharmony_ci ptr[INPUT_THREE]; 49eace7efcSopenharmony_ci} 50eace7efcSopenharmony_cibool DoSomethingInterestingWithMyAPI(const char* data, size_t size) 51eace7efcSopenharmony_ci{ 52eace7efcSopenharmony_ci int pid = static_cast<int>(GetU32Data(data)); 53eace7efcSopenharmony_ci std::string bundleName(data, size); 54eace7efcSopenharmony_ci Parcel wantParcel; 55eace7efcSopenharmony_ci Want* want = nullptr; 56eace7efcSopenharmony_ci if (wantParcel.WriteBuffer(data, size)) { 57eace7efcSopenharmony_ci want = Want::Unmarshalling(wantParcel); 58eace7efcSopenharmony_ci } 59eace7efcSopenharmony_ci std::shared_ptr<SystemDialogScheduler> systemDialogScheduler = std::make_shared<SystemDialogScheduler>(); 60eace7efcSopenharmony_ci std::vector<DialogAppInfo> dialogAppInfos; 61eace7efcSopenharmony_ci systemDialogScheduler->GetSelectorParams(dialogAppInfos); 62eace7efcSopenharmony_ci InnerMissionInfo innerMissionInfo; 63eace7efcSopenharmony_ci innerMissionInfo.ToJsonStr(); 64eace7efcSopenharmony_ci std::string jsonStr(data, size); 65eace7efcSopenharmony_ci innerMissionInfo.FromJsonStr(jsonStr); 66eace7efcSopenharmony_ci std::vector<std::string> info; 67eace7efcSopenharmony_ci innerMissionInfo.Dump(info); 68eace7efcSopenharmony_ci nlohmann::json value; 69eace7efcSopenharmony_ci std::string node(data, size); 70eace7efcSopenharmony_ci JsonType jsonType = JsonType::STRING; 71eace7efcSopenharmony_ci return innerMissionInfo.CheckJsonNode(value, node, jsonType); 72eace7efcSopenharmony_ci} 73eace7efcSopenharmony_ci} 74eace7efcSopenharmony_ci 75eace7efcSopenharmony_ci/* Fuzzer entry point */ 76eace7efcSopenharmony_ciextern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) 77eace7efcSopenharmony_ci{ 78eace7efcSopenharmony_ci /* Run your code on data */ 79eace7efcSopenharmony_ci if (data == nullptr) { 80eace7efcSopenharmony_ci std::cout << "invalid data" << std::endl; 81eace7efcSopenharmony_ci return 0; 82eace7efcSopenharmony_ci } 83eace7efcSopenharmony_ci 84eace7efcSopenharmony_ci /* Validate the length of size */ 85eace7efcSopenharmony_ci if (size > OHOS::FOO_MAX_LEN || size < OHOS::U32_AT_SIZE) { 86eace7efcSopenharmony_ci return 0; 87eace7efcSopenharmony_ci } 88eace7efcSopenharmony_ci 89eace7efcSopenharmony_ci char* ch = (char*)malloc(size + 1); 90eace7efcSopenharmony_ci if (ch == nullptr) { 91eace7efcSopenharmony_ci std::cout << "malloc failed." << std::endl; 92eace7efcSopenharmony_ci return 0; 93eace7efcSopenharmony_ci } 94eace7efcSopenharmony_ci 95eace7efcSopenharmony_ci (void)memset_s(ch, size + 1, 0x00, size + 1); 96eace7efcSopenharmony_ci if (memcpy_s(ch, size, data, size) != EOK) { 97eace7efcSopenharmony_ci std::cout << "copy failed." << std::endl; 98eace7efcSopenharmony_ci free(ch); 99eace7efcSopenharmony_ci ch = nullptr; 100eace7efcSopenharmony_ci return 0; 101eace7efcSopenharmony_ci } 102eace7efcSopenharmony_ci 103eace7efcSopenharmony_ci OHOS::DoSomethingInterestingWithMyAPI(ch, size); 104eace7efcSopenharmony_ci free(ch); 105eace7efcSopenharmony_ci ch = nullptr; 106eace7efcSopenharmony_ci return 0; 107eace7efcSopenharmony_ci} 108eace7efcSopenharmony_ci 109