1eace7efcSopenharmony_ci/* 2eace7efcSopenharmony_ci * Copyright (c) 2022 Huawei Device Co., Ltd. 3eace7efcSopenharmony_ci * Licensed under the Apache License, Version 2.0 (the "License"); 4eace7efcSopenharmony_ci * you may not use this file except in compliance with the License. 5eace7efcSopenharmony_ci * You may obtain a copy of the License at 6eace7efcSopenharmony_ci * 7eace7efcSopenharmony_ci * http://www.apache.org/licenses/LICENSE-2.0 8eace7efcSopenharmony_ci * 9eace7efcSopenharmony_ci * Unless required by applicable law or agreed to in writing, software 10eace7efcSopenharmony_ci * distributed under the License is distributed on an "AS IS" BASIS, 11eace7efcSopenharmony_ci * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12eace7efcSopenharmony_ci * See the License for the specific language governing permissions and 13eace7efcSopenharmony_ci * limitations under the License. 14eace7efcSopenharmony_ci */ 15eace7efcSopenharmony_ci 16eace7efcSopenharmony_ci#include "abilityschedulerstub_fuzzer.h" 17eace7efcSopenharmony_ci 18eace7efcSopenharmony_ci#include <cstddef> 19eace7efcSopenharmony_ci#include <cstdint> 20eace7efcSopenharmony_ci 21eace7efcSopenharmony_ci#include "ability_scheduler_stub.h" 22eace7efcSopenharmony_ci#include "message_parcel.h" 23eace7efcSopenharmony_ci#include "securec.h" 24eace7efcSopenharmony_ci 25eace7efcSopenharmony_ciusing namespace OHOS::AAFwk; 26eace7efcSopenharmony_ci 27eace7efcSopenharmony_cinamespace OHOS { 28eace7efcSopenharmony_cinamespace { 29eace7efcSopenharmony_ciconstexpr int INPUT_ZERO = 0; 30eace7efcSopenharmony_ciconstexpr int INPUT_ONE = 1; 31eace7efcSopenharmony_ciconstexpr int INPUT_TWO = 2; 32eace7efcSopenharmony_ciconstexpr int INPUT_THREE = 3; 33eace7efcSopenharmony_ciconstexpr size_t FOO_MAX_LEN = 1024; 34eace7efcSopenharmony_ciconstexpr size_t U32_AT_SIZE = 4; 35eace7efcSopenharmony_ciconstexpr size_t OFFSET_ZERO = 24; 36eace7efcSopenharmony_ciconstexpr size_t OFFSET_ONE = 16; 37eace7efcSopenharmony_ciconstexpr size_t OFFSET_TWO = 8; 38eace7efcSopenharmony_ciconst std::u16string ABILITYMGR_INTERFACE_TOKEN = u"ohos.aafwk.AbilityScheduler"; 39eace7efcSopenharmony_ci} 40eace7efcSopenharmony_ciclass AbilitySchedulerStubFuzzTest : public AbilitySchedulerStub { 41eace7efcSopenharmony_cipublic: 42eace7efcSopenharmony_ci AbilitySchedulerStubFuzzTest() = default; 43eace7efcSopenharmony_ci virtual ~AbilitySchedulerStubFuzzTest() 44eace7efcSopenharmony_ci {}; 45eace7efcSopenharmony_ci bool ScheduleAbilityTransaction(const Want& want, const LifeCycleStateInfo& targetState, 46eace7efcSopenharmony_ci sptr<SessionInfo> sessionInfo = nullptr) override 47eace7efcSopenharmony_ci { 48eace7efcSopenharmony_ci return true; 49eace7efcSopenharmony_ci } 50eace7efcSopenharmony_ci void ScheduleShareData(const int32_t &uniqueId) override 51eace7efcSopenharmony_ci {} 52eace7efcSopenharmony_ci void SendResult(int requestCode, int resultCode, const Want& resultWant) override 53eace7efcSopenharmony_ci {} 54eace7efcSopenharmony_ci void ScheduleConnectAbility(const Want& want) override 55eace7efcSopenharmony_ci {} 56eace7efcSopenharmony_ci void ScheduleDisconnectAbility(const Want& want) override 57eace7efcSopenharmony_ci {} 58eace7efcSopenharmony_ci void ScheduleCommandAbility(const Want& want, bool restart, int startId) override 59eace7efcSopenharmony_ci {} 60eace7efcSopenharmony_ci void ScheduleCommandAbilityWindow(const Want &want, const sptr<SessionInfo> &sessionInfo, 61eace7efcSopenharmony_ci WindowCommand winCmd) override 62eace7efcSopenharmony_ci {} 63eace7efcSopenharmony_ci bool SchedulePrepareTerminateAbility() override 64eace7efcSopenharmony_ci { 65eace7efcSopenharmony_ci return true; 66eace7efcSopenharmony_ci } 67eace7efcSopenharmony_ci void ScheduleSaveAbilityState() override 68eace7efcSopenharmony_ci {} 69eace7efcSopenharmony_ci void ScheduleRestoreAbilityState(const PacMap& inState) override 70eace7efcSopenharmony_ci {} 71eace7efcSopenharmony_ci std::vector<std::string> GetFileTypes(const Uri& uri, const std::string& mimeTypeFilter) override 72eace7efcSopenharmony_ci { 73eace7efcSopenharmony_ci return {}; 74eace7efcSopenharmony_ci } 75eace7efcSopenharmony_ci int OpenFile(const Uri& uri, const std::string& mode) override 76eace7efcSopenharmony_ci { 77eace7efcSopenharmony_ci return 0; 78eace7efcSopenharmony_ci } 79eace7efcSopenharmony_ci int OpenRawFile(const Uri& uri, const std::string& mode) override 80eace7efcSopenharmony_ci { 81eace7efcSopenharmony_ci return 0; 82eace7efcSopenharmony_ci } 83eace7efcSopenharmony_ci int Insert(const Uri& uri, const NativeRdb::ValuesBucket& value) override 84eace7efcSopenharmony_ci { 85eace7efcSopenharmony_ci return 0; 86eace7efcSopenharmony_ci } 87eace7efcSopenharmony_ci int Update(const Uri& uri, const NativeRdb::ValuesBucket& value, 88eace7efcSopenharmony_ci const NativeRdb::DataAbilityPredicates& predicates) override 89eace7efcSopenharmony_ci { 90eace7efcSopenharmony_ci return 0; 91eace7efcSopenharmony_ci } 92eace7efcSopenharmony_ci int Delete(const Uri& uri, const NativeRdb::DataAbilityPredicates& predicates) override 93eace7efcSopenharmony_ci { 94eace7efcSopenharmony_ci return 0; 95eace7efcSopenharmony_ci } 96eace7efcSopenharmony_ci std::shared_ptr<AppExecFwk::PacMap> Call( 97eace7efcSopenharmony_ci const Uri& uri, const std::string& method, const std::string& arg, const AppExecFwk::PacMap& pacMap) override 98eace7efcSopenharmony_ci { 99eace7efcSopenharmony_ci return {}; 100eace7efcSopenharmony_ci } 101eace7efcSopenharmony_ci std::shared_ptr<NativeRdb::AbsSharedResultSet> Query(const Uri& uri, 102eace7efcSopenharmony_ci std::vector<std::string>& columns, const NativeRdb::DataAbilityPredicates& predicates) override 103eace7efcSopenharmony_ci { 104eace7efcSopenharmony_ci return {}; 105eace7efcSopenharmony_ci } 106eace7efcSopenharmony_ci std::string GetType(const Uri& uri) override 107eace7efcSopenharmony_ci { 108eace7efcSopenharmony_ci return {}; 109eace7efcSopenharmony_ci } 110eace7efcSopenharmony_ci bool Reload(const Uri& uri, const PacMap& extras) override 111eace7efcSopenharmony_ci { 112eace7efcSopenharmony_ci return true; 113eace7efcSopenharmony_ci } 114eace7efcSopenharmony_ci int BatchInsert(const Uri& uri, const std::vector<NativeRdb::ValuesBucket>& values) override 115eace7efcSopenharmony_ci { 116eace7efcSopenharmony_ci return 0; 117eace7efcSopenharmony_ci } 118eace7efcSopenharmony_ci bool ScheduleRegisterObserver(const Uri& uri, const sptr<IDataAbilityObserver>& dataObserver) override 119eace7efcSopenharmony_ci { 120eace7efcSopenharmony_ci return true; 121eace7efcSopenharmony_ci } 122eace7efcSopenharmony_ci bool ScheduleUnregisterObserver(const Uri& uri, const sptr<IDataAbilityObserver>& dataObserver) override 123eace7efcSopenharmony_ci { 124eace7efcSopenharmony_ci return true; 125eace7efcSopenharmony_ci } 126eace7efcSopenharmony_ci bool ScheduleNotifyChange(const Uri& uri) override 127eace7efcSopenharmony_ci { 128eace7efcSopenharmony_ci return true; 129eace7efcSopenharmony_ci } 130eace7efcSopenharmony_ci Uri NormalizeUri(const Uri& uri) override 131eace7efcSopenharmony_ci { 132eace7efcSopenharmony_ci return Uri{ "abilityschedulerstub" }; 133eace7efcSopenharmony_ci } 134eace7efcSopenharmony_ci 135eace7efcSopenharmony_ci Uri DenormalizeUri(const Uri& uri) override 136eace7efcSopenharmony_ci { 137eace7efcSopenharmony_ci return Uri{ "abilityschedulerstub" }; 138eace7efcSopenharmony_ci } 139eace7efcSopenharmony_ci std::vector<std::shared_ptr<AppExecFwk::DataAbilityResult>> ExecuteBatch( 140eace7efcSopenharmony_ci const std::vector<std::shared_ptr<AppExecFwk::DataAbilityOperation>>& operations) override 141eace7efcSopenharmony_ci { 142eace7efcSopenharmony_ci return {}; 143eace7efcSopenharmony_ci } 144eace7efcSopenharmony_ci void ContinueAbility(const std::string& deviceId, uint32_t versionCode) override 145eace7efcSopenharmony_ci {} 146eace7efcSopenharmony_ci void NotifyContinuationResult(int32_t result) override 147eace7efcSopenharmony_ci {} 148eace7efcSopenharmony_ci void DumpAbilityInfo(const std::vector<std::string>& params, std::vector<std::string>& info) override 149eace7efcSopenharmony_ci {} 150eace7efcSopenharmony_ci void CallRequest() override 151eace7efcSopenharmony_ci { 152eace7efcSopenharmony_ci return; 153eace7efcSopenharmony_ci } 154eace7efcSopenharmony_ci void OnExecuteIntent(const Want &want) override 155eace7efcSopenharmony_ci {} 156eace7efcSopenharmony_ci}; 157eace7efcSopenharmony_ci 158eace7efcSopenharmony_ciuint32_t GetU32Data(const char* ptr) 159eace7efcSopenharmony_ci{ 160eace7efcSopenharmony_ci // convert fuzz input data to an integer 161eace7efcSopenharmony_ci return (ptr[INPUT_ZERO] << OFFSET_ZERO) | (ptr[INPUT_ONE] << OFFSET_ONE) | (ptr[INPUT_TWO] << OFFSET_TWO) | 162eace7efcSopenharmony_ci ptr[INPUT_THREE]; 163eace7efcSopenharmony_ci} 164eace7efcSopenharmony_ci 165eace7efcSopenharmony_cibool DoSomethingInterestingWithMyAPI(const char* data, size_t size) 166eace7efcSopenharmony_ci{ 167eace7efcSopenharmony_ci uint32_t code = GetU32Data(data); 168eace7efcSopenharmony_ci 169eace7efcSopenharmony_ci MessageParcel parcel; 170eace7efcSopenharmony_ci parcel.WriteInterfaceToken(ABILITYMGR_INTERFACE_TOKEN); 171eace7efcSopenharmony_ci parcel.WriteBuffer(data, size); 172eace7efcSopenharmony_ci parcel.RewindRead(0); 173eace7efcSopenharmony_ci MessageParcel reply; 174eace7efcSopenharmony_ci MessageOption option; 175eace7efcSopenharmony_ci 176eace7efcSopenharmony_ci std::shared_ptr<AbilitySchedulerStub> abilityschedulerstub = std::make_shared<AbilitySchedulerStubFuzzTest>(); 177eace7efcSopenharmony_ci 178eace7efcSopenharmony_ci if (abilityschedulerstub->OnRemoteRequest(code, parcel, reply, option) != 0) { 179eace7efcSopenharmony_ci return false; 180eace7efcSopenharmony_ci } 181eace7efcSopenharmony_ci 182eace7efcSopenharmony_ci return true; 183eace7efcSopenharmony_ci} 184eace7efcSopenharmony_ci} 185eace7efcSopenharmony_ci 186eace7efcSopenharmony_ci/* Fuzzer entry point */ 187eace7efcSopenharmony_ciextern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) 188eace7efcSopenharmony_ci{ 189eace7efcSopenharmony_ci /* Run your code on data */ 190eace7efcSopenharmony_ci if (data == nullptr) { 191eace7efcSopenharmony_ci std::cout << "invalid data" << std::endl; 192eace7efcSopenharmony_ci return 0; 193eace7efcSopenharmony_ci } 194eace7efcSopenharmony_ci 195eace7efcSopenharmony_ci /* Validate the length of size */ 196eace7efcSopenharmony_ci if (size > OHOS::FOO_MAX_LEN || size < OHOS::U32_AT_SIZE) { 197eace7efcSopenharmony_ci return 0; 198eace7efcSopenharmony_ci } 199eace7efcSopenharmony_ci 200eace7efcSopenharmony_ci char* ch = (char*)malloc(size + 1); 201eace7efcSopenharmony_ci if (ch == nullptr) { 202eace7efcSopenharmony_ci std::cout << "malloc failed." << std::endl; 203eace7efcSopenharmony_ci return 0; 204eace7efcSopenharmony_ci } 205eace7efcSopenharmony_ci 206eace7efcSopenharmony_ci (void)memset_s(ch, size + 1, 0x00, size + 1); 207eace7efcSopenharmony_ci if (memcpy_s(ch, size, data, size) != EOK) { 208eace7efcSopenharmony_ci std::cout << "copy failed." << std::endl; 209eace7efcSopenharmony_ci free(ch); 210eace7efcSopenharmony_ci ch = nullptr; 211eace7efcSopenharmony_ci return 0; 212eace7efcSopenharmony_ci } 213eace7efcSopenharmony_ci 214eace7efcSopenharmony_ci OHOS::DoSomethingInterestingWithMyAPI(ch, size); 215eace7efcSopenharmony_ci free(ch); 216eace7efcSopenharmony_ci ch = nullptr; 217eace7efcSopenharmony_ci return 0; 218eace7efcSopenharmony_ci} 219eace7efcSopenharmony_ci 220