1/* 2 * Copyright (c) 2024 Huawei Device Co., Ltd. 3 * Licensed under the Apache License, Version 2.0 (the "License"); 4 * you may not use this file except in compliance with the License. 5 * You may obtain a copy of the License at 6 * 7 * http://www.apache.org/licenses/LICENSE-2.0 8 * 9 * Unless required by applicable law or agreed to in writing, software 10 * distributed under the License is distributed on an "AS IS" BASIS, 11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 * See the License for the specific language governing permissions and 13 * limitations under the License. 14 */ 15 16#include "missioninfomgra_fuzzer.h" 17 18#include <cstddef> 19#include <cstdint> 20 21#define private public 22#include "mission_info_mgr.h" 23#undef private 24 25#include "ability_record.h" 26 27using namespace OHOS::AAFwk; 28using namespace OHOS::AppExecFwk; 29 30namespace OHOS { 31namespace { 32constexpr size_t FOO_MAX_LEN = 1024; 33constexpr size_t U32_AT_SIZE = 4; 34} 35 36uint32_t GetU32Data(const char* ptr) 37{ 38 // convert fuzz input data to an integer 39 return (ptr[0] << 24) | (ptr[1] << 16) | (ptr[2] << 8) | ptr[3]; 40} 41 42bool DoSomethingInterestingWithMyAPI(const char* data, size_t size) 43{ 44 int intParam = static_cast<int>(GetU32Data(data)); 45 int32_t int32Param = static_cast<int32_t>(GetU32Data(data)); 46 InnerMissionInfo innerMissionInfo; 47 48 // fuzz for MissionInfoMgr 49 auto missionInfoMgr = std::make_shared<MissionInfoMgr>(); 50 missionInfoMgr->GenerateMissionId(int32Param); 51 missionInfoMgr->taskDataPersistenceMgr_ = DelayedSingleton<TaskDataPersistenceMgr>::GetInstance(); 52 missionInfoMgr->AddMissionInfo(innerMissionInfo); 53 missionInfoMgr->UpdateMissionInfo(innerMissionInfo); 54 missionInfoMgr->DeleteMissionInfo(intParam); 55 56 return true; 57} 58} 59 60/* Fuzzer entry point */ 61extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) 62{ 63 /* Run your code on data */ 64 if (data == nullptr) { 65 return 0; 66 } 67 68 /* Validate the length of size */ 69 if (size < OHOS::U32_AT_SIZE || size > OHOS::FOO_MAX_LEN) { 70 return 0; 71 } 72 73 char* ch = (char*)malloc(size + 1); 74 if (ch == nullptr) { 75 std::cout << "malloc failed." << std::endl; 76 return 0; 77 } 78 79 (void)memset_s(ch, size + 1, 0x00, size + 1); 80 if (memcpy_s(ch, size, data, size) != EOK) { 81 std::cout << "copy failed." << std::endl; 82 free(ch); 83 ch = nullptr; 84 return 0; 85 } 86 87 OHOS::DoSomethingInterestingWithMyAPI(ch, size); 88 free(ch); 89 ch = nullptr; 90 return 0; 91}