1/* 2 * Copyright (c) 2024 Huawei Device Co., Ltd. 3 * Licensed under the Apache License, Version 2.0 (the "License"); 4 * you may not use this file except in compliance with the License. 5 * You may obtain a copy of the License at 6 * 7 * http://www.apache.org/licenses/LICENSE-2.0 8 * 9 * Unless required by applicable law or agreed to in writing, software 10 * distributed under the License is distributed on an "AS IS" BASIS, 11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 * See the License for the specific language governing permissions and 13 * limitations under the License. 14 */ 15 16#include "toolstestobserver_fuzzer.h" 17 18#include <cstddef> 19#include <cstdint> 20#include "securec.h" 21#include <iostream> 22#define private public 23#include "test_observer.h" 24#undef private 25 26using namespace OHOS::AAFwk; 27 28namespace OHOS { 29namespace { 30constexpr int INPUT_ZERO = 0; 31constexpr int INPUT_ONE = 1; 32constexpr int INPUT_TWO = 2; 33constexpr int INPUT_THREE = 3; 34constexpr size_t FOO_MAX_LEN = 1024; 35constexpr size_t U32_AT_SIZE = 4; 36constexpr size_t OFFSET_ZERO = 24; 37constexpr size_t OFFSET_ONE = 16; 38constexpr size_t OFFSET_TWO = 8; 39} // namespace 40 41uint32_t GetU32Data(const char* ptr) 42{ 43 // convert fuzz input data to an integer 44 return (ptr[INPUT_ZERO] << OFFSET_ZERO) | (ptr[INPUT_ONE] << OFFSET_ONE) | (ptr[INPUT_TWO] << OFFSET_TWO) | 45 ptr[INPUT_THREE]; 46} 47 48bool DoSomethingInterestingWithMyAPI(const char *data, size_t size) 49{ 50 std::shared_ptr<TestObserver> testObserver = std::make_shared<TestObserver>(); 51 std::string stringParam(data, size); 52 std::string cmd(data, size); 53 int64_t resultCode = static_cast<int64_t>(GetU32Data(data)); 54 int64_t timeoutSec = static_cast<int64_t>(GetU32Data(data)); 55 int64_t timeoutMs = static_cast<int64_t>(GetU32Data(data)); 56 57 testObserver-> TestStatus(stringParam, resultCode); 58 testObserver-> ExecuteShellCommand(cmd, timeoutSec); 59 testObserver->TestFinished(stringParam, resultCode); 60 testObserver-> WaitForFinish(timeoutMs); 61 62 return true; 63} 64} // namespace OHOS 65 66/* Fuzzer entry point */ 67extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) 68{ 69 /* Run your code on data */ 70 if (data == nullptr) { 71 std::cout << "invalid data" << std::endl; 72 return 0; 73 } 74 75 /* Validate the length of size */ 76 if (size > OHOS::FOO_MAX_LEN || size < OHOS::U32_AT_SIZE) { 77 return 0; 78 } 79 80 char *ch = (char *)malloc(size + 1); 81 if (ch == nullptr) { 82 std::cout << "malloc failed." << std::endl; 83 return 0; 84 } 85 86 (void)memset_s(ch, size + 1, 0x00, size + 1); 87 if (memcpy_s(ch, size + 1, data, size) != EOK) { 88 std::cout << "copy failed." << std::endl; 89 free(ch); 90 ch = nullptr; 91 return 0; 92 } 93 94 OHOS::DoSomethingInterestingWithMyAPI(ch, size); 95 free(ch); 96 ch = nullptr; 97 return 0; 98}