xref: /foundation/communication/netstack/test/fuzztest/netsslinner_fuzzer/netssl_inner_fuzzer.cpp

/*
 * Copyright (c) 2024 Huawei Device Co., Ltd.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#include <cstring>
#include <map>
#include <securec.h>
#include <string>
#include <vector>

#include "net_ssl.h"
#include "net_ssl_c.h"
#include "net_ssl_c_type.h"
#include "net_ssl_type.h"
#include "net_ssl_verify_cert.h"
#include "netstack_log.h"
#include "secure_char.h"

namespace OHOS {
namespace NetStack {
namespace Ssl {
namespace {

const uint8_t *g_baseFuzzData = nullptr;
size_t g_baseFuzzSize = 0;
size_t g_baseFuzzPos = 0;
[[maybe_unused]] constexpr size_t STR_LEN = 255;
} // namespace
template <class T> T GetData()
{
    T object{};
    size_t objectSize = sizeof(object);
    if (g_baseFuzzData == nullptr || g_baseFuzzSize <= g_baseFuzzPos || objectSize > g_baseFuzzSize - g_baseFuzzPos) {
        return object;
    }
    errno_t ret = memcpy_s(&object, objectSize, g_baseFuzzData + g_baseFuzzPos, objectSize);
    if (ret != EOK) {
        return object;
    }
    g_baseFuzzPos += objectSize;
    return object;
}

void SetGlobalFuzzData(const uint8_t *data, size_t size)
{
    g_baseFuzzData = data;
    g_baseFuzzSize = size;
    g_baseFuzzPos = 0;
}

std::string GetStringFromData(int strlen)
{
    if (strlen < 1) {
        return "";
    }

    char cstr[strlen];
    cstr[strlen - 1] = '\0';
    for (int i = 0; i < strlen - 1; i++) {
        cstr[i] = GetData<char>();
    }
    std::string str(cstr);
    return str;
}

uint8_t *stringToUint8(const std::string &str)
{
    uint8_t *data = new uint8_t[str.size() + 1];
    for (size_t i = 0; i < str.size(); ++i) {
        data[i] = static_cast<uint8_t>(str[i]);
    }
    data[str.size()] = '\0';
    return data;
}

void SetNetStackVerifyCertificationTestOne(const uint8_t *data, size_t size)
{
    if ((data == nullptr) || (size < 1)) {
        return;
    }
    SetGlobalFuzzData(data, size);
    std::string str = GetStringFromData(STR_LEN);
    CertBlob certBlob;
    certBlob.type = CERT_TYPE_PEM;
    certBlob.size = str.size();
    certBlob.data = stringToUint8(str);
    NetStackVerifyCertification(&certBlob);
    delete[] certBlob.data;
    certBlob.data = nullptr;
}

void SetNetStackVerifyCertificationTestTwo(const uint8_t *data, size_t size)
{
    if ((data == nullptr) || (size < 1)) {
        return;
    }
    SetGlobalFuzzData(data, size);
    std::string str = GetStringFromData(STR_LEN);
    CertBlob certBlob;
    certBlob.type = CERT_TYPE_PEM;
    certBlob.size = str.size();
    certBlob.data = stringToUint8(str);
    NetStackVerifyCertification(&certBlob, &certBlob);
    delete[] certBlob.data;
    certBlob.data = nullptr;
}

void SetVerifyCertTestOne(const uint8_t *data, size_t size)
{
    if ((data == nullptr) || (size < 1)) {
        return;
    }
    SetGlobalFuzzData(data, size);
    std::string str = GetStringFromData(STR_LEN);
    CertBlob certBlob;
    certBlob.type = CERT_TYPE_PEM;
    certBlob.size = str.size();
    certBlob.data = stringToUint8(str);
    VerifyCert(&certBlob);
    delete[] certBlob.data;
    certBlob.data = nullptr;
}

void SetVerifyCertTestTwo(const uint8_t *data, size_t size)
{
    if ((data == nullptr) || (size < 1)) {
        return;
    }
    SetGlobalFuzzData(data, size);
    std::string str = GetStringFromData(STR_LEN);
    CertBlob certBlob;
    certBlob.type = CERT_TYPE_PEM;
    certBlob.size = str.size();
    certBlob.data = stringToUint8(str);
    VerifyCert(&certBlob, &certBlob);
    delete[] certBlob.data;
    certBlob.data = nullptr;
}

void SetFreeResourcesTest(const uint8_t *data, size_t size)
{
    if ((data == nullptr) || (size < 1)) {
        return;
    }
    SetGlobalFuzzData(data, size);
    std::string str = GetStringFromData(STR_LEN);
    CertBlob certBlob;
    certBlob.type = CERT_TYPE_PEM;
    certBlob.size = str.size();
    certBlob.data = stringToUint8(str);
    X509 *cert = PemToX509(certBlob.data, certBlob.size);
    X509_STORE *store = nullptr;
    X509_STORE_CTX *ctx = nullptr;
    FreeResources(&cert, &cert, &store, &ctx);
    delete[] certBlob.data;
    certBlob.data = nullptr;
}

void SetPemToX509Test(const uint8_t *data, size_t size)
{
    if ((data == nullptr) || (size < 1)) {
        return;
    }
    SetGlobalFuzzData(data, size);
    std::string str = GetStringFromData(STR_LEN);
    CertBlob certBlob;
    certBlob.type = CERT_TYPE_PEM;
    certBlob.size = str.size();
    certBlob.data = stringToUint8(str);
    PemToX509(data, size);
    delete[] certBlob.data;
    certBlob.data = nullptr;
}

void SetDerToX509Test(const uint8_t *data, size_t size)
{
    if ((data == nullptr) || (size < 1)) {
        return;
    }
    SetGlobalFuzzData(data, size);
    std::string str = GetStringFromData(STR_LEN);
    CertBlob certBlob;
    certBlob.type = CERT_TYPE_PEM;
    certBlob.size = str.size();
    certBlob.data = stringToUint8(str);
    DerToX509(data, size);
    delete[] certBlob.data;
    certBlob.data = nullptr;
}

void SetCertBlobToX509Test(const uint8_t *data, size_t size)
{
    if ((data == nullptr) || (size < 1)) {
        return;
    }
    SetGlobalFuzzData(data, size);
    std::string str = GetStringFromData(STR_LEN);
    CertBlob certBlob;
    certBlob.type = CERT_TYPE_PEM;
    certBlob.size = str.size();
    certBlob.data = stringToUint8(str);
    CertBlobToX509(&certBlob);
    delete[] certBlob.data;
    certBlob.data = nullptr;
}

void SetOHNetStackCertVerificationTest(const uint8_t *data, size_t size)
{
    if ((data == nullptr) || (size < 1)) {
        return;
    }
    SetGlobalFuzzData(data, size);
    std::string str = GetStringFromData(STR_LEN);
    CertBlob certBlob;
    certBlob.type = CERT_TYPE_PEM;
    certBlob.size = str.size();
    certBlob.data = stringToUint8(str);
    OH_NetStack_CertVerification((const struct NetStack_CertBlob *)&certBlob,
                                 (const struct NetStack_CertBlob *)&certBlob);
    delete[] certBlob.data;
    certBlob.data = nullptr;
}

} // namespace Ssl
} // namespace NetStack
} // namespace OHOS

/* Fuzzer entry point */
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
{
    /* Run your code on data */
    OHOS::NetStack::Ssl::SetNetStackVerifyCertificationTestOne(data, size);
    OHOS::NetStack::Ssl::SetNetStackVerifyCertificationTestTwo(data, size);
    OHOS::NetStack::Ssl::SetVerifyCertTestOne(data, size);
    OHOS::NetStack::Ssl::SetVerifyCertTestTwo(data, size);
    OHOS::NetStack::Ssl::SetFreeResourcesTest(data, size);
    OHOS::NetStack::Ssl::SetPemToX509Test(data, size);
    OHOS::NetStack::Ssl::SetDerToX509Test(data, size);
    OHOS::NetStack::Ssl::SetCertBlobToX509Test(data, size);
    OHOS::NetStack::Ssl::SetOHNetStackCertVerificationTest(data, size);
    return 0;
}