1 /*
2  * Copyright (c) 2013-2019 Huawei Technologies Co., Ltd. All rights reserved.
3  * Copyright (c) 2020-2021 Huawei Device Co., Ltd. All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without modification,
6  * are permitted provided that the following conditions are met:
7  *
8  * 1. Redistributions of source code must retain the above copyright notice, this list of
9  *    conditions and the following disclaimer.
10  *
11  * 2. Redistributions in binary form must reproduce the above copyright notice, this list
12  *    of conditions and the following disclaimer in the documentation and/or other materials
13  *    provided with the distribution.
14  *
15  * 3. Neither the name of the copyright holder nor the names of its contributors may be used
16  *    to endorse or promote products derived from this software without specific prior written
17  *    permission.
18  *
19  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
20  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
21  * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22  * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR
23  * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
24  * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
25  * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
26  * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
27  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
28  * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
29  * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30  */
31 
32 #include <regex.h>
33 #include "ohos_types.h"
34 #include "los_config.h"
35 #include "Public.h"
36 #include "PCommon.h"
37 #include "fuzz_posix.h"
38 
39 #define CYCLE_TOTAL_TIMES 1000
40 #define FUZZ_SYS_NAME_LEN 80
41 #define MAX_STR_BUF_LEN 10
42 
43 extern S_ElementInit g_element[ELEMENT_LEN];
44 extern int g_iteration;
45 
RegexFuzz(void)46 static uint32_t RegexFuzz(void)
47 {
48     int ret;
49     regex_t preg;
50     regmatch_t pmatch[1];
51     const size_t nmatch = 1;
52 
53     const int initIntValue = 6;
54     const int initStrLen = 4;
55     const int maxStrLen = 5;
56     const int maxNumRange = 6;
57     const int maxNum1Range = 3;
58     int num;
59     int num1;
60     char *string1 = NULL;
61     char str1[MAX_STR_BUF_LEN] = {0};
62     char *string2 = NULL;
63     char str2[MAX_STR_BUF_LEN] = {0};
64 
65     INIT_FuzzEnvironment();
66     CreatPrecondForQueue();
67 
68     printf("RegexFuzz starts,count=%d\n", CYCLE_TOTAL_TIMES);
69     for (int i = 0; i < CYCLE_TOTAL_TIMES; i++) {
70         hi_watchdog_feed();
71         heartbeatPrint(i);
72 
73         string1 = DT_SetGetString(&g_element[NUM_0_INDEX], initStrLen, maxStrLen, "CHN");
74         (void)strncpy_s(str1, MAX_STR_BUF_LEN, string1, maxStrLen);
75         str1[MAX_STR_BUF_LEN - 1] = '\0';
76         string2 = DT_SetGetString(&g_element[NUM_1_INDEX], initStrLen, maxStrLen, "CHN");
77         (void)strncpy_s(str2, MAX_STR_BUF_LEN, string2, maxStrLen);
78         str2[MAX_STR_BUF_LEN - 1] = '\0';
79 
80         num = *((int *)DT_SetGetS32(&g_element[NUM_2_INDEX], initIntValue));
81         num = num % maxNumRange;
82         num1 = *((UINT32 *)DT_SetGetU32(&g_element[NUM_3_INDEX], initIntValue));
83         num1 = num1 % maxNum1Range;
84 
85         ret = regcomp(&preg, str1, num);
86         if (ret != 0) {
87             regfree(&preg);
88             continue;
89         }
90         regexec(&preg, str2, nmatch, pmatch, num1);
91         regfree(&preg);
92     }
93 
94     CleanPrecondForQueue();
95     DT_Clear(g_element);
96     CLOSE_Log();
97     CLEAR_FuzzEnvironment();
98 
99     printf("Fuzz test in line [%d] regcomp/regexec/regfree ok\n", __LINE__);
100 
101     return 0;
102 }
103 
ItSuiteRegexFuzz(void)104 void ItSuiteRegexFuzz(void)
105 {
106     RegexFuzz();
107 }