1 /*
2 * Copyright (c) 2013-2019 Huawei Technologies Co., Ltd. All rights reserved.
3 * Copyright (c) 2020-2021 Huawei Device Co., Ltd. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without modification,
6 * are permitted provided that the following conditions are met:
7 *
8 * 1. Redistributions of source code must retain the above copyright notice, this list of
9 * conditions and the following disclaimer.
10 *
11 * 2. Redistributions in binary form must reproduce the above copyright notice, this list
12 * of conditions and the following disclaimer in the documentation and/or other materials
13 * provided with the distribution.
14 *
15 * 3. Neither the name of the copyright holder nor the names of its contributors may be used
16 * to endorse or promote products derived from this software without specific prior written
17 * permission.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
20 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
21 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR
23 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
24 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
25 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
26 * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
27 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
28 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
29 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30 */
31
32 #include <stdarg.h>
33 #include "ohos_types.h"
34 #include "los_config.h"
35 #include "Public.h"
36 #include "PCommon.h"
37 #include "fuzz_posix.h"
38
39 extern S_ElementInit g_element[ELEMENT_LEN];
40 extern int g_iteration;
41
VaFunc(int argsNum, ...)42 static int VaFunc(int argsNum, ...)
43 {
44 int sum1 = 0;
45 int sum2 = 0;
46 va_list argPtr1;
47 va_start(argPtr1, argsNum);
48 va_list argPtr2;
49 va_copy(argPtr2, argPtr1);
50
51 for (int i = 0; i < argsNum; i++) {
52 sum1 += va_arg(argPtr1, int);
53 sum2 += va_arg(argPtr2, int);
54 }
55 int sum = sum1 + sum2;
56
57 va_end(argPtr1);
58 va_end(argPtr2);
59
60 return sum;
61 }
62
StdargFuzz(void)63 int StdargFuzz(void)
64 {
65 int i;
66 const int initValue1 = 5;
67 const int initValue2 = 10;
68 const int initValue3 = 15;
69 const int argNum = 3;
70 const int count = 2;
71
72 printf("Fuzz test in line [%d] stdarg start\n", __LINE__);
73
74 INIT_FuzzEnvironment();
75 CreatPrecondForQueue();
76
77 for (i = 0; i < g_iteration; i++) {
78 hi_watchdog_feed();
79 heartbeatPrint(i);
80
81 unsigned int stdargVal1 = *((unsigned int *)DT_SetGetU32(&g_element[NUM_0_INDEX], initValue1));
82 unsigned int stdargVal2 = *((unsigned int *)DT_SetGetU32(&g_element[NUM_1_INDEX], initValue2));
83 unsigned int stdargVal3 = *((unsigned int *)DT_SetGetU32(&g_element[NUM_2_INDEX], initValue3));
84 int ret = VaFunc(argNum, stdargVal1, stdargVal2, stdargVal3);
85 int sum = (stdargVal1 + stdargVal2 + stdargVal3) * count;
86 if (ret == sum) {
87 printf("VA_FUNC_TEST(3, %d, %d, %d) = %d", stdargVal1, stdargVal2, stdargVal3, ret);
88 return RET_TRUE;
89 }
90 }
91
92 CleanPrecondForQueue();
93 DT_Clear(g_element);
94 CLOSE_Log();
95 CLEAR_FuzzEnvironment();
96
97 printf("Fuzz test in line [%d] va_start/va_copy/va_end ok\n", __LINE__);
98
99 return 0;
100 }