1 /*
2 * Copyright (c) 2013-2019 Huawei Technologies Co., Ltd. All rights reserved.
3 * Copyright (c) 2020-2021 Huawei Device Co., Ltd. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without modification,
6 * are permitted provided that the following conditions are met:
7 *
8 * 1. Redistributions of source code must retain the above copyright notice, this list of
9 * conditions and the following disclaimer.
10 *
11 * 2. Redistributions in binary form must reproduce the above copyright notice, this list
12 * of conditions and the following disclaimer in the documentation and/or other materials
13 * provided with the distribution.
14 *
15 * 3. Neither the name of the copyright holder nor the names of its contributors may be used
16 * to endorse or promote products derived from this software without specific prior written
17 * permission.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
20 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
21 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR
23 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
24 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
25 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
26 * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
27 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
28 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
29 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30 */
31
32 #include <stdlib.h>
33 #include "ohos_types.h"
34 #include "los_config.h"
35 #include "Public.h"
36 #include "PCommon.h"
37 #include "fuzz_posix.h"
38
39 #define CYCLE_TOTAL_TIMES 1024
40 #define TEST_BUF_LEN 256
41 #define TEST_MAX_BUF_LEN 1024
42
43 extern S_ElementInit g_element[ELEMENT_LEN];
44 extern int g_iteration;
45
ReallocFuzzTest(void)46 void ReallocFuzzTest(void)
47 {
48 char *source = NULL;
49 char *buf = NULL;
50 int c;
51
52 printf("Fuzz test in line [%d] realloc start\n", __LINE__);
53
54 source = (char *)malloc(TEST_BUF_LEN);
55 if (source == NULL) {
56 printf("Fuzz test in line [%d] malloc fail.\n", __LINE__);
57 return;
58 }
59
60 (void)memset_s(source, TEST_BUF_LEN, 0, TEST_BUF_LEN);
61
62 INIT_FuzzEnvironment();
63 CreatPrecondForQueue();
64 for (int i = 0; i < CYCLE_TOTAL_TIMES; i++) {
65 source = buf;
66 hi_watchdog_feed();
67 heartbeatPrint(i);
68
69 c = *(int *)DT_SetGetS32(&g_element[0], TEST_BUF_LEN);
70 if ((c <= 0) || (c > TEST_MAX_BUF_LEN)) {
71 c = TEST_BUF_LEN;
72 }
73 buf = (char *)realloc(source, c);
74 if (buf == NULL) {
75 break;
76 }
77 }
78
79 if (buf == NULL) {
80 free(source);
81 }
82
83 CleanPrecondForQueue();
84 DT_Clear(g_element);
85 CLOSE_Log();
86 CLEAR_FuzzEnvironment();
87
88 printf("Fuzz test in line [%d] realloc ok\n", __LINE__);
89
90 return 0;
91 }
92