1/*
2 * Copyright (c) 2013-2019 Huawei Technologies Co., Ltd. All rights reserved.
3 * Copyright (c) 2020-2021 Huawei Device Co., Ltd. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without modification,
6 * are permitted provided that the following conditions are met:
7 *
8 * 1. Redistributions of source code must retain the above copyright notice, this list of
9 *    conditions and the following disclaimer.
10 *
11 * 2. Redistributions in binary form must reproduce the above copyright notice, this list
12 *    of conditions and the following disclaimer in the documentation and/or other materials
13 *    provided with the distribution.
14 *
15 * 3. Neither the name of the copyright holder nor the names of its contributors may be used
16 *    to endorse or promote products derived from this software without specific prior written
17 *    permission.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
20 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
21 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR
23 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
24 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
25 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
26 * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
27 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
28 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
29 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30 */
31
32#include <stdlib.h>
33#include "ohos_types.h"
34#include "los_config.h"
35#include "Public.h"
36#include "PCommon.h"
37#include "fuzz_posix.h"
38
39#define CYCLE_TOTAL_TIMES 1024
40#define TEST_BUF_LEN 256
41#define TEST_MAX_BUF_LEN 1024
42
43extern S_ElementInit g_element[ELEMENT_LEN];
44extern int g_iteration;
45
46void ReallocFuzzTest(void)
47{
48    char *source = NULL;
49    char *buf = NULL;
50    int c;
51
52    printf("Fuzz test in line [%d] realloc start\n", __LINE__);
53
54    source = (char *)malloc(TEST_BUF_LEN);
55    if (source == NULL) {
56        printf("Fuzz test in line [%d] malloc fail.\n", __LINE__);
57        return;
58    }
59
60    (void)memset_s(source, TEST_BUF_LEN, 0, TEST_BUF_LEN);
61
62    INIT_FuzzEnvironment();
63    CreatPrecondForQueue();
64    for (int i = 0; i < CYCLE_TOTAL_TIMES; i++) {
65        source = buf;
66        hi_watchdog_feed();
67        heartbeatPrint(i);
68
69        c = *(int *)DT_SetGetS32(&g_element[0], TEST_BUF_LEN);
70        if ((c <= 0) || (c > TEST_MAX_BUF_LEN)) {
71            c = TEST_BUF_LEN;
72        }
73        buf = (char *)realloc(source, c);
74        if (buf == NULL) {
75            break;
76        }
77    }
78
79    if (buf == NULL) {
80        free(source);
81    }
82
83    CleanPrecondForQueue();
84    DT_Clear(g_element);
85    CLOSE_Log();
86    CLEAR_FuzzEnvironment();
87
88    printf("Fuzz test in line [%d] realloc ok\n", __LINE__);
89
90    return 0;
91}
92