1 /*
2 * Copyright (c) 2021 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "audio_hdi_fuzzer_common.h"
17
18 using namespace HMOS::Audio;
19
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)20 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
21 {
22 TestAudioManager *manager = nullptr;
23 struct AudioAdapter *adapter = nullptr;
24 struct AudioCapture *capture = nullptr;
25 int32_t ret = AudioGetManagerCreateCapture(manager, &adapter, &capture);
26 if (ret < 0 || adapter == nullptr || capture == nullptr || manager == nullptr) {
27 return ret;
28 }
29 FILE *fp = fopen(AUDIO_LOW_LATENCY_CAPTURE_FILE.c_str(), "wb+");
30 if (fp == nullptr) {
31 adapter->DestroyCapture(adapter, capture);
32 manager->UnloadAdapter(manager, adapter);
33 return 0;
34 }
35 ret = capture->control.Start((AudioHandle)capture);
36 if (ret < 0 || manager == nullptr) {
37 adapter->DestroyCapture(adapter, capture);
38 manager->UnloadAdapter(manager, adapter);
39 fclose(fp);
40 return ret;
41 }
42 bool isRender = true;
43 int32_t reqSize = 0;
44 struct AudioMmapBufferDescripter desc = {};
45 ret = InitMmapDesc(fp, desc, reqSize, isRender);
46 if (ret < 0 || manager == nullptr) {
47 adapter->DestroyCapture(adapter, capture);
48 manager->UnloadAdapter(manager, adapter);
49 fclose(fp);
50 return 0;
51 }
52 uint8_t *dataFuzz = const_cast<uint8_t *>(data);
53 struct AudioCapture *captureFuzz = reinterpret_cast<struct AudioCapture *>(dataFuzz);
54 capture->attr.ReqMmapBuffer((AudioHandle)captureFuzz, reqSize, &desc);
55 adapter->DestroyCapture(adapter, capture);
56 manager->UnloadAdapter(manager, adapter);
57 fclose(fp);
58 return 0;
59 }