1 /*
2 * Copyright (c) 2021 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "audio_hdi_fuzzer_common.h"
17
18 using namespace HMOS::Audio;
19
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)20 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
21 {
22 TestAudioManager *manager = nullptr;
23 struct AudioAdapter *adapter = nullptr;
24 struct AudioCapture *capture = nullptr;
25 int32_t ret = AudioGetManagerCreateStartCapture(manager, &adapter, &capture);
26 if (ret < 0 || adapter == nullptr || capture == nullptr || manager == nullptr) {
27 return ret;
28 }
29 uint64_t replyBytes = 0;
30 uint64_t requestBytes = BUFFER_LENTH;
31 struct AudioTimeStamp time = {.tvSec = 0, .tvNSec = 0};
32 char *frame = (char *)calloc(1, BUFFER_LENTH);
33 if (frame == nullptr) {
34 capture->control.Stop((AudioHandle)capture);
35 adapter->DestroyCapture(adapter, capture);
36 manager->UnloadAdapter(manager, adapter);
37 return 0;
38 }
39 ret = capture->CaptureFrame(capture, frame, requestBytes, &replyBytes);
40 if (ret < 0) {
41 adapter->DestroyCapture(adapter, capture);
42 manager->UnloadAdapter(manager, adapter);
43 capture = nullptr;
44 return ret;
45 }
46
47 replyBytes = 0;
48 uint8_t *dataFuzz = const_cast<uint8_t *>(data);
49 struct AudioCapture *captureFuzz = reinterpret_cast<struct AudioCapture *>(dataFuzz);
50 capture->GetCapturePosition(captureFuzz, &replyBytes, &time);
51
52 capture->control.Stop((AudioHandle)capture);
53 adapter->DestroyCapture(adapter, capture);
54 manager->UnloadAdapter(manager, adapter);
55 capture = nullptr;
56 return 0;
57 }
58