1 /*
2 * Copyright (c) 2022 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "audiorenderreqmmapbufferrender_fuzzer.h"
17 #include "audio_hdi_fuzzer_common.h"
18
19 using namespace OHOS::Audio;
20 namespace OHOS {
21 namespace Audio {
AudioRenderReqmmapbufferRenderFuzzTest(const uint8_t * data,size_t size)22 bool AudioRenderReqmmapbufferRenderFuzzTest(const uint8_t *data, size_t size)
23 {
24 bool result = false;
25 TestAudioManager *reqMmapBufManager = nullptr;
26 FILE *fp = fopen(AUDIO_LOW_LATENCY_RENDER_FILE.c_str(), "wb+");
27 if (fp == nullptr) {
28 HDF_LOGE("%{public}s: fopen failed \n", __func__);
29 return false;
30 }
31 struct AudioAdapter *adapter = nullptr;
32 struct AudioRender *render = nullptr;
33 int32_t ret = AudioGetManagerCreateStartRender(reqMmapBufManager, &adapter, &render);
34 if (ret < 0 || adapter == nullptr || render == nullptr || reqMmapBufManager == nullptr) {
35 fclose(fp);
36 HDF_LOGE("%{public}s: AudioGetManagerCreateStartRender failed \n", __func__);
37 return false;
38 }
39 bool isRender = true;
40 int32_t reqSize = 0;
41 struct AudioMmapBufferDescripter desc = {};
42 ret = InitMmapDesc(fp, desc, reqSize, isRender);
43 if (ret < 0) {
44 adapter->DestroyRender(adapter, render);
45 reqMmapBufManager->UnloadAdapter(reqMmapBufManager, adapter);
46 fclose(fp);
47 HDF_LOGE("%{public}s: InitMmapDesc failed \n", __func__);
48 return false;
49 }
50
51 struct AudioRender *renderFuzz = reinterpret_cast<struct AudioRender *>(const_cast<uint8_t *>(data));
52 ret = render->attr.ReqMmapBuffer((AudioHandle)renderFuzz, reqSize, &desc);
53 if (ret == HDF_SUCCESS) {
54 (void)munmap(desc.memoryAddress, reqSize);
55 result = true;
56 }
57 adapter->DestroyRender(adapter, render);
58 reqMmapBufManager->UnloadAdapter(reqMmapBufManager, adapter);
59 ret = fclose(fp);
60 if (ret != 0) {
61 return false;
62 }
63 return result;
64 }
65 }
66 }
67
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)68 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
69 {
70 OHOS::Audio::AudioRenderReqmmapbufferRenderFuzzTest(data, size);
71 return 0;
72 }