/* * Copyright (c) 2022 Huawei Device Co., Ltd. * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "setcalltransferinfo_fuzzer.h" #include #include #define private public #include "addcalltoken_fuzzer.h" #include "call_manager_service.h" #include "call_manager_service_stub.h" #include "system_ability_definition.h" using namespace OHOS::Telephony; namespace OHOS { static bool g_isInited = false; constexpr int32_t SLOT_NUM = 2; constexpr int32_t TWO_INT_NUM = 2; bool IsServiceInited() { if (!g_isInited) { DelayedSingleton::GetInstance()->OnStart(); if (DelayedSingleton::GetInstance()->GetServiceRunningState() == static_cast(CallManagerService::ServiceRunningState::STATE_RUNNING)) { g_isInited = true; } } return g_isInited; } void IsImsSwitchEnabled(const uint8_t *data, size_t size) { if (!IsServiceInited()) { return; } int32_t slotId = static_cast(size % SLOT_NUM); MessageParcel dataMessageParcel; dataMessageParcel.WriteInt32(slotId); size_t dataSize = size - sizeof(int32_t); dataMessageParcel.WriteBuffer(data + sizeof(int32_t), dataSize); dataMessageParcel.RewindRead(0); MessageParcel reply; DelayedSingleton::GetInstance()->OnIsVoLteEnabled(dataMessageParcel, reply); } void GetImsConfig(const uint8_t *data, size_t size) { if (!IsServiceInited()) { return; } int32_t slotId = static_cast(size % SLOT_NUM); MessageParcel dataMessageParcel; dataMessageParcel.WriteInt32(slotId); dataMessageParcel.WriteInt32(static_cast(size)); size_t dataSize = size - sizeof(int32_t) - sizeof(ImsConfigItem); dataMessageParcel.WriteBuffer(data + sizeof(int32_t) + sizeof(ImsConfigItem), dataSize); dataMessageParcel.RewindRead(0); MessageParcel reply; DelayedSingleton::GetInstance()->OnGetImsConfig(dataMessageParcel, reply); } void GetImsFeatureValue(const uint8_t *data, size_t size) { if (!IsServiceInited()) { return; } int32_t slotId = static_cast(size % SLOT_NUM); MessageParcel dataMessageParcel; dataMessageParcel.WriteInt32(slotId); dataMessageParcel.WriteInt32(static_cast(size)); size_t dataSize = size - sizeof(int32_t) * TWO_INT_NUM; dataMessageParcel.WriteBuffer(data + sizeof(int32_t) * TWO_INT_NUM, dataSize); dataMessageParcel.RewindRead(0); MessageParcel reply; DelayedSingleton::GetInstance()->OnGetImsFeatureValue(dataMessageParcel, reply); } void GetCallTransferInfo(const uint8_t *data, size_t size) { if (!IsServiceInited()) { return; } int32_t slotId = static_cast(size % SLOT_NUM); MessageParcel dataMessageParcel; dataMessageParcel.WriteInt32(slotId); dataMessageParcel.WriteInt32(static_cast(size)); size_t dataSize = size - sizeof(int32_t) * TWO_INT_NUM; dataMessageParcel.WriteBuffer(data + sizeof(int32_t) * TWO_INT_NUM, dataSize); dataMessageParcel.RewindRead(0); MessageParcel reply; DelayedSingleton::GetInstance()->OnGetTransferNumber(dataMessageParcel, reply); } void SetCallTransferInfo(const uint8_t *data, size_t size) { if (!IsServiceInited()) { return; } int32_t slotId = static_cast(size % SLOT_NUM); MessageParcel dataMessageParcel; CallTransferInfo info; (void)memcpy_s(info.transferNum, kMaxNumberLen, reinterpret_cast(data), size); info.settingType = CallTransferSettingType::CALL_TRANSFER_ENABLE; info.type = CallTransferType::TRANSFER_TYPE_BUSY; dataMessageParcel.WriteInt32(slotId); dataMessageParcel.WriteRawData((const void *)&info, sizeof(CallTransferInfo)); dataMessageParcel.RewindRead(0); MessageParcel reply; DelayedSingleton::GetInstance()->OnSetTransferNumber(dataMessageParcel, reply); } void DoSomethingInterestingWithMyAPI(const uint8_t *data, size_t size) { if (data == nullptr || size == 0) { return; } IsImsSwitchEnabled(data, size); GetImsConfig(data, size); GetImsFeatureValue(data, size); GetCallTransferInfo(data, size); SetCallTransferInfo(data, size); } } // namespace OHOS /* Fuzzer entry point */ extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { OHOS::AddCallTokenFuzzer token; /* Run your code on data */ OHOS::DoSomethingInterestingWithMyAPI(data, size); return 0; }