1 /*
2 * Copyright (c) 2022 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "startdtmf_fuzzer.h"
17
18 #include <cstddef>
19 #include <cstdint>
20 #define private public
21 #include "addcalltoken_fuzzer.h"
22 #include "call_manager_service.h"
23 #include "call_manager_service_stub.h"
24 #include "system_ability_definition.h"
25
26 using namespace OHOS::Telephony;
27 namespace OHOS {
28 static bool g_isInited = false;
29 constexpr int32_t CALL_ID_NUM = 10;
30
IsServiceInited()31 bool IsServiceInited()
32 {
33 if (!g_isInited) {
34 DelayedSingleton<CallManagerService>::GetInstance()->OnStart();
35 if (DelayedSingleton<CallManagerService>::GetInstance()->GetServiceRunningState() ==
36 static_cast<int32_t>(CallManagerService::ServiceRunningState::STATE_RUNNING)) {
37 g_isInited = true;
38 }
39 }
40 return g_isInited;
41 }
42
StartDtmf(const uint8_t * data,size_t size)43 void StartDtmf(const uint8_t *data, size_t size)
44 {
45 if (!IsServiceInited()) {
46 return;
47 }
48
49 int32_t callId = size % CALL_ID_NUM;
50 char str = *reinterpret_cast<const char *>(data);
51 MessageParcel dataMessageParcel;
52 dataMessageParcel.WriteInt32(callId);
53 dataMessageParcel.WriteInt8(str);
54 dataMessageParcel.RewindRead(0);
55 MessageParcel reply;
56 DelayedSingleton<CallManagerService>::GetInstance()->OnStartDtmf(dataMessageParcel, reply);
57 }
58
StopRtt(const uint8_t * data,size_t size)59 void StopRtt(const uint8_t *data, size_t size)
60 {
61 if (!IsServiceInited()) {
62 return;
63 }
64
65 int32_t callId = size % CALL_ID_NUM;
66 MessageParcel dataMessageParcel;
67 dataMessageParcel.WriteInt32(callId);
68 dataMessageParcel.RewindRead(0);
69 MessageParcel reply;
70 DelayedSingleton<CallManagerService>::GetInstance()->OnStopRtt(dataMessageParcel, reply);
71 }
72
SetMuted(const uint8_t * data,size_t size)73 void SetMuted(const uint8_t *data, size_t size)
74 {
75 if (!IsServiceInited()) {
76 return;
77 }
78
79 bool isMute = false;
80 MessageParcel dataMessageParcel;
81 dataMessageParcel.WriteBool(isMute);
82 dataMessageParcel.RewindRead(0);
83 MessageParcel reply;
84 DelayedSingleton<CallManagerService>::GetInstance()->OnSetMute(dataMessageParcel, reply);
85 }
86
MuteRinger(const uint8_t * data,size_t size)87 void MuteRinger(const uint8_t *data, size_t size)
88 {
89 if (!IsServiceInited()) {
90 return;
91 }
92
93 MessageParcel dataMessageParcel;
94 dataMessageParcel.WriteBuffer(data, size);
95 dataMessageParcel.RewindRead(0);
96 MessageParcel reply;
97 DelayedSingleton<CallManagerService>::GetInstance()->OnSetMute(dataMessageParcel, reply);
98 }
99
DoSomethingInterestingWithMyAPI(const uint8_t * data,size_t size)100 void DoSomethingInterestingWithMyAPI(const uint8_t *data, size_t size)
101 {
102 if (data == nullptr || size == 0) {
103 return;
104 }
105
106 StartDtmf(data, size);
107 StopRtt(data, size);
108 SetMuted(data, size);
109 MuteRinger(data, size);
110 }
111 } // namespace OHOS
112
113 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)114 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
115 {
116 OHOS::AddCallTokenFuzzer token;
117 /* Run your code on data */
118 OHOS::DoSomethingInterestingWithMyAPI(data, size);
119 return 0;
120 }
121