1 /*
2 * Copyright (c) 2013-2019 Huawei Technologies Co., Ltd. All rights reserved.
3 * Copyright (c) 2020-2021 Huawei Device Co., Ltd. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without modification,
6 * are permitted provided that the following conditions are met:
7 *
8 * 1. Redistributions of source code must retain the above copyright notice, this list of
9 * conditions and the following disclaimer.
10 *
11 * 2. Redistributions in binary form must reproduce the above copyright notice, this list
12 * of conditions and the following disclaimer in the documentation and/or other materials
13 * provided with the distribution.
14 *
15 * 3. Neither the name of the copyright holder nor the names of its contributors may be used
16 * to endorse or promote products derived from this software without specific prior written
17 * permission.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
20 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
21 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR
23 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
24 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
25 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
26 * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
27 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
28 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
29 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30 */
31
32 #include <regex.h>
33 #include "ohos_types.h"
34 #include "los_config.h"
35 #include "Public.h"
36 #include "PCommon.h"
37 #include "fuzz_posix.h"
38
39 #define CYCLE_TOTAL_TIMES 1000
40 #define FUZZ_SYS_NAME_LEN 80
41 #define MAX_STR_BUF_LEN 10
42
43 extern S_ElementInit g_element[ELEMENT_LEN];
44 extern int g_iteration;
45
RegexFuzz(void)46 static uint32_t RegexFuzz(void)
47 {
48 int fd;
49 int ret;
50 regex_t preg;
51 regmatch_t pmatch[1];
52 const size_t nmatch = 1;
53
54 const int initIntValue = 6;
55 const int initStrLen = 4;
56 const int maxStrLen = 5;
57 const int maxNumRange = 6;
58 const int maxNum1Range = 3;
59 int spid;
60 int num;
61 int num1;
62 char *string1 = NULL;
63 char str1[MAX_STR_BUF_LEN] = {0};
64 char *string2 = NULL;
65 char str2[MAX_STR_BUF_LEN] = {0};
66
67 INIT_FuzzEnvironment();
68 CreatPrecondForQueue();
69
70 printf("RegexFuzz starts,count=%d\n", CYCLE_TOTAL_TIMES);
71 for (int i = 0; i < CYCLE_TOTAL_TIMES; i++) {
72 hi_watchdog_feed();
73 heartbeatPrint(i);
74
75 string1 = DT_SetGetString(&g_element[NUM_0_INDEX], initStrLen, maxStrLen, "CHN");
76 (void)strncpy_s(str1, MAX_STR_BUF_LEN, string1, maxStrLen);
77 str1[MAX_STR_BUF_LEN - 1] = '\0';
78 string2 = DT_SetGetString(&g_element[NUM_1_INDEX], initStrLen, maxStrLen, "CHN");
79 (void)strncpy_s(str2, MAX_STR_BUF_LEN, string2, maxStrLen);
80 str2[MAX_STR_BUF_LEN - 1] = '\0';
81
82 num = *((int *)DT_SetGetS32(&g_element[NUM_2_INDEX], initIntValue));
83 num = num % maxNumRange;
84 num1 = *((UINT32 *)DT_SetGetU32(&g_element[NUM_3_INDEX], initIntValue));
85 num1 = num1 % maxNum1Range;
86
87 ret = regcomp(&preg, str1, num);
88 if (ret != 0) {
89 regfree(&preg);
90 continue;
91 }
92 regexec(&preg, str2, nmatch, pmatch, num1);
93 regfree(&preg);
94 }
95
96 CleanPrecondForQueue();
97 DT_Clear(g_element);
98 CLOSE_Log();
99 CLEAR_FuzzEnvironment();
100
101 printf("Fuzz test in line [%d] regcomp/regexec/regfree ok\n", __LINE__);
102
103 return 0;
104 }
105
ItSuiteRegexFuzz(void)106 void ItSuiteRegexFuzz(void)
107 {
108 RegexFuzz();
109 }