1 /*
2 * Copyright (c) 2022 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #define private public
17 #define protected public
18 #include "event_handler.h"
19 #undef private
20 #undef protected
21
22 #include "eventhandler_fuzzer.h"
23 #include "securec.h"
24
25 namespace OHOS {
26 namespace {
27 constexpr size_t U32_AT_SIZE = 4;
28 }
29
30 class DumperTest : public AppExecFwk::Dumper {
31 public:
32 DumperTest() = default;
~DumperTest()33 virtual ~DumperTest()
34 {};
Dump(const std::string & message)35 void Dump(const std::string &message) override
36 {}
GetTag()37 std::string GetTag() override
38 {
39 return {};
40 }
41 };
42
43 class MyFileDescriptorListener : public AppExecFwk::FileDescriptorListener {
44 public:
MyFileDescriptorListener()45 MyFileDescriptorListener()
46 {}
~MyFileDescriptorListener()47 ~MyFileDescriptorListener()
48 {}
49
50 /* @param int32_t fileDescriptor */
OnReadable(int32_t)51 void OnReadable(int32_t)
52 {}
53
54 /* @param int32_t fileDescriptor */
OnWritable(int32_t)55 void OnWritable(int32_t)
56 {}
57
58 /* @param int32_t fileDescriptor */
OnException(int32_t)59 void OnException(int32_t)
60 {}
61
62 MyFileDescriptorListener(const MyFileDescriptorListener &) = delete;
63 MyFileDescriptorListener &operator=(const MyFileDescriptorListener &) = delete;
64 MyFileDescriptorListener(MyFileDescriptorListener &&) = delete;
65 MyFileDescriptorListener &operator=(MyFileDescriptorListener &&) = delete;
66 };
67
DoSomethingInterestingWithMyAPI(const char * data,size_t size)68 bool DoSomethingInterestingWithMyAPI(const char* data, size_t size)
69 {
70 std::shared_ptr<AppExecFwk::EventRunner> runner = nullptr;
71 AppExecFwk::EventHandler eventHandler(runner);
72 uint32_t innerEventId = *data;
73 std::list<AppExecFwk::InnerEvent::Pointer> events;
74 AppExecFwk::InnerEvent::Pointer event = std::move(events.front());
75 int64_t taskTime = U32_AT(reinterpret_cast<const uint8_t*>(data));
76 AppExecFwk::EventQueue::Priority priority = AppExecFwk::EventQueue::Priority::LOW;
77 int32_t fileDescriptor = U32_AT(reinterpret_cast<const uint8_t*>(data));
78 DumperTest dumper;
79 eventHandler.Dump(dumper);
80 eventHandler.GetEventName(event);
81 eventHandler.ProcessEvent(event);
82 eventHandler.RemoveAllFileDescriptorListeners();
83 eventHandler.SendTimingEvent(event, taskTime, priority);
84 eventHandler.RemoveFileDescriptorListener(fileDescriptor);
85 eventHandler.SendEvent(event, taskTime, priority);
86 eventHandler.SendSyncEvent(event, priority);
87 eventHandler.RemoveAllEvents();
88 eventHandler.RemoveEvent(innerEventId, taskTime);
89 eventHandler.RemoveEvent(innerEventId);
90 std::string stringData(data);
91 eventHandler.RemoveTask(stringData);
92 auto fileDescriptorListener = std::make_shared<MyFileDescriptorListener>();
93 eventHandler.AddFileDescriptorListener(fileDescriptor, innerEventId, fileDescriptorListener);
94 eventHandler.SetEventRunner(runner);
95 eventHandler.GetEventRunner();
96 eventHandler.DistributeEvent(event);
97 eventHandler.HasInnerEvent(taskTime);
98 return eventHandler.HasInnerEvent(innerEventId);
99 }
100 }
101
102 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)103 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
104 {
105 /* Run your code on data */
106 if (data == nullptr) {
107 return 0;
108 }
109
110 if (size < OHOS::U32_AT_SIZE) {
111 return 0;
112 }
113
114 char* ch = reinterpret_cast<char *>(malloc(size + 1));
115 if (ch == nullptr) {
116 return 0;
117 }
118
119 (void)memset_s(ch, size + 1, 0x00, size + 1);
120 if (memcpy_s(ch, size, data, size) != EOK) {
121 free(ch);
122 ch = nullptr;
123 return 0;
124 }
125
126 OHOS::DoSomethingInterestingWithMyAPI(ch, size);
127 free(ch);
128 ch = nullptr;
129 return 0;
130 }
131