• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * Copyright (c) 2023 Huawei Device Co., Ltd.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at
6  *
7  *     http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 
16 #include "event_queue.h"
17 #include "eventqueueannex_fuzzer.h"
18 #include "securec.h"
19 
20 namespace OHOS {
21 namespace {
22     constexpr size_t U32_AT_SIZE = 4;
23 }
24 
25 class MyFileDescriptorListener : public AppExecFwk::FileDescriptorListener {
26 public:
MyFileDescriptorListener()27     MyFileDescriptorListener()
28     {}
~MyFileDescriptorListener()29     ~MyFileDescriptorListener()
30     {}
31 
32     /* @param int32_t fileDescriptor */
OnReadable(int32_t)33     void OnReadable(int32_t)
34     {}
35 
36     /* @param int32_t fileDescriptor */
OnWritable(int32_t)37     void OnWritable(int32_t)
38     {}
39 
40     /* @param int32_t fileDescriptor */
OnException(int32_t)41     void OnException(int32_t)
42     {}
43 
44     MyFileDescriptorListener(const MyFileDescriptorListener &) = delete;
45     MyFileDescriptorListener &operator=(const MyFileDescriptorListener &) = delete;
46     MyFileDescriptorListener(MyFileDescriptorListener &&) = delete;
47     MyFileDescriptorListener &operator=(MyFileDescriptorListener &&) = delete;
48 };
49 
DoSomethingInterestingWithMyAPI(const char * data,size_t size)50 bool DoSomethingInterestingWithMyAPI(const char* data, size_t size)
51 {
52     std::string stringData(data);
53     std::shared_ptr<AppExecFwk::IoWaiter> ioWaiter = nullptr;
54     AppExecFwk::EventQueue eventQueue(ioWaiter);
55     std::shared_ptr<AppExecFwk::EventHandler> myHandler;
56     uint32_t innerEventId = *data;
57     int64_t param = U32_AT(reinterpret_cast<const uint8_t*>(data));
58     eventQueue.HasInnerEvent(myHandler, innerEventId);
59     eventQueue.Remove(myHandler);
60     eventQueue.Remove(myHandler, innerEventId);
61     eventQueue.Remove(myHandler, innerEventId, param);
62     eventQueue.Remove(myHandler, stringData);
63     int32_t fileDescriptor = U32_AT(reinterpret_cast<const uint8_t*>(data));
64     auto fileDescriptorListener = std::make_shared<MyFileDescriptorListener>();
65     eventQueue.AddFileDescriptorListener(fileDescriptor, innerEventId, fileDescriptorListener,
66         "DoSomethingInterestingWithMyAPI");
67     eventQueue.RemoveFileDescriptorListener(myHandler);
68     eventQueue.RemoveFileDescriptorListener(fileDescriptor);
69     eventQueue.RemoveOrphan();
70     eventQueue.GetEvent();
71     eventQueue.IsIdle();
72     eventQueue.Prepare();
73     eventQueue.Finish();
74     return true;
75 }
76 }
77 
78 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)79 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
80 {
81     /* Run your code on data */
82     if (data == nullptr) {
83         return 0;
84     }
85 
86     if (size < OHOS::U32_AT_SIZE) {
87         return 0;
88     }
89 
90     char* ch = (char *)malloc(size + 1);
91     if (ch == nullptr) {
92         return 0;
93     }
94 
95     (void)memset_s(ch, size + 1, 0x00, size + 1);
96     if (memcpy_s(ch, size, data, size) != EOK) {
97         free(ch);
98         ch = nullptr;
99         return 0;
100     }
101 
102     OHOS::DoSomethingInterestingWithMyAPI(ch, size);
103     free(ch);
104     ch = nullptr;
105     return 0;
106 }
107