1 /*
2 * Copyright (c) 2023 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "sinkstubdaudiosinkstub_fuzzer.h"
17
18 #include <cstddef>
19 #include <cstdint>
20 #include <random>
21 #include <fuzzer/FuzzedDataProvider.h>
22
23 #include "daudio_sink_stub.h"
24 #include "daudio_sink_service.h"
25
26 #include "daudio_ipc_interface_code.h"
27 #include "if_system_ability_manager.h"
28 #include "iservice_registry.h"
29
30 namespace OHOS {
31 namespace DistributedHardware {
SinkStubDaudioSinkStubFuzzTest(const uint8_t * data,size_t size)32 void SinkStubDaudioSinkStubFuzzTest(const uint8_t* data, size_t size)
33 {
34 if ((data == nullptr) || (size < (sizeof(int32_t)))) {
35 return;
36 }
37 FuzzedDataProvider fdp(data, size);
38 int32_t saId = fdp.ConsumeIntegral<int32_t>();
39 bool runOnCreate = fdp.ConsumeBool();
40 auto dAudioSinkService = std::make_shared<DAudioSinkService>(saId, runOnCreate);
41 std::random_device rd;
42 MessageParcel pdata;
43 MessageParcel reply;
44 MessageOption option;
45 std::string devId = "1";
46 std::string dhId = "2";
47 std::string reqId = "3";
48 int32_t status = fdp.ConsumeIntegral<int32_t>();
49 std::string resultData = fdp.ConsumeRandomLengthString();
50 pdata.WriteString(devId);
51 pdata.WriteString(dhId);
52 pdata.WriteString(reqId);
53 pdata.WriteInt32(status);
54 pdata.WriteString(resultData);
55 dAudioSinkService->memberFuncMap_[static_cast<uint32_t>(IDAudioSinkInterfaceCode::INIT_SINK)] =
56 &DAudioSinkStub::InitSinkInner;
57 dAudioSinkService->memberFuncMap_[static_cast<uint32_t>(IDAudioSinkInterfaceCode::RELEASE_SINK)] =
58 &DAudioSinkStub::ReleaseSinkInner;
59 dAudioSinkService->memberFuncMap_[static_cast<uint32_t>(IDAudioSinkInterfaceCode::SUBSCRIBE_LOCAL_HARDWARE)] =
60 &DAudioSinkStub::SubscribeLocalHardwareInner;
61 dAudioSinkService->memberFuncMap_[static_cast<uint32_t>(IDAudioSinkInterfaceCode::UNSUBSCRIBE_LOCAL_HARDWARE)] =
62 &DAudioSinkStub::UnsubscribeLocalHardwareInner;
63 dAudioSinkService->memberFuncMap_[static_cast<uint32_t>(IDAudioSinkInterfaceCode::DAUDIO_NOTIFY)] =
64 &DAudioSinkStub::DAudioNotifyInner;
65 dAudioSinkService->memberFuncMap_[static_cast<uint32_t>(IDAudioSinkInterfaceCode::PAUSE_DISTRIBUTED_HARDWARE)] =
66 &DAudioSinkStub::PauseDistributedHardwareInner;
67 dAudioSinkService->memberFuncMap_[static_cast<uint32_t>(IDAudioSinkInterfaceCode::RESUME_DISTRIBUTED_HARDWARE)] =
68 &DAudioSinkStub::ResumeDistributedHardwareInner;
69 dAudioSinkService->memberFuncMap_[static_cast<uint32_t>(IDAudioSinkInterfaceCode::STOP_DISTRIBUTED_HARDWARE)] =
70 &DAudioSinkStub::StopDistributedHardwareInner;
71 const uint32_t code = fdp.ConsumeIntegral<const uint32_t>();
72 dAudioSinkService->OnRemoteRequest(code, pdata, reply, option);
73 }
74
SinkStubSubscribeLocalHardwareInnerFuzzTest(const uint8_t * data,size_t size)75 void SinkStubSubscribeLocalHardwareInnerFuzzTest(const uint8_t* data, size_t size)
76 {
77 if ((data == nullptr) || (size < (sizeof(int32_t)))) {
78 return;
79 }
80 FuzzedDataProvider fdp(data, size);
81 int32_t saId = fdp.ConsumeIntegral<int32_t>();
82 bool runOnCreate = fdp.ConsumeBool();
83 auto dAudioSinkService = std::make_shared<DAudioSinkService>(saId, runOnCreate);
84 std::random_device rd;
85 MessageParcel pdata;
86 MessageParcel reply;
87 MessageOption option;
88 std::string devId = "1";
89 std::string dhId = "2";
90 std::string reqId = "3";
91 int32_t status = fdp.ConsumeIntegral<int32_t>();
92 std::string resultData = fdp.ConsumeRandomLengthString();
93 pdata.WriteString(devId);
94 pdata.WriteString(dhId);
95 pdata.WriteString(reqId);
96 pdata.WriteInt32(status);
97 pdata.WriteString(resultData);
98 dAudioSinkService->SubscribeLocalHardwareInner(pdata, reply, option);
99 }
100
SinkStubUnsubscribeLocalHardwareInnerFuzzTest(const uint8_t * data,size_t size)101 void SinkStubUnsubscribeLocalHardwareInnerFuzzTest(const uint8_t* data, size_t size)
102 {
103 if ((data == nullptr) || (size < (sizeof(int32_t)))) {
104 return;
105 }
106 FuzzedDataProvider fdp(data, size);
107 int32_t saId = fdp.ConsumeIntegral<int32_t>();
108 bool runOnCreate = fdp.ConsumeBool();
109 auto dAudioSinkService = std::make_shared<DAudioSinkService>(saId, runOnCreate);
110 std::random_device rd;
111 MessageParcel pdata;
112 MessageParcel reply;
113 MessageOption option;
114 std::string devId = "1";
115 std::string dhId = "2";
116 std::string reqId = "3";
117 int32_t status = fdp.ConsumeIntegral<int32_t>();
118 std::string resultData = fdp.ConsumeRandomLengthString();
119 pdata.WriteString(devId);
120 pdata.WriteString(dhId);
121 pdata.WriteString(reqId);
122 pdata.WriteInt32(status);
123 pdata.WriteString(resultData);
124 dAudioSinkService->UnsubscribeLocalHardwareInner(pdata, reply, option);
125 }
126
SinkStubDAudioNotifyInnerFuzzTest(const uint8_t * data,size_t size)127 void SinkStubDAudioNotifyInnerFuzzTest(const uint8_t* data, size_t size)
128 {
129 if ((data == nullptr) || (size < (sizeof(int32_t)))) {
130 return;
131 }
132 FuzzedDataProvider fdp(data, size);
133 int32_t saId = fdp.ConsumeIntegral<int32_t>();
134 bool runOnCreate = fdp.ConsumeBool();
135 auto dAudioSinkService = std::make_shared<DAudioSinkService>(saId, runOnCreate);
136 std::random_device rd;
137 MessageParcel pdata;
138 MessageParcel reply;
139 MessageOption option;
140 std::string devId = "1";
141 std::string dhId = "2";
142 std::string reqId = "3";
143 int32_t status = fdp.ConsumeIntegral<int32_t>();
144 std::string resultData = fdp.ConsumeRandomLengthString();
145 pdata.WriteString(devId);
146 pdata.WriteString(dhId);
147 pdata.WriteString(reqId);
148 pdata.WriteInt32(status);
149 pdata.WriteString(resultData);
150 dAudioSinkService->DAudioNotifyInner(pdata, reply, option);
151 }
152
SinkStubPauseDistributedHardwareInnerFuzzTest(const uint8_t * data,size_t size)153 void SinkStubPauseDistributedHardwareInnerFuzzTest(const uint8_t* data, size_t size)
154 {
155 if ((data == nullptr) || (size < (sizeof(int32_t)))) {
156 return;
157 }
158 FuzzedDataProvider fdp(data, size);
159 int32_t saId = fdp.ConsumeIntegral<int32_t>();
160 bool runOnCreate = fdp.ConsumeBool();
161 auto dAudioSinkService = std::make_shared<DAudioSinkService>(saId, runOnCreate);
162 std::random_device rd;
163 MessageParcel pdata;
164 MessageParcel reply;
165 MessageOption option;
166 std::string devId = "1";
167 std::string dhId = "2";
168 std::string reqId = "3";
169 int32_t status = fdp.ConsumeIntegral<int32_t>();
170 std::string resultData = fdp.ConsumeRandomLengthString();
171 pdata.WriteString(devId);
172 pdata.WriteString(dhId);
173 pdata.WriteString(reqId);
174 pdata.WriteInt32(status);
175 pdata.WriteString(resultData);
176 dAudioSinkService->PauseDistributedHardwareInner(pdata, reply, option);
177 }
178
SinkStubResumeDistributedHardwareInnerFuzzTest(const uint8_t * data,size_t size)179 void SinkStubResumeDistributedHardwareInnerFuzzTest(const uint8_t* data, size_t size)
180 {
181 if ((data == nullptr) || (size < (sizeof(int32_t)))) {
182 return;
183 }
184 FuzzedDataProvider fdp(data, size);
185 int32_t saId = fdp.ConsumeIntegral<int32_t>();
186 bool runOnCreate = fdp.ConsumeBool();
187 auto dAudioSinkService = std::make_shared<DAudioSinkService>(saId, runOnCreate);
188 std::random_device rd;
189 MessageParcel pdata;
190 MessageParcel reply;
191 MessageOption option;
192 std::string devId = "1";
193 std::string dhId = "2";
194 std::string reqId = "3";
195 int32_t status = fdp.ConsumeIntegral<int32_t>();
196 std::string resultData = fdp.ConsumeRandomLengthString();
197 pdata.WriteString(devId);
198 pdata.WriteString(dhId);
199 pdata.WriteString(reqId);
200 pdata.WriteInt32(status);
201 pdata.WriteString(resultData);
202 dAudioSinkService->ResumeDistributedHardwareInner(pdata, reply, option);
203 }
204
SinkStubStopDistributedHardwareInnerFuzzTest(const uint8_t * data,size_t size)205 void SinkStubStopDistributedHardwareInnerFuzzTest(const uint8_t* data, size_t size)
206 {
207 if ((data == nullptr) || (size < (sizeof(int32_t)))) {
208 return;
209 }
210 FuzzedDataProvider fdp(data, size);
211 int32_t saId = fdp.ConsumeIntegral<int32_t>();
212 bool runOnCreate = fdp.ConsumeBool();
213 auto dAudioSinkService = std::make_shared<DAudioSinkService>(saId, runOnCreate);
214 std::random_device rd;
215 MessageParcel pdata;
216 MessageParcel reply;
217 MessageOption option;
218 std::string devId = "1";
219 std::string dhId = "2";
220 std::string reqId = "3";
221 int32_t status = fdp.ConsumeIntegral<int32_t>();
222 std::string resultData = fdp.ConsumeRandomLengthString();
223 pdata.WriteString(devId);
224 pdata.WriteString(dhId);
225 pdata.WriteString(reqId);
226 pdata.WriteInt32(status);
227 pdata.WriteString(resultData);
228 dAudioSinkService->StopDistributedHardwareInner(pdata, reply, option);
229 }
230 }
231 }
232
233 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)234 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
235 {
236 /* Run your code on data */
237 OHOS::DistributedHardware::SinkStubDaudioSinkStubFuzzTest(data, size);
238 OHOS::DistributedHardware::SinkStubSubscribeLocalHardwareInnerFuzzTest(data, size);
239 OHOS::DistributedHardware::SinkStubUnsubscribeLocalHardwareInnerFuzzTest(data, size);
240 OHOS::DistributedHardware::SinkStubDAudioNotifyInnerFuzzTest(data, size);
241 OHOS::DistributedHardware::SinkStubPauseDistributedHardwareInnerFuzzTest(data, size);
242 OHOS::DistributedHardware::SinkStubResumeDistributedHardwareInnerFuzzTest(data, size);
243 OHOS::DistributedHardware::SinkStubStopDistributedHardwareInnerFuzzTest(data, size);
244 return 0;
245 }
246