1 /*
2 * Copyright (c) 2022 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "aafwkattachrender_fuzzer.h"
17
18 #include <cstring>
19 #include <securec.h>
20 #include <fuzzer/FuzzedDataProvider.h>
21
22 #include "aafwk_app_mgr_client_adapter_impl.h"
23 #include "aafwk_render_scheduler_impl.h"
24
25 using namespace OHOS::NWeb;
26 using namespace OHOS::AppExecFwk;
27
28 namespace OHOS {
29 constexpr uint8_t MAX_STRING_LENGTH = 255;
30
31 class AafwkBrowserHostAdapterImpl : public AafwkBrowserHostAdapter {
32 public:
33 void* GetSurfaceFromKernel(int32_t id);
34 void DestroySurfaceFromKernel(int32_t id);
35 };
36
GetSurfaceFromKernel(int32_t id)37 void* AafwkBrowserHostAdapterImpl::GetSurfaceFromKernel(int32_t id)
38 {
39 (void)id;
40 return nullptr;
41 };
42
DestroySurfaceFromKernel(int32_t id)43 void AafwkBrowserHostAdapterImpl::DestroySurfaceFromKernel(int32_t id)
44 {
45 (void)id;
46 };
47
AafwkAttachRenderFuzzTest(const uint8_t * data,size_t size)48 bool AafwkAttachRenderFuzzTest(const uint8_t* data, size_t size)
49 {
50 if ((data == nullptr) || (size == 0)) {
51 return false;
52 }
53 static AafwkAppMgrClientAdapterImpl render;
54 std::shared_ptr<AafwkRenderSchedulerHostAdapter> adapter = nullptr;
55 render.AttachRenderProcess(adapter);
56 static AafwkAppMgrClientAdapterImpl newadapter;
57
58 FuzzedDataProvider dataProvider(data, size);
59 std::string renderParam = dataProvider.ConsumeRandomLengthString(MAX_STRING_LENGTH);
60 int32_t ipcFd = 0;
61 int32_t sharedFd = 0;
62 int32_t crashFd = 0;
63 pid_t renderPid = 0;
64 newadapter.StartRenderProcess(renderParam, ipcFd, sharedFd, crashFd, renderPid);
65 pid_t red = 1;
66 int statused = 1;
67 newadapter.GetRenderProcessTerminationStatus(red, statused);
68 std::string processtype = "gpu-process";
69 newadapter.StartChildProcess(renderParam, ipcFd, sharedFd, crashFd, renderPid, processtype);
70 newadapter.GetRenderProcessTerminationStatus(red, statused);
71
72 static AafwkAppMgrClientAdapterImpl render1;
73 render1.SaveBrowserConnect(nullptr);
74 auto adapter1 = std::make_shared<AafwkBrowserHostAdapterImpl>();
75 render1.SaveBrowserConnect(adapter1);
76 return true;
77 }
78 } // namespace OHOS
79
80 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)81 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
82 {
83 /* Run your code on data */
84 OHOS::AafwkAttachRenderFuzzTest(data, size);
85 return 0;
86 }
87