1 /*
2 * Copyright (c) 2023 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "bufferrefnew_fuzzer.h"
17 #include "ecmascript/ecma_string-inl.h"
18 #include "ecmascript/napi/include/jsnapi.h"
19
20 using namespace panda;
21 using namespace panda::ecmascript;
22
23 namespace OHOS {
BufferRefNewFuzzTest(const uint8_t * data,size_t size)24 void BufferRefNewFuzzTest([[maybe_unused]]const uint8_t *data, size_t size)
25 {
26 RuntimeOption option;
27 option.SetLogLevel(common::LOG_LEVEL::ERROR);
28 EcmaVM *vm = JSNApi::CreateJSVM(option);
29 if (size <= 0) {
30 LOG_ECMA(ERROR) << "illegal input!";
31 return;
32 }
33 BufferRef::New(vm, (int32_t)size);
34 JSNApi::DestroyJSVM(vm);
35 }
36
BufferRefMultiParamNewFuzzTest(const uint8_t * data,size_t size)37 void BufferRefMultiParamNewFuzzTest(const uint8_t *data, size_t size)
38 {
39 if (data == nullptr || size <= 0) {
40 LOG_ECMA(ERROR) << "illegal input!";
41 return;
42 }
43 RuntimeOption option;
44 option.SetLogLevel(common::LOG_LEVEL::ERROR);
45 EcmaVM *vm = JSNApi::CreateJSVM(option);
46 NativePointerCallback deleter = nullptr;
47 BufferRef::New(vm, (void *)data, (int32_t)size, deleter, (void *)data);
48 JSNApi::DestroyJSVM(vm);
49 }
50
BufferRefByteLengthFuzzTest(const uint8_t * data,size_t size)51 void BufferRefByteLengthFuzzTest(const uint8_t *data, size_t size)
52 {
53 RuntimeOption option;
54 option.SetLogLevel(common::LOG_LEVEL::ERROR);
55 EcmaVM *vm = JSNApi::CreateJSVM(option);
56 if (size <= 0) {
57 LOG_ECMA(ERROR) << "illegal input!";
58 return;
59 }
60 NativePointerCallback deleter = nullptr;
61 Local<BufferRef> buffer = BufferRef::New(vm, (void *)data, (int32_t)size, deleter, (void *)data);
62 buffer->ByteLength(vm);
63 JSNApi::DestroyJSVM(vm);
64 }
65
BufferRefGetBufferFuzzTest(const uint8_t * data,size_t size)66 void BufferRefGetBufferFuzzTest(const uint8_t *data, size_t size)
67 {
68 RuntimeOption option;
69 option.SetLogLevel(common::LOG_LEVEL::ERROR);
70 EcmaVM *vm = JSNApi::CreateJSVM(option);
71 if (size <= 0) {
72 LOG_ECMA(ERROR) << "illegal input!";
73 return;
74 }
75 NativePointerCallback deleter = nullptr;
76 Local<BufferRef> buffer = BufferRef::New(vm, (void *)data, (int32_t)size, deleter, (void *)data);
77 buffer->GetBuffer(vm);
78 JSNApi::DestroyJSVM(vm);
79 }
80
BufferToStringCallbackFuzzTest(const uint8_t * data,size_t size)81 void BufferToStringCallbackFuzzTest(const uint8_t *data, size_t size)
82 {
83 RuntimeOption option;
84 option.SetLogLevel(common::LOG_LEVEL::ERROR);
85 EcmaVM *vm = JSNApi::CreateJSVM(option);
86 if (size <= 0) {
87 LOG_ECMA(ERROR) << "illegal input!";
88 return;
89 }
90 NativePointerCallback deleter = nullptr;
91 Local<BufferRef> buffer = BufferRef::New(vm, (void *)data, (int32_t)size, deleter, (void *)data);
92 buffer->ToString(vm);
93 JSNApi::DestroyJSVM(vm);
94 }
95 }
96
97 // Fuzzer entry point.
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)98 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
99 {
100 // Run your code on data.
101 OHOS::BufferRefNewFuzzTest(data, size);
102 OHOS::BufferRefMultiParamNewFuzzTest(data, size);
103 OHOS::BufferRefByteLengthFuzzTest(data, size);
104 OHOS::BufferRefGetBufferFuzzTest(data, size);
105 OHOS::BufferToStringCallbackFuzzTest(data, size);
106 return 0;
107 }