1 /*
2 * Copyright (c) 2025 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "dataabilityrecordfirst_fuzzer.h"
17
18 #include <cstddef>
19 #include <cstdint>
20 #include <fuzzer/FuzzedDataProvider.h>
21
22 #define private public
23 #include "data_ability_record.h"
24 #undef private
25
26 #include "ability_fuzz_util.h"
27
28 using namespace std::chrono;
29 using namespace OHOS::AAFwk;
30 using namespace OHOS::AppExecFwk;
31
32 namespace OHOS {
33 namespace {
34 constexpr size_t STRING_MAX_LENGTH = 128;
35 }
36 class AbilitySchedulerFuzzTest : public IRemoteStub<IAbilityScheduler> {
37 public:
38 AbilitySchedulerFuzzTest() = default;
~AbilitySchedulerFuzzTest()39 virtual ~AbilitySchedulerFuzzTest()
40 {};
ScheduleAbilityTransaction(const Want & want,const LifeCycleStateInfo & targetState,sptr<SessionInfo> sessionInfo=nullptr)41 bool ScheduleAbilityTransaction(const Want& want, const LifeCycleStateInfo& targetState,
42 sptr<SessionInfo> sessionInfo = nullptr) override
43 {
44 return true;
45 }
ScheduleShareData(const int32_t & uniqueId)46 void ScheduleShareData(const int32_t &uniqueId) override
47 {}
SendResult(int requestCode,int resultCode,const Want & resultWant)48 void SendResult(int requestCode, int resultCode, const Want& resultWant) override
49 {}
ScheduleConnectAbility(const Want & want)50 void ScheduleConnectAbility(const Want& want) override
51 {}
ScheduleDisconnectAbility(const Want & want)52 void ScheduleDisconnectAbility(const Want& want) override
53 {}
ScheduleCommandAbility(const Want & want,bool restart,int startId)54 void ScheduleCommandAbility(const Want& want, bool restart, int startId) override
55 {}
ScheduleCommandAbilityWindow(const Want & want,const sptr<SessionInfo> & sessionInfo,WindowCommand winCmd)56 void ScheduleCommandAbilityWindow(const Want &want, const sptr<SessionInfo> &sessionInfo,
57 WindowCommand winCmd) override
58 {}
SchedulePrepareTerminateAbility()59 bool SchedulePrepareTerminateAbility() override
60 {
61 return false;
62 }
ScheduleSaveAbilityState()63 void ScheduleSaveAbilityState() override
64 {}
ScheduleRestoreAbilityState(const PacMap & inState)65 void ScheduleRestoreAbilityState(const PacMap& inState) override
66 {}
GetFileTypes(const Uri & uri,const std::string & mimeTypeFilter)67 std::vector<std::string> GetFileTypes(const Uri& uri, const std::string& mimeTypeFilter) override
68 {
69 return {};
70 }
OpenFile(const Uri & uri,const std::string & mode)71 int OpenFile(const Uri& uri, const std::string& mode) override
72 {
73 return 0;
74 }
OpenRawFile(const Uri & uri,const std::string & mode)75 int OpenRawFile(const Uri& uri, const std::string& mode) override
76 {
77 return 0;
78 }
Insert(const Uri & uri,const NativeRdb::ValuesBucket & value)79 int Insert(const Uri& uri, const NativeRdb::ValuesBucket& value) override
80 {
81 return 0;
82 }
Update(const Uri & uri,const NativeRdb::ValuesBucket & value,const NativeRdb::DataAbilityPredicates & predicates)83 int Update(const Uri& uri, const NativeRdb::ValuesBucket& value,
84 const NativeRdb::DataAbilityPredicates& predicates) override
85 {
86 return 0;
87 }
Delete(const Uri & uri,const NativeRdb::DataAbilityPredicates & predicates)88 int Delete(const Uri& uri, const NativeRdb::DataAbilityPredicates& predicates) override
89 {
90 return 0;
91 }
Call(const Uri & uri,const std::string & method,const std::string & arg,const AppExecFwk::PacMap & pacMap)92 std::shared_ptr<AppExecFwk::PacMap> Call(
93 const Uri& uri, const std::string& method, const std::string& arg, const AppExecFwk::PacMap& pacMap) override
94 {
95 return {};
96 }
Query(const Uri & uri,std::vector<std::string> & columns,const NativeRdb::DataAbilityPredicates & predicates)97 std::shared_ptr<NativeRdb::AbsSharedResultSet> Query(const Uri& uri,
98 std::vector<std::string>& columns, const NativeRdb::DataAbilityPredicates& predicates) override
99 {
100 return {};
101 }
GetType(const Uri & uri)102 std::string GetType(const Uri& uri) override
103 {
104 return {};
105 }
Reload(const Uri & uri,const PacMap & extras)106 bool Reload(const Uri& uri, const PacMap& extras) override
107 {
108 return true;
109 }
BatchInsert(const Uri & uri,const std::vector<NativeRdb::ValuesBucket> & values)110 int BatchInsert(const Uri& uri, const std::vector<NativeRdb::ValuesBucket>& values) override
111 {
112 return 0;
113 }
ScheduleRegisterObserver(const Uri & uri,const sptr<IDataAbilityObserver> & dataObserver)114 bool ScheduleRegisterObserver(const Uri& uri, const sptr<IDataAbilityObserver>& dataObserver) override
115 {
116 return true;
117 }
ScheduleUnregisterObserver(const Uri & uri,const sptr<IDataAbilityObserver> & dataObserver)118 bool ScheduleUnregisterObserver(const Uri& uri, const sptr<IDataAbilityObserver>& dataObserver) override
119 {
120 return true;
121 }
ScheduleNotifyChange(const Uri & uri)122 bool ScheduleNotifyChange(const Uri& uri) override
123 {
124 return true;
125 }
NormalizeUri(const Uri & uri)126 Uri NormalizeUri(const Uri& uri) override
127 {
128 return Uri{ "abilityschedulerstub" };
129 }
130
DenormalizeUri(const Uri & uri)131 Uri DenormalizeUri(const Uri& uri) override
132 {
133 return Uri{ "abilityschedulerstub" };
134 }
ExecuteBatch(const std::vector<std::shared_ptr<AppExecFwk::DataAbilityOperation>> & operations)135 std::vector<std::shared_ptr<AppExecFwk::DataAbilityResult>> ExecuteBatch(
136 const std::vector<std::shared_ptr<AppExecFwk::DataAbilityOperation>>& operations) override
137 {
138 return {};
139 }
ContinueAbility(const std::string & deviceId,uint32_t versionCode)140 void ContinueAbility(const std::string& deviceId, uint32_t versionCode) override
141 {}
NotifyContinuationResult(int32_t result)142 void NotifyContinuationResult(int32_t result) override
143 {}
DumpAbilityInfo(const std::vector<std::string> & params,std::vector<std::string> & info)144 void DumpAbilityInfo(const std::vector<std::string>& params, std::vector<std::string>& info) override
145 {}
UpdateSessionToken(sptr<IRemoteObject> sessionToken)146 void UpdateSessionToken(sptr<IRemoteObject> sessionToken) override
147 {}
OnExecuteIntent(const Want & want)148 void OnExecuteIntent(const Want &want) override
149 {}
CreateModalUIExtension(const Want & want)150 int CreateModalUIExtension(const Want &want) override
151 {
152 return 0;
153 }
CallRequest()154 void CallRequest() override
155 {
156 return;
157 }
ScheduleCollaborate(const Want & want)158 void ScheduleCollaborate(const Want &want) override
159 {}
160
ScheduleAbilityRequestFailure(const std::string & requestId,const AppExecFwk::ElementName & element,const std::string & message,int32_t resultCode)161 void ScheduleAbilityRequestFailure(const std::string &requestId, const AppExecFwk::ElementName &element,
162 const std::string &message, int32_t resultCode) override
163 {}
164
ScheduleAbilityRequestSuccess(const std::string & requestId,const AppExecFwk::ElementName & element)165 void ScheduleAbilityRequestSuccess(const std::string &requestId, const AppExecFwk::ElementName &element) override
166 {}
167
ScheduleAbilitiesRequestDone(const std::string & requestKey,int32_t resultCode)168 void ScheduleAbilitiesRequestDone(const std::string &requestKey, int32_t resultCode) override
169 {}
170 };
171
DoSomethingInterestingWithMyAPI(const uint8_t * data,size_t size)172 bool DoSomethingInterestingWithMyAPI(const uint8_t* data, size_t size)
173 {
174 AbilityRequest abilityRequest;
175 abilityRequest.appInfo.bundleName = "com.example.fuzzTest";
176 abilityRequest.abilityInfo.name = "MainAbility";
177 abilityRequest.abilityInfo.type = AbilityType::DATA;
178 auto dataAbilityRecord = std::make_shared<DataAbilityRecord>(abilityRequest);
179 ffrt::mutex mutex;
180 system_clock::duration timeout = 800ms;
181 sptr<IAbilityScheduler> scheduler;
182 int state;
183 sptr<IRemoteObject> client;
184 bool tryBind;
185 bool isNotHap;
186 std::shared_ptr<AbilityRecord> abilityRecordClient;
187 std::vector<std::string> info;
188 wptr<IRemoteObject> remote;
189 sptr<IRemoteObject> callerRemote;
190 FuzzedDataProvider fdp(data, size);
191 state = fdp.ConsumeIntegral<int>();
192 tryBind = fdp.ConsumeBool();
193 isNotHap = fdp.ConsumeBool();
194 info = AbilityFuzzUtil::GenerateStringArray(fdp);
195
196 dataAbilityRecord->StartLoading();
197 dataAbilityRecord->GetScheduler();
198 dataAbilityRecord->WaitForLoaded(mutex, timeout);
199 dataAbilityRecord->Attach(scheduler);
200 scheduler = new AbilitySchedulerFuzzTest();
201 dataAbilityRecord->Attach(scheduler);
202 dataAbilityRecord->OnTransitionDone(state);
203 dataAbilityRecord->AddClient(client, tryBind, isNotHap);
204 dataAbilityRecord->GetClientCount(client);
205 dataAbilityRecord->KillBoundClientProcesses();
206 dataAbilityRecord->RemoveClient(client, isNotHap);
207 dataAbilityRecord->RemoveClients(abilityRecordClient);
208 dataAbilityRecord->GetRequest();
209 dataAbilityRecord->GetAbilityRecord();
210 dataAbilityRecord->GetToken();
211 dataAbilityRecord->Dump();
212 dataAbilityRecord->Dump(info);
213 dataAbilityRecord->GetDiedCallerPid(callerRemote);
214 return true;
215 }
216 }
217
218 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)219 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
220 {
221 // Run your code on data.
222 OHOS::DoSomethingInterestingWithMyAPI(data, size);
223 return 0;
224 }