1 /*
2 * Copyright (c) 2024 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "dhcommtool_fuzzer.h"
17
18 #include <algorithm>
19 #include <chrono>
20 #include <cstddef>
21 #include <cstdint>
22 #include <string>
23 #include <unistd.h>
24
25 #include "constants.h"
26 #include "dh_transport.h"
27 #include "dh_comm_tool.h"
28 #include "socket.h"
29 #include "softbus_bus_center.h"
30
31 namespace OHOS {
32 namespace DistributedHardware {
33 namespace {
34 const int32_t SOCKETID = 1;
35 }
DhTransportTriggerReqFullDHCapsFuzzTest(const uint8_t * data,size_t size)36 void DhTransportTriggerReqFullDHCapsFuzzTest(const uint8_t* data, size_t size)
37 {
38 if ((data == nullptr) || (size == 0)) {
39 return;
40 }
41 std::string remoteNetworkId(reinterpret_cast<const char*>(data), size);
42 std::shared_ptr<DHCommTool> dhCommTool = std::make_shared<DHCommTool>();
43 dhCommTool->dhTransportPtr_ = std::make_shared<DHTransport>(dhCommTool);
44 dhCommTool->dhTransportPtr_->remoteDevSocketIds_[remoteNetworkId] = SOCKETID;
45 dhCommTool->TriggerReqFullDHCaps(remoteNetworkId);
46 dhCommTool->dhTransportPtr_->remoteDevSocketIds_.clear();
47 dhCommTool->dhTransportPtr_ = nullptr;
48 }
49
DhTransportGetAndSendLocalFullCapsFuzzTest(const uint8_t * data,size_t size)50 void DhTransportGetAndSendLocalFullCapsFuzzTest(const uint8_t* data, size_t size)
51 {
52 if ((data == nullptr) || (size == 0)) {
53 return;
54 }
55 std::string remoteNetworkId(reinterpret_cast<const char*>(data), size);
56 std::shared_ptr<DHCommTool> dhCommTool = std::make_shared<DHCommTool>();
57 dhCommTool->dhTransportPtr_ = std::make_shared<DHTransport>(dhCommTool);
58 dhCommTool->GetAndSendLocalFullCaps(remoteNetworkId);
59 dhCommTool->dhTransportPtr_ = nullptr;
60 }
61
DhTransportParseAndSaveRemoteDHCapsFuzzTest(const uint8_t * data,size_t size)62 void DhTransportParseAndSaveRemoteDHCapsFuzzTest(const uint8_t* data, size_t size)
63 {
64 if ((data == nullptr) || (size == 0)) {
65 return;
66 }
67 std::string remoteCaps(reinterpret_cast<const char*>(data), size);
68 std::shared_ptr<DHCommTool> dhCommTool = std::make_shared<DHCommTool>();
69 dhCommTool->ParseAndSaveRemoteDHCaps(remoteCaps);
70 }
71
DhTransportInitFuzzTest(const uint8_t * data,size_t size)72 void DhTransportInitFuzzTest(const uint8_t* data, size_t size)
73 {
74 (void)data;
75 (void)size;
76 std::shared_ptr<DHCommTool> dhCommTool = std::make_shared<DHCommTool>();
77 dhCommTool->Init();
78 }
79
DhTransportUnInitFuzzTest(const uint8_t * data,size_t size)80 void DhTransportUnInitFuzzTest(const uint8_t* data, size_t size)
81 {
82 (void)data;
83 (void)size;
84 std::shared_ptr<DHCommTool> dhCommTool = std::make_shared<DHCommTool>();
85 dhCommTool->UnInit();
86 }
87
DHCommToolEventHandlerCtorFuzzTest(const uint8_t * data,size_t size)88 void DHCommToolEventHandlerCtorFuzzTest(const uint8_t* data, size_t size)
89 {
90 (void)data;
91 (void)size;
92 auto runner = AppExecFwk::EventRunner::Create(true);
93 std::shared_ptr<DHCommTool> commToolPtr;
94 DHCommTool::DHCommToolEventHandler handler(runner, commToolPtr);
95 }
96
DHCommToolEventHandlerProcessEventFuzzTest(const uint8_t * data,size_t size)97 void DHCommToolEventHandlerProcessEventFuzzTest(const uint8_t* data, size_t size)
98 {
99 if ((data == nullptr) || (size == 0)) {
100 return;
101 }
102 auto runner = AppExecFwk::EventRunner::Create(true);
103 auto commTool = std::make_shared<DHCommTool>();
104 auto handler = std::make_shared<DHCommTool::DHCommToolEventHandler>(runner, commTool);
105
106 uint32_t eventId = (size > 0) ? data[0] % 4 : 0;
107
108 auto event = AppExecFwk::InnerEvent::Get(eventId);
109 handler->ProcessEvent(event);
110 auto eventNoMsg = AppExecFwk::InnerEvent::Get(eventId);
111 handler->ProcessEvent(eventNoMsg);
112 }
113
DHCommToolEventHandlerProcessFullCapsRspFuzzTest(const uint8_t * data,size_t size)114 void DHCommToolEventHandlerProcessFullCapsRspFuzzTest(const uint8_t* data, size_t size)
115 {
116 (void)data;
117 (void)size;
118 auto runner = AppExecFwk::EventRunner::Create(true);
119 auto commTool = std::make_shared<DHCommTool>();
120 DHCommTool::DHCommToolEventHandler handler(runner, commTool);
121
122 FullCapsRsp capsRsp;
123 handler.ProcessFullCapsRsp(capsRsp, commTool);
124
125 capsRsp.networkId = "fuzz_network";
126 handler.ProcessFullCapsRsp(capsRsp, commTool);
127
128 auto capInfo = std::make_shared<CapabilityInfo>();
129 capsRsp.caps.push_back(capInfo);
130 handler.ProcessFullCapsRsp(capsRsp, nullptr);
131
132 auto commToolNoTrans = std::make_shared<DHCommTool>();
133 handler.ProcessFullCapsRsp(capsRsp, commToolNoTrans);
134
135 commTool->Init();
136 handler.ProcessFullCapsRsp(capsRsp, commTool);
137 }
138 }
139 }
140
141 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)142 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
143 {
144 /* Run your code on data */
145
146 OHOS::DistributedHardware::DhTransportTriggerReqFullDHCapsFuzzTest(data, size);
147 OHOS::DistributedHardware::DhTransportGetAndSendLocalFullCapsFuzzTest(data, size);
148 OHOS::DistributedHardware::DhTransportParseAndSaveRemoteDHCapsFuzzTest(data, size);
149 OHOS::DistributedHardware::DhTransportInitFuzzTest(data, size);
150 OHOS::DistributedHardware::DhTransportUnInitFuzzTest(data, size);
151 OHOS::DistributedHardware::DHCommToolEventHandlerCtorFuzzTest(data, size);
152 OHOS::DistributedHardware::DHCommToolEventHandlerProcessEventFuzzTest(data, size);
153 OHOS::DistributedHardware::DHCommToolEventHandlerProcessFullCapsRspFuzzTest(data, size);
154 return 0;
155 }
156
157