1 /*
2 * Copyright (c) 2025 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "ohosimagedecoderadapterimplgetmethods_fuzzer.h"
17
18 #include <securec.h>
19 #include <sys/mman.h>
20 #include <fuzzer/FuzzedDataProvider.h>
21
22 #include "image_source.h"
23 #include "image_type.h"
24 #include "media_errors.h"
25 #include "ohos_adapter_helper.h"
26
27 using namespace OHOS::NWeb;
28 const std::string DEFAULT_MOUSE_DRAG_IMAGE { "/system/etc/device_status/drag_icon/Copy_Drag.svg" };
29
30 namespace OHOS {
31 constexpr int MAX_SET_NUMBER = 1000;
CreateDecoderAdapter()32 std::shared_ptr<OhosImageDecoderAdapter> CreateDecoderAdapter()
33 {
34 return OhosAdapterHelper::GetInstance().CreateOhosImageDecoderAdapter();
35 }
36
GetParameters(std::shared_ptr<OhosImageDecoderAdapter> & adapter,const uint8_t * data,size_t size)37 bool GetParameters(std::shared_ptr<OhosImageDecoderAdapter>& adapter, const uint8_t* data, size_t size)
38 {
39 FuzzedDataProvider dataProvider(data, size);
40 uint32_t errorCode = dataProvider.ConsumeIntegralInRange<uint32_t>(0, MAX_SET_NUMBER);
41 OHOS::Media::SourceOptions opts;
42 auto imageSource = OHOS::Media::ImageSource::CreateImageSource(DEFAULT_MOUSE_DRAG_IMAGE, opts, errorCode);
43 if (!imageSource || errorCode != Media::SUCCESS) {
44 return false;
45 }
46
47 OHOS::Media::DecodeOptions decodeOpts;
48 auto pixelMap = imageSource->CreatePixelMap(decodeOpts, errorCode);
49 if (!pixelMap || errorCode != OHOS::Media::SUCCESS) {
50 return false;
51 }
52
53 const uint8_t* imageData = pixelMap->GetPixels();
54 if (!imageData) {
55 return false;
56 }
57
58 size_t len = pixelMap->GetPixelBytes();
59 adapter->ParseImageInfo(imageData, len);
60 adapter->GetEncodedFormat();
61 adapter->GetImageWidth();
62 adapter->GetImageHeight();
63 adapter->DecodeToPixelMap(imageData, len);
64 adapter->GetFd();
65 adapter->GetStride();
66 adapter->GetOffset();
67 adapter->GetSize();
68 adapter->GetNativeWindowBuffer();
69 adapter->GetPlanesCount();
70 adapter->GetDecodeData();
71 adapter->ReleasePixelMap();
72 return true;
73 }
74
ApplyOhosImageDecoderAdapterFuzzTest(const uint8_t * data,size_t size)75 bool ApplyOhosImageDecoderAdapterFuzzTest(const uint8_t* data, size_t size)
76 {
77 if ((data == nullptr) || (size == 0)) {
78 return true;
79 }
80 size_t callCount = data[0] % 10;
81 for (size_t i = 0; i < callCount; ++i) {
82 auto adapter = CreateDecoderAdapter();
83 if (!adapter) {
84 return false;
85 }
86 GetParameters(adapter, data, size);
87 }
88 return true;
89 }
90
91 } // namespace OHOS
92
93 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)94 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
95 {
96 OHOS::ApplyOhosImageDecoderAdapterFuzzTest(data, size);
97 return 0;
98 }
99
