1 /*
2 * Copyright (c) 2025 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15 #include <fuzzer/FuzzedDataProvider.h>
16
17 #include "rdb_predicates.h"
18
19
20 #define LOOPS_MIN 0
21 #define LOOPS_MAX 100
22
23 using namespace OHOS;
24 using namespace OHOS::NativeRdb;
25
26 namespace OHOS {
ConsumeRandomLengthStringVector(FuzzedDataProvider & provider)27 std::vector<std::string> ConsumeRandomLengthStringVector(FuzzedDataProvider &provider)
28 {
29 size_t loops = provider.ConsumeIntegralInRange<size_t>(LOOPS_MIN, LOOPS_MAX);
30 std::vector<std::string> columns;
31 for (size_t i = 0; i < loops; ++i) {
32 int32_t length = provider.ConsumeIntegral<int32_t>();
33 auto bytes = provider.ConsumeBytes<char>(length);
34 columns.emplace_back(bytes.begin(), bytes.end());
35 }
36 return columns;
37 }
38
RdbPredicatesCrossJoinFuzz(FuzzedDataProvider & provider)39 void RdbPredicatesCrossJoinFuzz(FuzzedDataProvider &provider)
40 {
41 std::string tableName = provider.ConsumeRandomLengthString();
42 RdbPredicates predicates(tableName);
43 std::string joinTableName = provider.ConsumeRandomLengthString();
44 predicates.CrossJoin(joinTableName);
45 }
46
RdbPredicatesInnerJoinFuzz(FuzzedDataProvider & provider)47 void RdbPredicatesInnerJoinFuzz(FuzzedDataProvider &provider)
48 {
49 std::string tableName = provider.ConsumeRandomLengthString();
50 RdbPredicates predicates(tableName);
51 std::string joinTableName = provider.ConsumeRandomLengthString();
52 predicates.InnerJoin(joinTableName);
53 }
54
RdbPredicatesLeftOuterJoinFuzz(FuzzedDataProvider & provider)55 void RdbPredicatesLeftOuterJoinFuzz(FuzzedDataProvider &provider)
56 {
57 std::string tableName = provider.ConsumeRandomLengthString();
58 RdbPredicates predicates(tableName);
59 std::string joinTableName = provider.ConsumeRandomLengthString();
60 predicates.LeftOuterJoin(joinTableName);
61 }
62
RdbPredicatesUsingFuzz(FuzzedDataProvider & provider)63 void RdbPredicatesUsingFuzz(FuzzedDataProvider &provider)
64 {
65 std::string tableName = provider.ConsumeRandomLengthString();
66 RdbPredicates predicates(tableName);
67 std::vector<std::string> fields = ConsumeRandomLengthStringVector(provider);
68 predicates.Using(fields);
69 }
70
RdbPredicatesOnFuzz(FuzzedDataProvider & provider)71 void RdbPredicatesOnFuzz(FuzzedDataProvider &provider)
72 {
73 std::string tableName = provider.ConsumeRandomLengthString();
74 RdbPredicates predicates(tableName);
75 std::vector<std::string> clauses = ConsumeRandomLengthStringVector(provider);
76 predicates.On(clauses);
77 }
78
79 } // namespace OHOS
80
81 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)82 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
83 {
84 FuzzedDataProvider provider(data, size);
85 OHOS::RdbPredicatesCrossJoinFuzz(provider);
86 OHOS::RdbPredicatesInnerJoinFuzz(provider);
87 OHOS::RdbPredicatesLeftOuterJoinFuzz(provider);
88 OHOS::RdbPredicatesUsingFuzz(provider);
89 OHOS::RdbPredicatesOnFuzz(provider);
90 return 0;
91 }
92