1 /*
2 * Copyright (c) 2025 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "seektimeonpackage_fuzzer.h"
17
18 #include "accesstoken_kit.h"
19 #include "nativetoken_kit.h"
20 #include "securec.h"
21 #include "token_setproc.h"
22 #include "vibrator_agent.h"
23
24 namespace OHOS {
25 using namespace Security::AccessToken;
26 using Security::AccessToken::AccessTokenID;
27 namespace {
28 constexpr size_t DATA_MIN_SIZE = 20;
29 } // namespace
30
31 template<class T>
GetObject(const uint8_t * data,size_t size,T & object)32 size_t GetObject(const uint8_t *data, size_t size, T &object)
33 {
34 size_t objectSize = sizeof(object);
35 if (objectSize > size) {
36 return 0;
37 }
38 errno_t ret = memcpy_s(&object, objectSize, data, objectSize);
39 if (ret != EOK) {
40 return 0;
41 }
42 return objectSize;
43 }
44
SetUpTestCase()45 void SetUpTestCase()
46 {
47 const char **perms = new (std::nothrow) const char *[1];
48 if (perms == nullptr) {
49 return;
50 }
51 perms[0] = "ohos.permission.VIBRATE";
52 TokenInfoParams infoInstance = {
53 .dcapsNum = 0,
54 .permsNum = 1,
55 .aclsNum = 0,
56 .dcaps = nullptr,
57 .perms = perms,
58 .acls = nullptr,
59 .processName = "SeekTimeOnPackageTest",
60 .aplStr = "system_core",
61 };
62 uint64_t tokenId = GetAccessTokenId(&infoInstance);
63 SetSelfTokenID(tokenId);
64 AccessTokenKit::ReloadNativeTokenInfo();
65 delete[] perms;
66 }
67
SeekTimeOnPackageFuzzTest(const uint8_t * data,size_t size)68 void SeekTimeOnPackageFuzzTest(const uint8_t *data, size_t size)
69 {
70 if (data == nullptr || size < DATA_MIN_SIZE) {
71 return;
72 }
73 SetUpTestCase();
74 VibratorPackage packageIn{ 0 };
75 VibratorPackage packageOut{ 0 };
76 size_t startPos = 0;
77 startPos += GetObject<int32_t>(data + startPos, size - startPos, packageOut.patternNum);
78 GetObject<int32_t>(data + startPos, size - startPos, packageOut.packageDuration);
79 int32_t seekTime{ 0 };
80 OHOS::Sensors::SeekTimeOnPackage(seekTime, packageIn, packageOut);
81 }
82 } // namespace OHOS
83
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)84 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
85 {
86 OHOS::SeekTimeOnPackageFuzzTest(data, size);
87 return 0;
88 }