1 /*
2 * Copyright (C) 2022 Huawei Technologies Co., Ltd.
3 * Licensed under the Mulan PSL v2.
4 * You can use this software according to the terms and conditions of the Mulan PSL v2.
5 * You may obtain a copy of Mulan PSL v2 at:
6 * http://license.coscl.org.cn/MulanPSL2
7 * THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR
8 * IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT, MERCHANTABILITY OR FIT FOR A PARTICULAR
9 * PURPOSE.
10 * See the Mulan PSL v2 for more details.
11 */
12
13 #include "teeclientrequestcancellation_fuzzer.h"
14
15 #include <cstddef>
16 #include <cstdint>
17 #include "tee_client_api.h"
18 #include "tee_client_inner_api.h"
19 #include "tee_client_constants.h"
20 #include "tee_client_type.h"
21
22 namespace OHOS {
TeeClientRequestCancellationFuzzTest(const uint8_t * data,size_t size)23 bool TeeClientRequestCancellationFuzzTest(const uint8_t *data, size_t size)
24 {
25 bool result = false;
26 if (size > sizeof(TEEC_Operation)) {
27 TEEC_Operation operation = *reinterpret_cast<TEEC_Operation *>(const_cast<uint8_t *>(data));
28 (void)TEEC_RequestCancellation(&operation);
29 }
30 return result;
31 }
32
TEEC_RequestCancellationTest_001(const uint8_t * data,size_t size)33 void TEEC_RequestCancellationTest_001(const uint8_t *data, size_t size)
34 {
35 (void)data;
36 (void)size;
37 TEEC_Operation operation = { 0 };
38
39 GetBnShmByOffset(0, nullptr);
40 TEEC_RequestCancellation(nullptr);
41
42 operation.session = nullptr;
43 TEEC_RequestCancellation(&operation);
44
45 TEEC_Session session = { 0 };
46 operation.session = &session;
47 session.context = nullptr;
48 TEEC_RequestCancellation(&operation);
49
50 TEEC_Context context = { 0 };
51 TEEC_Result result = TEEC_InitializeContext(nullptr, &context);
52 operation.started = 1;
53 operation.paramTypes = TEEC_PARAM_TYPES(TEEC_NONE, TEEC_NONE, TEEC_NONE, TEEC_NONE);
54 TEEC_UUID uuid = { 0xabe89147, 0xcd61, 0xf43f, { 0x71, 0xc4, 0x1a, 0x31, 0x7e, 0x40, 0x53, 0x12 } };
55 result = TEEC_OpenSession(&context, &session, &uuid, TEEC_LOGIN_IDENTIFY, nullptr, &operation, nullptr);
56
57 TEEC_RequestCancellation(&operation);
58 }
59 }
60
61 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)62 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
63 {
64 /* Run your code on data */
65 OHOS::TeeClientRequestCancellationFuzzTest(data, size);
66 OHOS::TEEC_RequestCancellationTest_001(data, size);
67 return 0;
68 }