1 /*
2 * Copyright (c) 2023 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include <fuzzer/FuzzedDataProvider.h>
17 #include "jsvaluerefisjsprimitive_fuzzer.h"
18 #include "ecmascript/ecma_string-inl.h"
19 #include "ecmascript/js_primitive_ref.h"
20 #include "ecmascript/napi/include/jsnapi.h"
21 #include "ecmascript/napi/jsnapi_helper.h"
22 #include "ecmascript/object_factory.h"
23
24 using namespace panda;
25 using namespace panda::ecmascript;
26
27 namespace OHOS {
IsJSPrimitiveSymbolFuzztest(const uint8_t * data,size_t size)28 void IsJSPrimitiveSymbolFuzztest(const uint8_t *data, size_t size)
29 {
30 FuzzedDataProvider fdp(data, size);
31 const int arkProp = fdp.ConsumeIntegral<int>();
32 RuntimeOption option;
33 option.SetLogLevel(common::LOG_LEVEL::ERROR);
34 option.SetArkProperties(arkProp);
35 EcmaVM *vm = JSNApi::CreateJSVM(option);
36 {
37 JsiFastNativeScope scope(vm);
38 if (size <= 0) {
39 LOG_ECMA(ERROR) << "illegal input!";
40 return;
41 }
42 ObjectFactory *factory = vm->GetFactory();
43 JSHandle<JSTaggedValue> jsTagValue;
44 JSHandle<JSPrimitiveRef> jsPrimitive = factory->NewJSPrimitiveRef(PrimitiveType::PRIMITIVE_SYMBOL, jsTagValue);
45 JSHandle<JSTaggedValue> jsTagPrimitive = JSHandle<JSTaggedValue>::Cast(jsPrimitive);
46 Local<JSValueRef> object = JSNApiHelper::ToLocal<JSValueRef>(jsTagPrimitive);
47 object->IsJSPrimitiveSymbol(vm);
48 }
49 JSNApi::DestroyJSVM(vm);
50 }
51
IsJSPrimitiveStringFuzztest(const uint8_t * data,size_t size)52 void IsJSPrimitiveStringFuzztest(const uint8_t *data, size_t size)
53 {
54 FuzzedDataProvider fdp(data, size);
55 const int arkProp = fdp.ConsumeIntegral<int>();
56 RuntimeOption option;
57 option.SetLogLevel(common::LOG_LEVEL::ERROR);
58 option.SetArkProperties(arkProp);
59 EcmaVM *vm = JSNApi::CreateJSVM(option);
60 {
61 JsiFastNativeScope scope(vm);
62 if (size <= 0) {
63 LOG_ECMA(ERROR) << "illegal input!";
64 return;
65 }
66 ObjectFactory *factory = vm->GetFactory();
67 JSHandle<JSTaggedValue> jsTagValue;
68 JSHandle<JSPrimitiveRef> jsPrimitive = factory->NewJSPrimitiveRef(PrimitiveType::PRIMITIVE_SYMBOL, jsTagValue);
69 JSHandle<JSTaggedValue> jsTagPrimitive = JSHandle<JSTaggedValue>::Cast(jsPrimitive);
70 Local<JSValueRef> object = JSNApiHelper::ToLocal<JSValueRef>(jsTagPrimitive);
71 object->IsJSPrimitiveString(vm);
72 }
73 JSNApi::DestroyJSVM(vm);
74 }
75
IsJSPrimitiveIntFuzztest(const uint8_t * data,size_t size)76 void IsJSPrimitiveIntFuzztest(const uint8_t *data, size_t size)
77 {
78 FuzzedDataProvider fdp(data, size);
79 const int arkProp = fdp.ConsumeIntegral<int>();
80 RuntimeOption option;
81 option.SetLogLevel(common::LOG_LEVEL::ERROR);
82 option.SetArkProperties(arkProp);
83 EcmaVM *vm = JSNApi::CreateJSVM(option);
84 {
85 JsiFastNativeScope scope(vm);
86 if (size <= 0) {
87 LOG_ECMA(ERROR) << "illegal input!";
88 return;
89 }
90 ObjectFactory *factory = vm->GetFactory();
91 JSHandle<JSTaggedValue> jsTagValue;
92 JSHandle<JSPrimitiveRef> jsPrimitive = factory->NewJSPrimitiveRef(PrimitiveType::PRIMITIVE_BIGINT, jsTagValue);
93 JSHandle<JSTaggedValue> jsTagPrimitive = JSHandle<JSTaggedValue>::Cast(jsPrimitive);
94 Local<JSValueRef> object = JSNApiHelper::ToLocal<JSValueRef>(jsTagPrimitive);
95 object->IsJSPrimitiveInt(vm);
96 }
97 JSNApi::DestroyJSVM(vm);
98 }
99 }
100
101 // Fuzzer entry point.
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)102 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
103 {
104 // Run your code on data.
105 OHOS::IsJSPrimitiveSymbolFuzztest(data, size);
106 OHOS::IsJSPrimitiveStringFuzztest(data, size);
107 OHOS::IsJSPrimitiveIntFuzztest(data, size);
108 return 0;
109 }