1 /*
2 * Copyright (c) 2023-2025 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "registerpermstatechangecallbackstub_fuzzer.h"
17
18 #include <string>
19 #include <thread>
20 #include <vector>
21
22 #undef private
23 #include "accesstoken_manager_client.h"
24 #include "accesstoken_manager_service.h"
25 #include "fuzzer/FuzzedDataProvider.h"
26 #include "iaccess_token_manager.h"
27
28 using namespace std;
29 using namespace OHOS::Security::AccessToken;
30
31 class CbCustomizeTest2 : public PermStateChangeCallbackCustomize {
32 public:
CbCustomizeTest2(const PermStateChangeScope & scopeInfo)33 explicit CbCustomizeTest2(const PermStateChangeScope &scopeInfo)
34 : PermStateChangeCallbackCustomize(scopeInfo)
35 {
36 }
37
~CbCustomizeTest2()38 ~CbCustomizeTest2()
39 {}
40
PermStateChangeCallback(PermStateChangeInfo & result)41 virtual void PermStateChangeCallback(PermStateChangeInfo& result)
42 {
43 ready_ = true;
44 }
45
46 bool ready_ = false;
47 };
48
49 namespace OHOS {
RegisterPermStateChangeCallbackStubFuzzTest(const uint8_t * data,size_t size)50 bool RegisterPermStateChangeCallbackStubFuzzTest(const uint8_t* data, size_t size)
51 {
52 if ((data == nullptr) || (size == 0)) {
53 return false;
54 }
55
56 FuzzedDataProvider provider(data, size);
57 AccessTokenID tokenId = provider.ConsumeIntegral<AccessTokenID>();
58 std::string permissionName = provider.ConsumeRandomLengthString();
59
60 PermStateChangeScope scopeInfo;
61 scopeInfo.permList = { permissionName };
62 scopeInfo.tokenIDs = { tokenId };
63 auto callbackPtr = std::make_shared<CbCustomizeTest2>(scopeInfo);
64
65 PermStateChangeScopeParcel scopeParcel;
66 scopeParcel.scope = scopeInfo;
67
68 sptr<PermissionStateChangeCallback> callback;
69 callback = new (std::nothrow) PermissionStateChangeCallback(callbackPtr);
70
71 MessageParcel datas;
72 datas.WriteInterfaceToken(IAccessTokenManager::GetDescriptor());
73 if (!datas.WriteParcelable(&scopeParcel)) {
74 return false;
75 }
76 if (!datas.WriteRemoteObject(callback->AsObject())) {
77 return false;
78 }
79
80 uint32_t code = static_cast<uint32_t>(
81 IAccessTokenManagerIpcCode::COMMAND_REGISTER_PERM_STATE_CHANGE_CALLBACK);
82
83 MessageParcel reply;
84 MessageOption option;
85 DelayedSingleton<AccessTokenManagerService>::GetInstance()->OnRemoteRequest(code, datas, reply, option);
86
87 MessageParcel datas2;
88 datas2.WriteInterfaceToken(IAccessTokenManager::GetDescriptor());
89 DelayedSingleton<AccessTokenManagerService>::GetInstance()->OnRemoteRequest(
90 static_cast<uint32_t>(IAccessTokenManagerIpcCode::COMMAND_UN_REGISTER_PERM_STATE_CHANGE_CALLBACK),
91 datas2, reply, option);
92
93 return true;
94 }
95 } // namespace OHOS
96
97 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)98 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
99 {
100 /* Run your code on data */
101 OHOS::RegisterPermStateChangeCallbackStubFuzzTest(data, size);
102 return 0;
103 }
104