1 /* 2 * Copyright (c) 2024 Huawei Device Co., Ltd. 3 * Licensed under the Apache License, Version 2.0 (the "License"); 4 * you may not use this file except in compliance with the License. 5 * You may obtain a copy of the License at 6 * 7 * http://www.apache.org/licenses/LICENSE-2.0 8 * 9 * Unless required by applicable law or agreed to in writing, software 10 * distributed under the License is distributed on an "AS IS" BASIS, 11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 * See the License for the specific language governing permissions and 13 * limitations under the License. 14 */ 15 16 #include "killprocessbyabilitytoken_fuzzer.h" 17 18 #include <cstddef> 19 #include <cstdint> 20 #include <fuzzer/FuzzedDataProvider.h> 21 22 #include "ability_record.h" 23 #include "app_mgr_client.h" 24 #include "parcel.h" 25 #include "securec.h" 26 27 using namespace OHOS::AAFwk; 28 using namespace OHOS::AppExecFwk; 29 30 namespace OHOS { GetFuzzAbilityToken(FuzzedDataProvider * fdp)31sptr<Token> GetFuzzAbilityToken(FuzzedDataProvider *fdp) 32 { 33 sptr<Token> token = nullptr; 34 AbilityRequest abilityRequest; 35 abilityRequest.abilityInfo.type = static_cast<AbilityType>(fdp->ConsumeIntegral<int32_t>()); 36 abilityRequest.appInfo.bundleName = fdp->ConsumeRandomLengthString(); 37 abilityRequest.abilityInfo.name = abilityRequest.appInfo.bundleName; 38 std::shared_ptr<AbilityRecord> abilityRecord = AbilityRecord::CreateAbilityRecord(abilityRequest); 39 if (abilityRecord) { 40 token = abilityRecord->GetToken(); 41 } 42 return token; 43 } 44 DoSomethingInterestingWithMyAPI(FuzzedDataProvider * fdp)45bool DoSomethingInterestingWithMyAPI(FuzzedDataProvider *fdp) 46 { 47 std::shared_ptr<AppMgrClient> appMgrClient = std::make_shared<AppMgrClient>(); 48 if (!appMgrClient) { 49 return false; 50 } 51 52 sptr<IRemoteObject> token = GetFuzzAbilityToken(fdp); 53 if (!token) { 54 std::cout << "Get ability token failed." << std::endl; 55 return false; 56 } 57 58 if (appMgrClient->KillProcessByAbilityToken(token) != AppMgrResultCode::RESULT_OK) { 59 return false; 60 } 61 62 return true; 63 } 64 } 65 66 /* Fuzzer entry point */ LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)67extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) 68 { 69 /* Run your code on data */ 70 FuzzedDataProvider fdp(data, size); 71 OHOS::DoSomethingInterestingWithMyAPI(&fdp); 72 return 0; 73 } 74 75