1 /* 2 * Copyright (c) 2024 Huawei Device Co., Ltd. 3 * Licensed under the Apache License, Version 2.0 (the "License"); 4 * you may not use this file except in compliance with the License. 5 * You may obtain a copy of the License at 6 * 7 * http://www.apache.org/licenses/LICENSE-2.0 8 * 9 * Unless required by applicable law or agreed to in writing, software 10 * distributed under the License is distributed on an "AS IS" BASIS, 11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 * See the License for the specific language governing permissions and 13 * limitations under the License. 14 */ 15 16 #include "prepareterminate_fuzzer.h" 17 18 #include <cstddef> 19 #include <cstdint> 20 #include <fuzzer/FuzzedDataProvider.h> 21 22 #include "ability_record.h" 23 #include "app_mgr_client.h" 24 #include "configuration.h" 25 #include "parcel.h" 26 #include "securec.h" 27 28 using namespace OHOS::AAFwk; 29 using namespace OHOS::AppExecFwk; 30 31 namespace OHOS { GetFuzzAbilityToken(FuzzedDataProvider * fdp)32sptr<Token> GetFuzzAbilityToken(FuzzedDataProvider *fdp) 33 { 34 sptr<Token> token = nullptr; 35 AbilityRequest abilityRequest; 36 abilityRequest.abilityInfo.type = static_cast<AbilityType>(fdp->ConsumeIntegral<int32_t>()); 37 abilityRequest.appInfo.bundleName = fdp->ConsumeRandomLengthString(); 38 abilityRequest.abilityInfo.name = abilityRequest.appInfo.bundleName; 39 std::shared_ptr<AbilityRecord> abilityRecord = AbilityRecord::CreateAbilityRecord(abilityRequest); 40 if (abilityRecord) { 41 token = abilityRecord->GetToken(); 42 } 43 return token; 44 } 45 DoSomethingInterestingWithMyAPI(FuzzedDataProvider * fdp)46bool DoSomethingInterestingWithMyAPI(FuzzedDataProvider *fdp) 47 { 48 std::shared_ptr<AppMgrClient> appMgrClient = std::make_shared<AppMgrClient>(); 49 if (!appMgrClient) { 50 return false; 51 } 52 53 sptr<IRemoteObject> token = GetFuzzAbilityToken(fdp); 54 if (!token) { 55 std::cout << "Get ability token failed." << std::endl; 56 return false; 57 } 58 59 appMgrClient->PrepareTerminate(token); 60 61 return true; 62 } 63 } 64 65 /* Fuzzer entry point */ LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)66extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) 67 { 68 /* Run your code on data */ 69 FuzzedDataProvider fdp(data, size); 70 OHOS::DoSomethingInterestingWithMyAPI(&fdp); 71 return 0; 72 }