1 /*
2 * Copyright (c) 2025 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "dm_freeze_process_fuzzer.h"
17
18 #include <fuzzer/FuzzedDataProvider.h>
19 #include <string>
20
21 #include "device_manager_service_listener.h"
22 #include "dm_freeze_process.h"
23
24 namespace OHOS {
25 namespace DistributedHardware {
26 namespace {
27 constexpr const char* BIND_FAILED_EVENTS_KEY = "bindFailedEvents";
28 constexpr const char* FREEZE_STATE_KEY = "freezeState";
29 constexpr const char* START_FREEZE_TIME_KEY = "startFreezeTimeStamp";
30 constexpr const char* STOP_FREEZE_TIME_KEY = "stopFreezeTimeStamp";
31 constexpr const char* FAILED_TIMES_STAMPS_KEY = "failedTimeStamps";
32 constexpr const char* FREEZE_TIMES_STAMPS_KEY = "freezeTimeStamps";
33 constexpr const char* CAST_BUNDLE_NAME = "cast_engine_service";
34 constexpr int32_t MAX_CONTINUEOUS_BIND_FAILED_NUM = 2;
35 constexpr int64_t CONTINUEOUS_FAILED_INTERVAL = 6 * 60;
36 constexpr int64_t DATA_REFRESH_INTERVAL = 20 * 60;
37 constexpr int64_t NOT_FREEZE_TIME = 0;
38 constexpr int64_t FIRST_FREEZE_TIME = 60;
39 constexpr int64_t SECOND_FREEZE_TIME = 3 * 60;
40 constexpr int64_t THIRD_FREEZE_TIME = 5 * 60;
41 constexpr int64_t MAX_FREEZE_TIME = 10 * 60;
42 } // namespace
43
DmFreezeProcessFuzzTest(const uint8_t * data,size_t size)44 void DmFreezeProcessFuzzTest(const uint8_t *data, size_t size)
45 {
46 if ((data == nullptr) || (size < sizeof(int32_t))) {
47 return;
48 }
49 FuzzedDataProvider fdp(data, size);
50 int32_t sessionId = fdp.ConsumeIntegral<int32_t>();
51 std::string result = fdp.ConsumeRandomLengthString();
52 DeviceFreezeState freezeStateObj;
53 BindFailedEvents bindFailedEvents;
54 std::string bundleName = CAST_BUNDLE_NAME;
55 int32_t deviceType = DEVICE_TYPE_TV;
56 int64_t reservedDataTimeStamp = fdp.ConsumeIntegral<int64_t>();
57 FreezeProcess::GetInstance().ConvertJsonToDeviceFreezeState(result, freezeStateObj);
58 FreezeProcess::GetInstance().ConvertJsonToBindFailedEvents(result, bindFailedEvents);
59 bundleName = fdp.ConsumeRandomLengthString();
60 deviceType = fdp.ConsumeIntegral<int32_t>();
61 freezeStateObj.startFreezeTimeStamp = fdp.ConsumeIntegral<int32_t>();
62 FreezeProcess::GetInstance().freezeStateCache_ = freezeStateObj;
63 FreezeProcess::GetInstance().CleanBindFailedEvents(reservedDataTimeStamp);
64 FreezeProcess::GetInstance().CleanFreezeState(reservedDataTimeStamp);
65 FreezeProcess::GetInstance().ConvertDeviceFreezeStateToJson(freezeStateObj, result);
66 int64_t nowTime = NOT_FREEZE_TIME;
67
68 int64_t nextTime = fdp.ConsumeIntegral<int64_t>();
69 FreezeProcess::GetInstance().CleanFreezeRecord(nowTime);
70 FreezeProcess::GetInstance().UpdateFreezeState(nowTime);
71 FreezeProcess::GetInstance().CalculateNextFreezeTime(nowTime, nextTime);
72 nowTime = FIRST_FREEZE_TIME;
73 FreezeProcess::GetInstance().CalculateNextFreezeTime(nowTime, nextTime);
74 nowTime = SECOND_FREEZE_TIME;
75 FreezeProcess::GetInstance().CalculateNextFreezeTime(nowTime, nextTime);
76 nowTime = MAX_FREEZE_TIME;
77 FreezeProcess::GetInstance().CalculateNextFreezeTime(nowTime, nextTime);
78 FreezeProcess::GetInstance().DeleteFreezeRecord();
79 FreezeProcess::GetInstance().UpdateFreezeRecord();
80 FreezeProcess::GetInstance().ConvertBindFailedEventsToJson(bindFailedEvents, result);
81 }
82 }
83 }
84
85 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)86 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
87 {
88 /* Run your code on data */
89 OHOS::DistributedHardware::DmFreezeProcessFuzzTest(data, size);
90 return 0;
91 }