Home
last modified time | relevance | path

Searched refs:fdp (Results 1 – 25 of 73) sorted by relevance

123

/frameworks/av/media/libstagefright/tests/fuzzers/
DFuzzerMediaUtility.cpp29 FuzzedDataProvider* fdp) { in createWriter() argument
32 if (fdp->ConsumeBool()) { in createWriter()
33 writerMeta->setInt32(kKeyRealTimeRecording, fdp->ConsumeBool()); in createWriter()
40 if (fdp->ConsumeBool()) { in createWriter()
47 if (fdp->ConsumeBool()) { in createWriter()
54 if (fdp->ConsumeBool()) { in createWriter()
61 if (fdp->ConsumeBool()) { in createWriter()
68 if (fdp->ConsumeBool()) { in createWriter()
75 if (fdp->ConsumeBool()) { in createWriter()
77 } else if (fdp->ConsumeBool()) { in createWriter()
[all …]
DFrameDecoderHelpers.h32 sp<MetaData> generateMetaData(FuzzedDataProvider* fdp, std::string componentName = std::string()) {
42 size_t index = fdp->ConsumeIntegralInRange<size_t>(0, kMimeTypes.size());
45 std::string mime_str = fdp->ConsumeRandomLengthString(64);
56 auto height = fdp->ConsumeIntegralInRange<uint16_t>(kMinKeyHeight, kMaxKeyHeight);
57 auto width = fdp->ConsumeIntegralInRange<uint16_t>(kMinKeyWidth, kMaxKeyWidth);
63 if (fdp->ConsumeBool()) {
65 fdp->ConsumeIntegralInRange<uint16_t>(kMinKeyHeight, height));
67 fdp->ConsumeIntegralInRange<uint16_t>(kMinKeyWidth, width));
68 newMeta->setInt32(kKeyGridRows, fdp->ConsumeIntegral<uint8_t>());
69 newMeta->setInt32(kKeyGridCols, fdp->ConsumeIntegral<uint8_t>());
[all …]
DMediaMuxerFuzzer.cpp123 void getSampleAudioFormat(FuzzedDataProvider& fdp, AMessage* format) { in getSampleAudioFormat() argument
124 std::string mimeType = fdp.PickValueInArray(kAudioMimeTypes); in getSampleAudioFormat()
126 format->setInt32("sample-rate", fdp.ConsumeIntegral<int32_t>()); in getSampleAudioFormat()
127 format->setInt32("channel-count", fdp.ConsumeIntegral<int32_t>()); in getSampleAudioFormat()
130 void getSampleVideoFormat(FuzzedDataProvider& fdp, AMessage* format) { in getSampleVideoFormat() argument
131 std::string mimeType = fdp.PickValueInArray(kVideoMimeTypes); in getSampleVideoFormat()
133 format->setInt32("height", fdp.ConsumeIntegral<int32_t>()); in getSampleVideoFormat()
134 format->setInt32("width", fdp.ConsumeIntegral<int32_t>()); in getSampleVideoFormat()
135 format->setInt32("time-lapse-fps", fdp.ConsumeIntegral<int32_t>()); in getSampleVideoFormat()
139 FuzzedDataProvider fdp(data, size); in LLVMFuzzerTestOneInput() local
[all …]
DFrameDecoderFuzzer.cpp50 FuzzedDataProvider fdp(data, size); in LLVMFuzzerTestOneInput() local
51 std::string component = fdp.PickValueInArray(kComponentNames); in LLVMFuzzerTestOneInput()
53 sp<MetaData> trackMeta = generateMetaData(&fdp, component); in LLVMFuzzerTestOneInput()
54 sp<IMediaSource> source = sp<IMediaSourceFuzzImpl>::make(&fdp, gMaxMediaBufferSize); in LLVMFuzzerTestOneInput()
57 if (fdp.ConsumeBool()) { in LLVMFuzzerTestOneInput()
64 decoder->init(fdp.ConsumeIntegral<uint64_t>() /* frameTimeUs */, in LLVMFuzzerTestOneInput()
65 fdp.PickValueInArray(kSeekModes) /* option */, in LLVMFuzzerTestOneInput()
66 fdp.PickValueInArray(kColorFormats) /* colorFormat */) == OK) { in LLVMFuzzerTestOneInput()
67 auto frameDecoderAPI = fdp.PickValueInArray<const std::function<void()>>({ in LLVMFuzzerTestOneInput()
70 FrameRect rect(fdp.ConsumeIntegral<int32_t>() /* left */, in LLVMFuzzerTestOneInput()
[all …]
/frameworks/native/services/inputflinger/tests/fuzzers/
DTouchpadInputFuzzer.cpp33 void setAxisInfo(ThreadSafeFuzzedDataProvider& fdp, FuzzEventHub& eventHub, int32_t id, int axis) { in setAxisInfo() argument
34 if (fdp.ConsumeBool()) { in setAxisInfo()
37 .valid = fdp.ConsumeBool(), in setAxisInfo()
38 .minValue = fdp.ConsumeIntegral<int32_t>(), in setAxisInfo()
39 .maxValue = fdp.ConsumeIntegral<int32_t>(), in setAxisInfo()
40 .flat = fdp.ConsumeIntegral<int32_t>(), in setAxisInfo()
41 .fuzz = fdp.ConsumeIntegral<int32_t>(), in setAxisInfo()
42 .resolution = fdp.ConsumeIntegral<int32_t>(), in setAxisInfo()
47 void setAxisInfos(ThreadSafeFuzzedDataProvider& fdp, FuzzEventHub& eventHub, int32_t id) { in setAxisInfos() argument
48 setAxisInfo(fdp, eventHub, id, ABS_MT_SLOT); in setAxisInfos()
[all …]
DMultiTouchInputFuzzer.cpp26 static void addProperty(FuzzEventHub& eventHub, std::shared_ptr<ThreadSafeFuzzedDataProvider> fdp) { in addProperty() argument
28 fdp->PickValueInArray<std::function<void()>>( in addProperty()
31 eventHub.addProperty("touch.deviceType", fdp->ConsumeRandomLengthString(8).data()); in addProperty()
34 eventHub.addProperty("touch.size.scale", fdp->ConsumeRandomLengthString(8).data()); in addProperty()
37 eventHub.addProperty("touch.size.bias", fdp->ConsumeRandomLengthString(8).data()); in addProperty()
41 fdp->ConsumeRandomLengthString(8).data()); in addProperty()
45 fdp->ConsumeRandomLengthString(8).data()); in addProperty()
49 fdp->ConsumeRandomLengthString(8).data()); in addProperty()
53 fdp->ConsumeBool() ? "diameter" : "area"); in addProperty()
57 fdp->ConsumeRandomLengthString(8).data()); in addProperty()
[all …]
DKeyboardInputFuzzer.cpp26 static void addProperty(FuzzEventHub& eventHub, std::shared_ptr<ThreadSafeFuzzedDataProvider> fdp) { in addProperty() argument
28 fdp->PickValueInArray<std::function<void()>>( in addProperty()
32 fdp->ConsumeRandomLengthString(100).data()); in addProperty()
36 fdp->ConsumeRandomLengthString(100).data()); in addProperty()
40 fdp->ConsumeRandomLengthString(100).data()); in addProperty()
45 std::shared_ptr<ThreadSafeFuzzedDataProvider> fdp = in LLVMFuzzerTestOneInput() local
49 std::shared_ptr<FuzzEventHub> eventHub = std::make_shared<FuzzEventHub>(fdp); in LLVMFuzzerTestOneInput()
50 FuzzInputReaderContext context(eventHub, fdp); in LLVMFuzzerTestOneInput()
51 InputDevice device = getFuzzedInputDevice(*fdp, &context); in LLVMFuzzerTestOneInput()
55 KeyboardInputMapper>(*fdp.get(), device, InputReaderConfiguration{}, in LLVMFuzzerTestOneInput()
[all …]
DInputClassifierFuzzer.cpp32 FuzzedDataProvider fdp(data, size); in LLVMFuzzerTestOneInput() local
39 while (fdp.remaining_bytes() > 0) { in LLVMFuzzerTestOneInput()
40 fdp.PickValueInArray<std::function<void()>>({ in LLVMFuzzerTestOneInput()
44 {/*sequenceNum=*/fdp.ConsumeIntegral<int32_t>(), in LLVMFuzzerTestOneInput()
45 /*eventTime=*/fdp.ConsumeIntegral<nsecs_t>()}); in LLVMFuzzerTestOneInput()
50 fdp.ConsumeIntegralInRange<nsecs_t>(0, in LLVMFuzzerTestOneInput()
52 const nsecs_t readTime = fdp.ConsumeIntegralInRange< in LLVMFuzzerTestOneInput()
54 mClassifier->notifyKey({/*sequenceNum=*/fdp.ConsumeIntegral<int32_t>(), in LLVMFuzzerTestOneInput()
56 /*deviceId=*/fdp.ConsumeIntegral<int32_t>(), in LLVMFuzzerTestOneInput()
58 /*policyFlags=*/fdp.ConsumeIntegral<uint32_t>(), in LLVMFuzzerTestOneInput()
[all …]
DInputReaderFuzzer.cpp177 std::shared_ptr<ThreadSafeFuzzedDataProvider> fdp = in LLVMFuzzerTestOneInput() local
181 sp<FuzzInputReaderPolicy> fuzzPolicy = sp<FuzzInputReaderPolicy>::make(fdp); in LLVMFuzzerTestOneInput()
182 std::shared_ptr<FuzzEventHub> fuzzEventHub = std::make_shared<FuzzEventHub>(fdp); in LLVMFuzzerTestOneInput()
185 size_t patternCount = fdp->ConsumeIntegralInRange<size_t>(1, 260); in LLVMFuzzerTestOneInput()
189 element.addChannel(/*vibratorId=*/fdp->ConsumeIntegral<int32_t>(), in LLVMFuzzerTestOneInput()
190 /*amplitude=*/fdp->ConsumeIntegral<uint8_t>()); in LLVMFuzzerTestOneInput()
193 reader->vibrate(fdp->ConsumeIntegral<int32_t>(), pattern, in LLVMFuzzerTestOneInput()
194 /*repeat=*/fdp->ConsumeIntegral<ssize_t>(), in LLVMFuzzerTestOneInput()
195 /*token=*/fdp->ConsumeIntegral<int32_t>()); in LLVMFuzzerTestOneInput()
199 while (fdp->remaining_bytes() > 0) { in LLVMFuzzerTestOneInput()
[all …]
DCursorInputFuzzer.cpp24 static void addProperty(FuzzEventHub& eventHub, std::shared_ptr<ThreadSafeFuzzedDataProvider> fdp) { in addProperty() argument
26 fdp->PickValueInArray<std::function<void()>>( in addProperty()
30 eventHub.addProperty("cursor.mode", fdp->ConsumeRandomLengthString(100).data()); in addProperty()
34 fdp->ConsumeRandomLengthString(100).data()); in addProperty()
39 std::shared_ptr<ThreadSafeFuzzedDataProvider> fdp = in LLVMFuzzerTestOneInput() local
43 std::shared_ptr<FuzzEventHub> eventHub = std::make_shared<FuzzEventHub>(fdp); in LLVMFuzzerTestOneInput()
44 FuzzInputReaderContext context(eventHub, fdp); in LLVMFuzzerTestOneInput()
45 InputDevice device = getFuzzedInputDevice(*fdp, &context); in LLVMFuzzerTestOneInput()
49 getMapperForDevice<ThreadSafeFuzzedDataProvider, CursorInputMapper>(*fdp.get(), device, in LLVMFuzzerTestOneInput()
53 while (fdp->remaining_bytes() > 0) { in LLVMFuzzerTestOneInput()
[all …]
DFuzzedInputStream.h26 int getFuzzedMotionAction(FuzzedDataProvider& fdp) { in getFuzzedMotionAction() argument
27 int actionMasked = fdp.PickValueInArray<int>({ in getFuzzedMotionAction()
41 const int32_t index = fdp.ConsumeIntegralInRange(0, MAX_RANDOM_POINTERS - 1); in getFuzzedMotionAction()
54 int getFuzzedSource(FuzzedDataProvider& fdp) { in getFuzzedSource() argument
55 return fdp.PickValueInArray<int>({ in getFuzzedSource()
74 int getFuzzedButtonState(FuzzedDataProvider& fdp) { in getFuzzedButtonState() argument
75 return fdp.PickValueInArray<int>({ in getFuzzedButtonState()
87 int32_t getFuzzedFlags(FuzzedDataProvider& fdp, int32_t action) { in getFuzzedFlags() argument
96 for (size_t i = 0; i < fdp.ConsumeIntegralInRange(size_t(0), FLAGS.size()); i++) { in getFuzzedFlags()
97 flags |= fdp.PickValueInArray<int32_t>(FLAGS); in getFuzzedFlags()
[all …]
DLatencyTrackerFuzzer.cpp42 static sp<IBinder> getConnectionToken(FuzzedDataProvider& fdp, in getConnectionToken() argument
44 const bool useExistingToken = fdp.ConsumeBool(); in getConnectionToken()
46 return tokens[fdp.ConsumeIntegralInRange<size_t>(0ul, tokens.size() - 1)]; in getConnectionToken()
52 FuzzedDataProvider fdp(data, size); in LLVMFuzzerTestOneInput() local
64 while (fdp.remaining_bytes() > 0) { in LLVMFuzzerTestOneInput()
65 fdp.PickValueInArray<std::function<void()>>({ in LLVMFuzzerTestOneInput()
67 int32_t inputEventId = fdp.ConsumeIntegral<int32_t>(); in LLVMFuzzerTestOneInput()
68 int32_t isDown = fdp.ConsumeBool(); in LLVMFuzzerTestOneInput()
69 nsecs_t eventTime = fdp.ConsumeIntegral<nsecs_t>(); in LLVMFuzzerTestOneInput()
70 nsecs_t readTime = fdp.ConsumeIntegral<nsecs_t>(); in LLVMFuzzerTestOneInput()
[all …]
DInputDispatcherFuzzer.cpp43 NotifyStreamProvider(FuzzedDataProvider& fdp) in NotifyStreamProvider() argument
44 : mFdp(fdp), mIdGenerator(IdGenerator::Source::OTHER) {} in NotifyStreamProvider()
68 void scrambleWindow(FuzzedDataProvider& fdp, FakeWindowHandle& window) { in scrambleWindow() argument
69 const int32_t left = fdp.ConsumeIntegralInRange<int32_t>(0, 100); in scrambleWindow()
70 const int32_t top = fdp.ConsumeIntegralInRange<int32_t>(0, 100); in scrambleWindow()
71 const int32_t width = fdp.ConsumeIntegralInRange<int32_t>(0, 100); in scrambleWindow()
72 const int32_t height = fdp.ConsumeIntegralInRange<int32_t>(0, 100); in scrambleWindow()
75 window.setSlippery(fdp.ConsumeBool()); in scrambleWindow()
76 window.setDupTouchToWallpaper(fdp.ConsumeBool()); in scrambleWindow()
77 window.setIsWallpaper(fdp.ConsumeBool()); in scrambleWindow()
[all …]
/frameworks/av/camera/tests/fuzzer/
Dcamera_SessionStats_fuzzer.cpp28 FuzzedDataProvider fdp = FuzzedDataProvider(data, size); in LLVMFuzzerTestOneInput() local
32 if (fdp.ConsumeBool()) { in LLVMFuzzerTestOneInput()
35 int32_t width = fdp.ConsumeIntegral<int32_t>(); in LLVMFuzzerTestOneInput()
36 if (fdp.ConsumeBool()) { in LLVMFuzzerTestOneInput()
39 int32_t height = fdp.ConsumeIntegral<int32_t>(); in LLVMFuzzerTestOneInput()
40 if (fdp.ConsumeBool()) { in LLVMFuzzerTestOneInput()
43 int32_t format = fdp.ConsumeIntegral<int32_t>(); in LLVMFuzzerTestOneInput()
44 if (fdp.ConsumeBool()) { in LLVMFuzzerTestOneInput()
47 float maxPreviewFps = fdp.ConsumeFloatingPoint<float>(); in LLVMFuzzerTestOneInput()
48 if (fdp.ConsumeBool()) { in LLVMFuzzerTestOneInput()
[all …]
Dcamera_c2CaptureRequest_fuzzer.cpp35 FuzzedDataProvider fdp = FuzzedDataProvider(data, size); in LLVMFuzzerTestOneInput() local
41 fdp.ConsumeIntegralInRange<size_t>(kNonZeroRangeMin, kRangeMax); in LLVMFuzzerTestOneInput()
42 if (fdp.ConsumeBool()) { in LLVMFuzzerTestOneInput()
47 string id = fdp.ConsumeRandomLengthString(kMaxBytes); in LLVMFuzzerTestOneInput()
48 if (fdp.ConsumeBool()) { in LLVMFuzzerTestOneInput()
52 if (fdp.ConsumeBool()) { in LLVMFuzzerTestOneInput()
55 size_t entryCapacity = fdp.ConsumeIntegralInRange<size_t>(kNonZeroRangeMin, kRangeMax); in LLVMFuzzerTestOneInput()
56 size_t dataCapacity = fdp.ConsumeIntegralInRange<size_t>(kNonZeroRangeMin, kRangeMax); in LLVMFuzzerTestOneInput()
60 if (fdp.ConsumeBool()) { in LLVMFuzzerTestOneInput()
65 captureRequest->mIsReprocess = fdp.ConsumeBool(); in LLVMFuzzerTestOneInput()
[all …]
/frameworks/native/libs/vr/libpdx/fuzz/
Dserialization_fuzzer.cpp56 FuzzedDataProvider fdp = FuzzedDataProvider(data, size); in FuzzSerializeDeserialize() local
61 bool b_val = fdp.ConsumeBool(); in FuzzSerializeDeserialize()
62 uint8_t u8_val = fdp.ConsumeIntegral<uint8_t>(); in FuzzSerializeDeserialize()
63 uint16_t u16_val = fdp.ConsumeIntegral<uint16_t>(); in FuzzSerializeDeserialize()
64 uint32_t u32_val = fdp.ConsumeIntegral<uint32_t>(); in FuzzSerializeDeserialize()
65 uint64_t u64_val = fdp.ConsumeIntegral<uint64_t>(); in FuzzSerializeDeserialize()
66 int8_t i8_val = fdp.ConsumeIntegral<int8_t>(); in FuzzSerializeDeserialize()
67 int16_t i16_val = fdp.ConsumeIntegral<uint16_t>(); in FuzzSerializeDeserialize()
68 int32_t i32_val = fdp.ConsumeIntegral<uint32_t>(); in FuzzSerializeDeserialize()
69 int64_t i64_val = fdp.ConsumeIntegral<uint64_t>(); in FuzzSerializeDeserialize()
[all …]
Dmessage_fuzzer.cpp33 FuzzedDataProvider fdp = FuzzedDataProvider(data, size); in LLVMFuzzerTestOneInput() local
35 FuzzEndpoint* endpoint = new FuzzEndpoint(&fdp); in LLVMFuzzerTestOneInput()
42 info.pid = fdp.ConsumeIntegral<int>(); in LLVMFuzzerTestOneInput()
43 info.tid = fdp.ConsumeIntegral<int>(); in LLVMFuzzerTestOneInput()
44 info.cid = fdp.ConsumeIntegral<int>(); in LLVMFuzzerTestOneInput()
45 info.mid = fdp.ConsumeIntegral<int>(); in LLVMFuzzerTestOneInput()
46 info.euid = fdp.ConsumeIntegral<int>(); in LLVMFuzzerTestOneInput()
47 info.egid = fdp.ConsumeIntegral<int>(); in LLVMFuzzerTestOneInput()
48 info.op = fdp.ConsumeIntegral<int32_t>(); in LLVMFuzzerTestOneInput()
49 info.flags = fdp.ConsumeIntegral<uint32_t>(); in LLVMFuzzerTestOneInput()
[all …]
/frameworks/av/media/mtp/tests/MtpFuzzer/
Dmtp_device_fuzzer.cpp52 fdDescriptors writeDescriptorsToFd(int32_t fd, FuzzedDataProvider& fdp) { in writeDescriptorsToFd() argument
56 desc.interface.bInterfaceNumber = fdp.ConsumeIntegral<uint8_t>(); in writeDescriptorsToFd()
59 fdp.ConsumeBool() ? USB_CLASS_STILL_IMAGE : USB_CLASS_VENDOR_SPEC; in writeDescriptorsToFd()
60 desc.interface.bInterfaceSubClass = fdp.ConsumeBool() ? 1 : 0xFF; in writeDescriptorsToFd()
61 desc.interface.bInterfaceProtocol = fdp.ConsumeBool() ? 1 : 0; in writeDescriptorsToFd()
62 desc.interface.iInterface = fdp.ConsumeIntegral<uint8_t>(); in writeDescriptorsToFd()
66 desc.ep[idx].bEndpointAddress = idx | (fdp.ConsumeBool() ? USB_DIR_OUT : USB_DIR_IN); in writeDescriptorsToFd()
68 fdp.ConsumeBool() ? USB_ENDPOINT_XFER_BULK : USB_ENDPOINT_XFER_INT; in writeDescriptorsToFd()
76 FuzzedDataProvider fdp(data, size); in LLVMFuzzerTestOneInput() local
78 fdDescriptors descriptor = writeDescriptorsToFd(fd, fdp); in LLVMFuzzerTestOneInput()
[all …]
DMtpPacketFuzzerUtils.h39 void fillFd(int32_t& fd, FuzzedDataProvider* fdp) { in fillFd() argument
40 if (fdp->ConsumeBool()) { in fillFd()
41 std::string text = fdp->ConsumeRandomLengthString(kMaxLength); in fillFd()
46 void fillFilePath(FuzzedDataProvider* fdp) { in fillFilePath() argument
47 mPath= fdp->ConsumeRandomLengthString(kMaxPathLength); in fillFilePath()
50 void fillUsbDevFsUrb(FuzzedDataProvider* fdp) { in fillUsbDevFsUrb() argument
51 mUsbDevFsUrb->type = fdp->ConsumeIntegral<unsigned char>(); in fillUsbDevFsUrb()
52 mUsbDevFsUrb->endpoint = fdp->ConsumeIntegral<unsigned char>(); in fillUsbDevFsUrb()
53 mUsbDevFsUrb->flags = fdp->ConsumeIntegral<uint32_t>(); in fillUsbDevFsUrb()
55 fdp->ConsumeBytes<uint8_t>(fdp->ConsumeIntegralInRange<size_t>(kMinSize, kMaxSize)); in fillUsbDevFsUrb()
[all …]
/frameworks/av/media/ndk/fuzzer/
Dndk_mediamuxer_fuzzer.cpp45 void getSampleAudioFormat(FuzzedDataProvider& fdp, AMediaFormat* format) { in getSampleAudioFormat() argument
46 std::string mimeType = fdp.ConsumeBool() ? fdp.ConsumeRandomLengthString(kMaxStringLength) in getSampleAudioFormat()
47 : fdp.PickValueInArray(kAudioMimeType); in getSampleAudioFormat()
49 AMediaFormat_setInt32(format, AMEDIAFORMAT_KEY_BIT_RATE, fdp.ConsumeIntegral<int32_t>()); in getSampleAudioFormat()
50 AMediaFormat_setInt32(format, AMEDIAFORMAT_KEY_SAMPLE_RATE, fdp.ConsumeIntegral<int32_t>()); in getSampleAudioFormat()
51 AMediaFormat_setInt32(format, AMEDIAFORMAT_KEY_CHANNEL_COUNT, fdp.ConsumeIntegral<int32_t>()); in getSampleAudioFormat()
52 AMediaFormat_setInt64(format, AMEDIAFORMAT_KEY_DURATION, fdp.ConsumeIntegral<int64_t>()); in getSampleAudioFormat()
55 void getSampleVideoFormat(FuzzedDataProvider& fdp, AMediaFormat* format) { in getSampleVideoFormat() argument
56 std::string mimeType = fdp.ConsumeBool() ? fdp.ConsumeRandomLengthString(kMaxStringLength) in getSampleVideoFormat()
57 : fdp.PickValueInArray(kAudioMimeType); in getSampleVideoFormat()
[all …]
/frameworks/av/media/libaaudio/fuzzer/
Dlibaaudio_fuzzer.cpp102 void invokeAAudioSetAPIs(FuzzedDataProvider &fdp);
119 void LibAaudioFuzzer::invokeAAudioSetAPIs(FuzzedDataProvider &fdp){ in invokeAAudioSetAPIs() argument
120 aaudio_performance_mode_t mode = fdp.PickValueInArray( in invokeAAudioSetAPIs()
121 {fdp.PickValueInArray(kPerformanceModes), fdp.ConsumeIntegral<int32_t>()}); in invokeAAudioSetAPIs()
124 int32_t deviceId = fdp.PickValueInArray({AAUDIO_UNSPECIFIED, fdp.ConsumeIntegral<int32_t>()}); in invokeAAudioSetAPIs()
128 fdp.PickValueInArray<std::string>({"android.nativemedia.aaudio", "android.app.appops.cts", in invokeAAudioSetAPIs()
129 fdp.ConsumeRandomLengthString(kRandomStringLength)}); in invokeAAudioSetAPIs()
132 std::string attributionTag = fdp.ConsumeRandomLengthString(kRandomStringLength); in invokeAAudioSetAPIs()
135 int32_t sampleRate = fdp.PickValueInArray(kSampleRates); in invokeAAudioSetAPIs()
138 int32_t channelCount = fdp.PickValueInArray({AAUDIO_UNSPECIFIED, fdp.ConsumeIntegral<int32_t>()}); in invokeAAudioSetAPIs()
[all …]
/frameworks/minikin/fuzz/hyphenator_fuzzer/
Dhyphenator_fuzzer.cpp71 U16StringPiece generateStringPiece(FuzzedDataProvider* fdp) { in generateStringPiece() argument
72 uint16_t size = fdp->ConsumeIntegralInRange<uint16_t>(0, (fdp->remaining_bytes() / 3)); in generateStringPiece()
77 if (fdp->ConsumeBool()) { in generateStringPiece()
78 v.push_back(fdp->PickValueInArray(specialChars)); in generateStringPiece()
80 v.push_back(fdp->ConsumeIntegral<uint16_t>()); in generateStringPiece()
88 FuzzedDataProvider fdp(data, size); in LLVMFuzzerTestOneInput() local
90 uint8_t minPrefix = fdp.ConsumeIntegral<size_t>(); in LLVMFuzzerTestOneInput()
91 uint8_t minSuffix = fdp.ConsumeIntegral<size_t>(); in LLVMFuzzerTestOneInput()
92 std::string locale = fdp.ConsumeRandomLengthString(MAX_STR_LEN); in LLVMFuzzerTestOneInput()
93 std::vector<uint8_t> patternData(fdp.ConsumeIntegralInRange<uint32_t>(0, 256)); in LLVMFuzzerTestOneInput()
[all …]
/frameworks/native/libs/binder/tests/unit_fuzzers/
DStatusFuzzFunctions.h44 [](FuzzedDataProvider* fdp, binder::Status* status, Parcel*) -> void {
46 fdp->ConsumeRandomLengthString(fdp->remaining_bytes());
48 status->setServiceSpecificError(fdp->ConsumeIntegral<int32_t>(), message);
50 [](FuzzedDataProvider* fdp, binder::Status* status, Parcel*) -> void {
52 fdp->ConsumeRandomLengthString(fdp->remaining_bytes());
54 status->setException(fdp->ConsumeIntegral<int32_t>(), message);
57 [](FuzzedDataProvider* fdp, binder::Status* status, Parcel*) -> void {
59 fdp->ConsumeRandomLengthString(fdp->remaining_bytes());
61 *status = binder::Status::fromExceptionCode(fdp->ConsumeIntegral<int32_t>(),
64 [](FuzzedDataProvider* fdp, binder::Status* status, Parcel*) -> void {
[all …]
DIBinderFuzzFunctions.h51 [](FuzzedDataProvider* fdp, IBinder* ibinder) -> void {
53 std::string rand_str = fdp->ConsumeRandomLengthString(fdp->remaining_bytes());
58 [](FuzzedDataProvider* fdp, IBinder* ibinder) -> void {
59 objectID = fdp->ConsumeIntegral<uint32_t>();
60 object = fdp->ConsumeIntegral<uint32_t>();
61 cleanup_cookie = fdp->ConsumeIntegral<uint32_t>();
63 (void)ibinder->attachObject(fdp->ConsumeBool() ? reinterpret_cast<void*>(&objectID)
65 fdp->ConsumeBool() ? reinterpret_cast<void*>(&object)
67 fdp->ConsumeBool()
72 [](FuzzedDataProvider* fdp, IBinder* ibinder) -> void {
[all …]
/frameworks/av/media/libmedia/tests/fuzzer/
Dlibmedia_metadata_fuzzer.cpp14 bool bytesRemain(FuzzedDataProvider *fdp);
17 FuzzedDataProvider fdp(data, size); in LLVMFuzzerTestOneInput() local
22 while (bytesRemain(&fdp)) { in LLVMFuzzerTestOneInput()
24 float got_prob = fdp.ConsumeProbability<float>(); in LLVMFuzzerTestOneInput()
25 if (!bytesRemain(&fdp)) { in LLVMFuzzerTestOneInput()
30 int32_t key_bool = fdp.ConsumeIntegral<int32_t>(); in LLVMFuzzerTestOneInput()
31 if (!bytesRemain(&fdp)) { in LLVMFuzzerTestOneInput()
34 bool val_bool = fdp.ConsumeBool(); in LLVMFuzzerTestOneInput()
37 int32_t key_int32 = fdp.ConsumeIntegral<int32_t>(); in LLVMFuzzerTestOneInput()
38 if (!bytesRemain(&fdp)) { in LLVMFuzzerTestOneInput()
[all …]

123