1 /*
2 * Copyright (c) 2022-2023 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #define private public
17 #define protected public
18 #include "event_handler.h"
19 #undef private
20 #undef protected
21
22 #include "eventhandler_fuzzer.h"
23 #include "securec.h"
24
25 namespace OHOS {
26 namespace {
27 constexpr size_t U32_AT_SIZE = 4;
28 }
29
30 class DumperTest : public AppExecFwk::Dumper {
31 public:
32 DumperTest() = default;
~DumperTest()33 virtual ~DumperTest()
34 {};
Dump(const std::string & message)35 void Dump(const std::string &message) override
36 {}
GetTag()37 std::string GetTag() override
38 {
39 return {};
40 }
41 };
42
43 class MyFileDescriptorListener : public AppExecFwk::FileDescriptorListener {
44 public:
MyFileDescriptorListener()45 MyFileDescriptorListener()
46 {}
~MyFileDescriptorListener()47 ~MyFileDescriptorListener()
48 {}
49
50 /* @param int32_t fileDescriptor */
OnReadable(int32_t)51 void OnReadable(int32_t)
52 {}
53
54 /* @param int32_t fileDescriptor */
OnWritable(int32_t)55 void OnWritable(int32_t)
56 {}
57
58 /* @param int32_t fileDescriptor */
OnException(int32_t)59 void OnException(int32_t)
60 {}
61
62 MyFileDescriptorListener(const MyFileDescriptorListener &) = delete;
63 MyFileDescriptorListener &operator=(const MyFileDescriptorListener &) = delete;
64 MyFileDescriptorListener(MyFileDescriptorListener &&) = delete;
65 MyFileDescriptorListener &operator=(MyFileDescriptorListener &&) = delete;
66 };
67
DoSomethingInterestingWithMyAPI(const char * data,size_t size)68 bool DoSomethingInterestingWithMyAPI(const char* data, size_t size)
69 {
70 std::shared_ptr<AppExecFwk::EventRunner> runner = nullptr;
71 AppExecFwk::EventHandler eventHandler(runner);
72 uint32_t innerEventId = *data;
73 std::list<AppExecFwk::InnerEvent::Pointer> events;
74 AppExecFwk::InnerEvent::Pointer event = std::move(events.front());
75 int64_t taskTime = U32_AT(reinterpret_cast<const uint8_t*>(data));
76 AppExecFwk::EventQueue::Priority priority = AppExecFwk::EventQueue::Priority::LOW;
77 int32_t fileDescriptor = U32_AT(reinterpret_cast<const uint8_t*>(data));
78 DumperTest dumper;
79 eventHandler.Dump(dumper);
80 eventHandler.GetEventName(event);
81 eventHandler.ProcessEvent(event);
82 eventHandler.RemoveAllFileDescriptorListeners();
83 eventHandler.SendTimingEvent(event, taskTime, priority);
84 eventHandler.RemoveFileDescriptorListener(fileDescriptor);
85 eventHandler.SendEvent(event, taskTime, priority);
86 eventHandler.SendSyncEvent(event, priority);
87 eventHandler.RemoveAllEvents();
88 eventHandler.RemoveEvent(innerEventId, taskTime);
89 eventHandler.RemoveEvent(innerEventId);
90 std::string stringData(data);
91 eventHandler.RemoveTask(stringData);
92 auto fileDescriptorListener = std::make_shared<MyFileDescriptorListener>();
93 eventHandler.AddFileDescriptorListener(fileDescriptor, innerEventId, fileDescriptorListener,
94 "DoSomethingInterestingWithMyAPI");
95 eventHandler.SetEventRunner(runner);
96 eventHandler.GetEventRunner();
97 eventHandler.DistributeEvent(event);
98 eventHandler.HasInnerEvent(taskTime);
99 return eventHandler.HasInnerEvent(innerEventId);
100 }
101 }
102
103 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)104 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
105 {
106 /* Run your code on data */
107 if (data == nullptr) {
108 return 0;
109 }
110
111 if (size < OHOS::U32_AT_SIZE) {
112 return 0;
113 }
114
115 char* ch = reinterpret_cast<char *>(malloc(size + 1));
116 if (ch == nullptr) {
117 return 0;
118 }
119
120 (void)memset_s(ch, size + 1, 0x00, size + 1);
121 if (memcpy_s(ch, size, data, size) != EOK) {
122 free(ch);
123 ch = nullptr;
124 return 0;
125 }
126
127 OHOS::DoSomethingInterestingWithMyAPI(ch, size);
128 free(ch);
129 ch = nullptr;
130 return 0;
131 }
132