1 /*
2 * Copyright (c) 2021-2023 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "camera_host_fuzzer.h"
17 #include "camera.h"
18
19 namespace OHOS {
20 const size_t THRESHOLD = 10;
21
22 enum HostCmdId {
23 CAMERA_HOST_PRELAUNCH,
24 CAMERA_HOST_GET_CAMERA_ABILITY,
25 CAMERA_HOST_OPEN_CAMERA,
26 CAMERA_HOST_OPEN_CAMERA_V1_1,
27 CAMERA_HOST_SET_FLASH_LIGHTS,
28 CAMERA_HOST_SET_FLASH_LIGHTS_V1_2,
29 CAMERA_HOST_NOTIFY_DEVICE_STATE_CHANGE_INFO,
30 CAMERA_HOST_PRE_CAMERA_SWITCH,
31 CAMERA_HOST_PRELAUNCH_WITH_OPMODE,
32 CAMERA_HOST_END, // Enumerated statistical value. The new enumerated value is added before
33 };
34
FuncPrelaunch(const uint8_t * rawData,size_t size)35 void FuncPrelaunch(const uint8_t *rawData, size_t size)
36 {
37 if (size < sizeof(struct HDI::Camera::V1_1::PrelaunchConfig)) {
38 return;
39 }
40 cameraTest->prelaunchConfig = std::make_shared<OHOS::HDI::Camera::V1_1::PrelaunchConfig>();
41 cameraTest->prelaunchConfig->cameraId = const_cast<char*>(reinterpret_cast<const char*>(rawData));
42 cameraTest->prelaunchConfig->streamInfos_V1_1 = {};
43 cameraTest->prelaunchConfig->setting.push_back(*rawData);
44 cameraTest->serviceV1_2->Prelaunch(*cameraTest->prelaunchConfig);
45 }
46
FuncGetCameraAbility(const uint8_t * rawData,size_t size)47 void FuncGetCameraAbility(const uint8_t *rawData, size_t size)
48 {
49 cameraTest->serviceV1_2->GetCameraAbility(const_cast<char*>(reinterpret_cast<const char*>(rawData)),
50 cameraTest->abilityVec);
51 }
52
FuncOpenCamera(const uint8_t * rawData,size_t size)53 void FuncOpenCamera(const uint8_t *rawData, size_t size)
54 {
55 sptr<HDI::Camera::V1_0::ICameraDevice> g_CameraDevice = nullptr;
56 const sptr<HDI::Camera::V1_0::ICameraDeviceCallback> callback =
57 new Camera::CameraManager::DemoCameraDeviceCallback();
58 cameraTest->serviceV1_2->OpenCamera(
59 const_cast<char*>(reinterpret_cast<const char*>(rawData)), callback, g_CameraDevice);
60 }
61
FuncOpenCamera_V1_1(const uint8_t * rawData,size_t size)62 void FuncOpenCamera_V1_1(const uint8_t *rawData, size_t size)
63 {
64 sptr<HDI::Camera::V1_1::ICameraDevice> g_CameraDevice = nullptr;
65 const sptr<HDI::Camera::V1_0::ICameraDeviceCallback> callback =
66 new Camera::CameraManager::DemoCameraDeviceCallback();
67 cameraTest->serviceV1_2->OpenCamera_V1_1(
68 const_cast<char*>(reinterpret_cast<const char*>(rawData)), callback, g_CameraDevice);
69 }
70
FuncSetFlashlight(const uint8_t * rawData,size_t size)71 void FuncSetFlashlight(const uint8_t *rawData, size_t size)
72 {
73 cameraTest->serviceV1_2->SetFlashlight(
74 const_cast<char*>(reinterpret_cast<const char*>(rawData)), true);
75 }
76
FuncSetFlashlightV1_2(const uint8_t * rawData,size_t size)77 void FuncSetFlashlightV1_2(const uint8_t *rawData, size_t size)
78 {
79 uint8_t *data = const_cast<uint8_t *>(rawData);
80 cameraTest->serviceV1_2->SetFlashlight_V1_2(*(reinterpret_cast<float *>(data)));
81 }
82
FuncNotifyDeviceStateChangeInfo(const uint8_t * rawData,size_t size)83 void FuncNotifyDeviceStateChangeInfo(const uint8_t *rawData, size_t size)
84 {
85 int *data = const_cast<int *>(reinterpret_cast<const int *>(rawData));
86 cameraTest->serviceV1_2->NotifyDeviceStateChangeInfo(data[0], data[1]);
87 }
88
FuncPreCameraSwitch(const uint8_t * rawData,size_t size)89 void FuncPreCameraSwitch(const uint8_t *rawData, size_t size)
90 {
91 std::string cameraId = reinterpret_cast<const char*>(rawData);
92 cameraTest->serviceV1_2->PreCameraSwitch(cameraId);
93 }
94
FuncPrelaunchWithOpMode(const uint8_t * rawData,size_t size)95 void FuncPrelaunchWithOpMode(const uint8_t *rawData, size_t size)
96 {
97 cameraTest->prelaunchConfig = std::make_shared<OHOS::HDI::Camera::V1_1::PrelaunchConfig>();
98 std::string cameraId = reinterpret_cast<const char*>(rawData);
99 cameraTest->prelaunchConfig->cameraId = cameraId;
100 cameraTest->prelaunchConfig->streamInfos_V1_1 = {};
101 cameraTest->prelaunchConfig->setting.push_back(*rawData);
102
103 int *data = const_cast<int *>(reinterpret_cast<const int *>(rawData));
104
105 cameraTest->serviceV1_2->PrelaunchWithOpMode(*cameraTest->prelaunchConfig, data[0]);
106 }
107
HostFuncSwitch(uint32_t cmd,const uint8_t * rawData,size_t size)108 static void HostFuncSwitch(uint32_t cmd, const uint8_t *rawData, size_t size)
109 {
110 switch (cmd) {
111 case CAMERA_HOST_PRELAUNCH: {
112 FuncPrelaunch(rawData, size);
113 break;
114 }
115 case CAMERA_HOST_GET_CAMERA_ABILITY: {
116 FuncGetCameraAbility(rawData, size);
117 break;
118 }
119 case CAMERA_HOST_OPEN_CAMERA: {
120 FuncOpenCamera(rawData, size);
121 break;
122 }
123 case CAMERA_HOST_OPEN_CAMERA_V1_1: {
124 FuncOpenCamera_V1_1(rawData, size);
125 break;
126 }
127 case CAMERA_HOST_SET_FLASH_LIGHTS: {
128 FuncSetFlashlight(rawData, size);
129 break;
130 }
131 case CAMERA_HOST_SET_FLASH_LIGHTS_V1_2: {
132 FuncSetFlashlightV1_2(rawData, size);
133 break;
134 }
135 case CAMERA_HOST_NOTIFY_DEVICE_STATE_CHANGE_INFO: {
136 FuncNotifyDeviceStateChangeInfo(rawData, size);
137 break;
138 }
139 case CAMERA_HOST_PRE_CAMERA_SWITCH: {
140 FuncPreCameraSwitch(rawData, size);
141 break;
142 }
143 case CAMERA_HOST_PRELAUNCH_WITH_OPMODE: {
144 FuncPrelaunchWithOpMode(rawData, size);
145 break;
146 }
147 default:
148 return;
149 }
150 }
151
DoSomethingInterestingWithMyApi(const uint8_t * rawData,size_t size)152 bool DoSomethingInterestingWithMyApi(const uint8_t *rawData, size_t size)
153 {
154 if (rawData == nullptr) {
155 return false;
156 }
157
158 uint32_t cmd = 0;
159 rawData += sizeof(cmd);
160
161 cameraTest = std::make_shared<OHOS::Camera::CameraManager>();
162 cameraTest->InitV1_2();
163 if (cameraTest->serviceV1_2 == nullptr) {
164 return false;
165 }
166 cameraTest->OpenV1_2();
167 if (cameraTest->cameraDeviceV1_1 == nullptr) {
168 return false;
169 }
170
171 for (cmd = 0; cmd < CAMERA_HOST_END; cmd++) {
172 HostFuncSwitch(cmd, rawData, size);
173 }
174 cameraTest->Close();
175 return true;
176 }
177
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)178 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
179 {
180 if (size < OHOS::THRESHOLD) {
181 return 0;
182 }
183
184 OHOS::DoSomethingInterestingWithMyApi(data, size);
185 return 0;
186 }
187 } // namespace OHOS
188