• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * Copyright (c) 2024 Huawei Device Co., Ltd.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at
6  *
7  *     http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 
16 #define private public
17 #include <cstddef>
18 #include <cstdint>
19 #include "verifymanagerhostimplcopyfilestotempdir_fuzzer.h"
20 #include "verify_manager_host_impl.h"
21 #include "securec.h"
22 
23 using namespace OHOS::AppExecFwk;
24 namespace OHOS {
25     constexpr size_t FOO_MAX_LEN = 1024;
26     constexpr size_t U32_AT_SIZE = 4;
27     constexpr size_t MESSAGE_SIZE = 21;
28     constexpr size_t DCAMERA_SHIFT_24 = 24;
29     constexpr size_t DCAMERA_SHIFT_16 = 16;
30     constexpr size_t DCAMERA_SHIFT_8 = 8;
31 
GetU32Data(const char * ptr)32     uint32_t GetU32Data(const char* ptr)
33     {
34         return (ptr[0] << DCAMERA_SHIFT_24) | (ptr[1] << DCAMERA_SHIFT_16) | (ptr[2] << DCAMERA_SHIFT_8) | (ptr[3]);
35     }
36 
DoSomethingInterestingWithMyAPI(const char * data,size_t size)37     bool DoSomethingInterestingWithMyAPI(const char* data, size_t size)
38     {
39         VerifyManagerHostImpl impl;
40         std::string bundleName(data, size);
41         int32_t userId = static_cast<int32_t>(GetU32Data(data));
42         std::vector<std::string> abcPaths = { std::string(data, size) };
43         auto ret1 = impl.CopyFilesToTempDir(bundleName, userId, abcPaths);
44         return true;
45     }
46 }
47 
48 // Fuzzer entry point.
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)49 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
50 {
51     /* Run your code on data */
52     if (data == nullptr) {
53         return 0;
54     }
55 
56     if (size < OHOS::U32_AT_SIZE) {
57         return 0;
58     }
59 
60     /* Validate the length of size */
61     if (size > OHOS::FOO_MAX_LEN) {
62         return 0;
63     }
64 
65     char* ch = static_cast<char*>(malloc(size + 1));
66     if (ch == nullptr) {
67         return 0;
68     }
69 
70     (void)memset_s(ch, size + 1, 0x00, size + 1);
71     if (memcpy_s(ch, size, data, size) != EOK) {
72         free(ch);
73         ch = nullptr;
74         return 0;
75     }
76     OHOS::DoSomethingInterestingWithMyAPI(ch, size);
77     free(ch);
78     ch = nullptr;
79     return 0;
80 }