1 /*
2 * Copyright (c) 2023 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "devattestclient_fuzzer.h"
17
18 #include <string>
19 #include <securec.h>
20 #include "devattest_client.h"
21
22 using namespace std;
23 using namespace OHOS::DevAttest;
24
25 namespace OHOS {
26 const uint8_t *g_baseFuzzData = nullptr;
27 size_t g_baseFuzzSize = 0;
28 size_t g_baseFuzzPos;
29
30 template <class T>
GetData()31 T GetData()
32 {
33 T object {};
34 size_t objectSize = sizeof(object);
35 if (g_baseFuzzData == nullptr || objectSize > g_baseFuzzSize - g_baseFuzzPos) {
36 return object;
37 }
38 errno_t ret = memcpy_s(&object, objectSize, g_baseFuzzData + g_baseFuzzPos, objectSize);
39 if (ret != EOK) {
40 return {};
41 }
42 g_baseFuzzPos += objectSize;
43 return object;
44 }
45
GetAttestStatus(const uint8_t * data,size_t size)46 static void GetAttestStatus(const uint8_t* data, size_t size)
47 {
48 g_baseFuzzData = data;
49 g_baseFuzzSize = size;
50 g_baseFuzzPos = 0;
51 AttestResultInfo attestResultInfo;
52 attestResultInfo.authResult_ = GetData<int32_t>();
53 attestResultInfo.softwareResult_ = GetData<int32_t>();
54 for (int i = 0; i < SOFTWARE_RESULT_DETAIL_SIZE; i++) {
55 attestResultInfo.softwareResultDetail_[i] = GetData<int32_t>();
56 }
57
58 attestResultInfo.ticketLength_ = GetData<int32_t>();
59 attestResultInfo.ticket_ = std::string(g_baseFuzzData + g_baseFuzzPos,
60 g_baseFuzzData + size);
61 DevAttestClient::GetInstance().GetAttestStatus(attestResultInfo);
62 }
63
DevattestClientFuzzTest(const uint8_t * data,size_t size)64 void DevattestClientFuzzTest(const uint8_t* data, size_t size)
65 {
66 int32_t demandSize = ((SOFTWARE_RESULT_DETAIL_SIZE + 3) * sizeof(int32_t));
67 if (static_cast<int32_t>(size) >= demandSize) {
68 GetAttestStatus(data, size);
69 }
70 return;
71 }
72 }
73
74 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)75 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
76 {
77 /* Run your code on data */
78 OHOS::DevattestClientFuzzTest(data, size);
79 return 0;
80 }
81