1 /*
2  * Copyright (c) 2022 Huawei Device Co., Ltd.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at
6  *
7  *     http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 
16 #include "aafwkrenderscheduler_fuzzer.h"
17 
18 #include <cstring>
19 #include <securec.h>
20 
21 #define private public
22 #include "aafwk_app_mgr_client_adapter_impl.h"
23 #include "aafwk_browser_host_impl.h"
24 #include "aafwk_render_scheduler_impl.h"
25 #undef private
26 
27 #include "aafwk_render_scheduler_host_adapter.h"
28 #include "app_mgr_client.h"
29 #include "ohos_adapter_helper.h"
30 
31 using namespace OHOS::NWeb;
32 using namespace OHOS::AppExecFwk;
33 
34 namespace OHOS {
AafwkRenderSchedulerFuzzTest(const uint8_t * data,size_t size)35 bool AafwkRenderSchedulerFuzzTest(const uint8_t* data, size_t size)
36 {
37     constexpr int fdNum = 3;
38     if ((data == nullptr) || size < fdNum * sizeof(int32_t)) {
39         return false;
40     }
41     std::shared_ptr<AafwkRenderSchedulerHostAdapter> adapter = nullptr;
42     AafwkRenderSchedulerImpl render(adapter);
43     int32_t ipcFd = 0;
44     int32_t sharedFd = 0;
45     int32_t crashFd = 0;
46     if (memcpy_s(&ipcFd, sizeof(int32_t), data, sizeof(int32_t)) != 0) {
47         return false;
48     }
49     if (memcpy_s(&sharedFd, sizeof(int32_t), data + sizeof(int32_t), sizeof(int32_t)) != 0) {
50         return false;
51     }
52 
53     if (memcpy_s(&crashFd, sizeof(int32_t), data + sizeof(int32_t) + sizeof(int32_t), sizeof(int32_t)) != 0) {
54         return false;
55     }
56 
57     render.NotifyBrowserFd(ipcFd, sharedFd, crashFd, nullptr);
58     return true;
59 }
60 } // namespace OHOS
61 
62 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)63 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
64 {
65     /* Run your code on data */
66     OHOS::AafwkRenderSchedulerFuzzTest(data, size);
67     return 0;
68 }
69