1 /*
2 * Copyright (c) 2023 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15 #include "medialibrary_extension_update_fuzzer.h"
16
17 #include <cstdint>
18 #include <string>
19
20 #include "data_ability_observer_interface.h"
21 #include "datashare_business_error.h"
22 #include "datashare_helper.h"
23 #include "datashare_predicates.h"
24 #include "datashare_values_bucket.h"
25 #include "media_datashare_ext_ability.h"
26 #include "media_datashare_stub_impl.h"
27 #include "media_log.h"
28 #include "runtime.h"
29
30 namespace OHOS {
31 using namespace std;
32 using namespace AbilityRuntime;
33 using namespace DataShare;
FuzzInt32(const uint8_t * data,size_t size)34 static inline int32_t FuzzInt32(const uint8_t *data, size_t size)
35 {
36 return static_cast<int32_t>(*data);
37 }
38
FuzzInt64(const uint8_t * data,size_t size)39 static inline int64_t FuzzInt64(const uint8_t *data, size_t size)
40 {
41 return static_cast<int64_t>(*data);
42 }
43
FuzzDouble(const uint8_t * data,size_t size)44 static inline double FuzzDouble(const uint8_t *data, size_t size)
45 {
46 return static_cast<double>(*data);
47 }
48
FuzzString(const uint8_t * data,size_t size)49 static inline string FuzzString(const uint8_t *data, size_t size)
50 {
51 return {reinterpret_cast<const char*>(data), size};
52 }
53
FuzzVectorInt32(const uint8_t * data,size_t size)54 static inline vector<int32_t> FuzzVectorInt32(const uint8_t *data, size_t size)
55 {
56 return {FuzzInt32(data, size)};
57 }
58
FuzzVectorInt64(const uint8_t * data,size_t size)59 static inline vector<int64_t> FuzzVectorInt64(const uint8_t *data, size_t size)
60 {
61 return {FuzzInt64(data, size)};
62 }
63
FuzzVectorDouble(const uint8_t * data,size_t size)64 static inline vector<double> FuzzVectorDouble(const uint8_t *data, size_t size)
65 {
66 return {FuzzDouble(data, size)};
67 }
68
FuzzVectorString(const uint8_t * data,size_t size)69 static inline vector<string> FuzzVectorString(const uint8_t *data, size_t size)
70 {
71 return {FuzzString(data, size)};
72 }
73
FuzzVectorSingleValueType(const uint8_t * data,size_t size)74 static inline vector<SingleValue::Type> FuzzVectorSingleValueType(const uint8_t *data, size_t size)
75 {
76 return {FuzzInt64(data, size)};
77 }
78
FuzzVectorMultiValueType(const uint8_t * data,size_t size)79 static inline vector<MutliValue::Type> FuzzVectorMultiValueType(const uint8_t *data, size_t size)
80 {
81 return {
82 FuzzVectorInt32(data, size),
83 FuzzVectorInt64(data, size),
84 FuzzVectorString(data, size),
85 FuzzVectorDouble(data, size)
86 };
87 }
88
FuzzOperationItem(const uint8_t * data,size_t size)89 static inline OperationItem FuzzOperationItem(const uint8_t *data, size_t size)
90 {
91 return {
92 .operation = FuzzInt32(data, size),
93 .singleParams = FuzzVectorSingleValueType(data, size),
94 .multiParams = FuzzVectorMultiValueType(data, size),
95 };
96 }
97
FuzzVectorOperationItem(const uint8_t * data,size_t size)98 static inline vector<OperationItem> FuzzVectorOperationItem(const uint8_t *data, size_t size)
99 {
100 return {FuzzOperationItem(data, size)};
101 }
102
FuzzUri(const uint8_t * data,size_t size)103 static inline Uri FuzzUri(const uint8_t *data, size_t size)
104 {
105 return Uri(FuzzString(data, size));
106 }
107
FuzzDataSharePredicates(const uint8_t * data,size_t size)108 static inline DataSharePredicates FuzzDataSharePredicates(const uint8_t *data, size_t size)
109 {
110 return DataSharePredicates(FuzzVectorOperationItem(data, size));
111 }
112
FuzzDataShareValuesBucket(const uint8_t * data,size_t size)113 static inline DataShareValuesBucket FuzzDataShareValuesBucket(const uint8_t *data, size_t size)
114 {
115 return {};
116 }
117
UpdateFuzzer(MediaDataShareExtAbility & extension,const uint8_t * data,size_t size)118 static inline void UpdateFuzzer(MediaDataShareExtAbility &extension, const uint8_t* data, size_t size)
119 {
120 DataSharePredicates predicates;
121 extension.Update(FuzzUri(data, size), FuzzDataSharePredicates(data, size), FuzzDataShareValuesBucket(data, size));
122 }
123
Init()124 static inline MediaDataShareExtAbility Init()
125 {
126 const std::unique_ptr<AbilityRuntime::Runtime> runtime;
127 return {(*runtime)};
128 }
129 } // namespace OHOS
130
131 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)132 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
133 {
134 /* Run your code on data */
135 auto extension = OHOS::Init();
136 OHOS::UpdateFuzzer(extension, data, size);
137 return 0;
138 }