Home
last modified time | relevance | path

Searched refs:dataProvider (Results 1 – 25 of 53) sorted by relevance

123

/aosp12/frameworks/av/media/libstagefright/tests/fuzzers/
H A DWriterFuzzer.cpp69 bool valid_fd = dataProvider->ConsumeBool(); in __anonc82e146c0202()
79 bool valid_fd = dataProvider->ConsumeBool(); in __anonc82e146c0302()
112 uint8_t val = dataProvider->ConsumeIntegral<uint8_t>(); in __anonc82e146c0a02()
116 uint16_t val = dataProvider->ConsumeIntegral<uint16_t>(); in __anonc82e146c0b02()
120 uint32_t val = dataProvider->ConsumeIntegral<uint32_t>(); in __anonc82e146c0c02()
124 uint64_t val = dataProvider->ConsumeIntegral<uint64_t>(); in __anonc82e146c0d02()
132 std::string fourCC = getFourCC(dataProvider); in __anonc82e146c0f02()
146 int lat = dataProvider->ConsumeIntegral<int>(); in __anonc82e146c1202()
147 int lon = dataProvider->ConsumeIntegral<int>(); in __anonc82e146c1202()
163 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
[all …]
H A DFuzzerMediaUtility.cpp29 std::string genMimeType(FuzzedDataProvider *dataProvider) { in genMimeType() argument
30 uint8_t idx = dataProvider->ConsumeIntegralInRange<uint8_t>(0, kMimeTypes.size() - 1); in genMimeType()
34 sp<IMediaExtractor> genMediaExtractor(FuzzedDataProvider *dataProvider, std::string mimeType, in genMediaExtractor() argument
36 uint32_t dataBlobSize = dataProvider->ConsumeIntegralInRange<uint16_t>(0, maxDataAmount); in genMediaExtractor()
37 std::vector<uint8_t> data = dataProvider->ConsumeBytes<uint8_t>(dataBlobSize); in genMediaExtractor()
57 sp<MediaSource> genMediaSource(FuzzedDataProvider *dataProvider, uint16_t maxMediaBlobSize) { in genMediaSource() argument
58 std::string mime = genMimeType(dataProvider); in genMediaSource()
59 sp<IMediaExtractor> extractor = genMediaExtractor(dataProvider, mime, maxMediaBlobSize); in genMediaSource()
/aosp12/system/bt/osi/test/fuzzers/list/
H A Dfuzz_list.cc32 FuzzedDataProvider* dataProvider = in list_iter_cb_impl() local
34 return dataProvider->ConsumeBool(); in list_iter_cb_impl()
37 list_t* createList(FuzzedDataProvider* dataProvider) { in createList() argument
38 bool should_callback = dataProvider->ConsumeBool(); in createList()
83 list = createList(dataProvider); in callArbitraryFunction()
104 getArbitraryElement(list_vector, dataProvider)); in callArbitraryFunction()
111 getArbitraryElement(list_vector, dataProvider)); in callArbitraryFunction()
121 getArbitraryElement(list_vector, dataProvider)); in callArbitraryFunction()
128 getArbitraryElement(list_vector, dataProvider)); in callArbitraryFunction()
135 getArbitraryElement(list_vector, dataProvider)); in callArbitraryFunction()
[all …]
/aosp12/system/core/libutils/
H A DLooper_fuzz.cpp41 [](FuzzedDataProvider* dataProvider, sp<Looper> looper, Pipe) -> void { in __anon987b607e0102()
44 [](FuzzedDataProvider* dataProvider, sp<Looper> looper, Pipe) -> void { in __anon987b607e0202()
49 looper->addFd(pipeObj.receiveFd, dataProvider->ConsumeIntegral<int>(), in __anon987b607e0302()
50 dataProvider->ConsumeIntegral<int>(), nullptr, nullptr); in __anon987b607e0302()
54 looper->addFd(pipeObj.receiveFd, dataProvider->ConsumeIntegral<int>(), in __anon987b607e0402()
59 looper->addFd(pipeObj.receiveFd, dataProvider->ConsumeIntegral<int>(), in __anon987b607e0502()
64 looper->addFd(pipeObj.receiveFd, dataProvider->ConsumeIntegral<int>(), in __anon987b607e0602()
73 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
74 sp<Looper> looper = new Looper(dataProvider.ConsumeBool()); in LLVMFuzzerTestOneInput()
77 while (dataProvider.remaining_bytes() > 0 && opsRun++ < MAX_OPERATIONS) { in LLVMFuzzerTestOneInput()
[all …]
H A DString8_fuzz.cpp60 -> void { fuzzFormat(dataProvider, str1, dataProvider->ConsumeBool()); }, in __anon90faaa7c0802()
103 FormatChar formatType = dataProvider->ConsumeEnum<FormatChar>(); in fuzzFormat()
107 if (dataProvider->ConsumeBool()) { in fuzzFormat()
109 if (dataProvider->ConsumeBool()) { in fuzzFormat()
134 int val = dataProvider->ConsumeIntegral<int>(); in fuzzFormat()
148 uint val = dataProvider->ConsumeIntegral<uint>(); in fuzzFormat()
166 float val = dataProvider->ConsumeFloatingPoint<float>(); in fuzzFormat()
176 char val = dataProvider->ConsumeIntegral<char>(); in fuzzFormat()
208 operations[index](dataProvider, str1, str2); in callFunc()
212 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
[all …]
H A DString16_fuzz.cpp52 ([](FuzzedDataProvider& dataProvider, android::String16 str1,
59 ([](FuzzedDataProvider& dataProvider, android::String16 str1,
61 char16_t findChar = dataProvider.ConsumeIntegral<char16_t>(); in __anone232064b0902()
64 ([](FuzzedDataProvider& dataProvider, android::String16 str1,
66 char16_t findChar = dataProvider.ConsumeIntegral<char16_t>(); in __anone232064b0a02()
69 ([](FuzzedDataProvider& dataProvider, android::String16 str1,
71 char16_t findChar = dataProvider.ConsumeIntegral<char16_t>(); in __anone232064b0b02()
79 operations[index](dataProvider, str1, str2); in callFunc()
83 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
103 while (dataProvider.remaining_bytes() > 0 && opsRun++ < MAX_OPERATIONS) { in LLVMFuzzerTestOneInput()
[all …]
H A DLruCache_fuzz.cpp48 [](FuzzedDataProvider* dataProvider, FuzzCache* cache) -> void { in __anon7d5aecd40602()
49 size_t key = dataProvider->ConsumeIntegral<size_t>(); in __anon7d5aecd40602()
50 size_t val = dataProvider->ConsumeIntegral<size_t>(); in __anon7d5aecd40602()
53 [](FuzzedDataProvider* dataProvider, FuzzCache* cache) -> void { in __anon7d5aecd40702()
54 size_t key = dataProvider->ConsumeIntegral<size_t>(); in __anon7d5aecd40702()
57 [](FuzzedDataProvider* dataProvider, FuzzCache* cache) -> void { in __anon7d5aecd40802()
58 size_t key = dataProvider->ConsumeIntegral<size_t>(); in __anon7d5aecd40802()
66 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
68 while (dataProvider.remaining_bytes() > 0) { in LLVMFuzzerTestOneInput()
69 uint8_t op = dataProvider.ConsumeIntegral<uint8_t>() % operations.size(); in LLVMFuzzerTestOneInput()
[all …]
H A DFileMap_fuzz.cpp26 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
29 std::string contents = dataProvider.ConsumeRandomLengthString(MAX_STR_SIZE); in LLVMFuzzerTestOneInput()
38 std::string orig_name = dataProvider.ConsumeRandomLengthString(MAX_FILENAME_SIZE); in LLVMFuzzerTestOneInput()
39 size_t length = dataProvider.ConsumeIntegralInRange<size_t>(1, SIZE_MAX); in LLVMFuzzerTestOneInput()
40 off64_t offset = dataProvider.ConsumeIntegralInRange<off64_t>(1, INT64_MAX); in LLVMFuzzerTestOneInput()
41 bool read_only = dataProvider.ConsumeBool(); in LLVMFuzzerTestOneInput()
47 int enum_index = dataProvider.ConsumeIntegral<int>(); in LLVMFuzzerTestOneInput()
H A DPrinter_fuzz.cpp25 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
28 uint indent = dataProvider.ConsumeIntegral<uint>(); in LLVMFuzzerTestOneInput()
29 std::string prefix = dataProvider.ConsumeRandomLengthString(MAX_STR_SIZE); in LLVMFuzzerTestOneInput()
30 std::string line = dataProvider.ConsumeRandomLengthString(MAX_STR_SIZE); in LLVMFuzzerTestOneInput()
33 std::string logTag = dataProvider.ConsumeRandomLengthString(MAX_STR_SIZE); in LLVMFuzzerTestOneInput()
35 static_cast<android_LogPriority>(dataProvider.ConsumeIntegral<int>()); in LLVMFuzzerTestOneInput()
36 bool ignoreBlankLines = dataProvider.ConsumeBool(); in LLVMFuzzerTestOneInput()
H A DProcessCallStack_fuzz.cpp35 void spawnThreads(FuzzedDataProvider* dataProvider) { in spawnThreads() argument
39 uint8_t count = dataProvider->ConsumeIntegralInRange<uint8_t>(1, MAX_THREADS); in spawnThreads()
44 dataProvider->ConsumeRandomLengthString(MAX_NAME_SIZE).append(std::to_string(i)); in spawnThreads()
57 std::string logTag = dataProvider->ConsumeRandomLengthString(MAX_LOG_META_SIZE); in spawnThreads()
58 std::string prefix = dataProvider->ConsumeRandomLengthString(MAX_LOG_META_SIZE); in spawnThreads()
74 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
75 spawnThreads(&dataProvider); in LLVMFuzzerTestOneInput()
H A DCallStack_fuzz.cpp26 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
27 size_t ignoreDepth = dataProvider.ConsumeIntegralInRange<size_t>(0, MAX_IGNORE_DEPTH); in LLVMFuzzerTestOneInput()
28 int logPriority = dataProvider.ConsumeIntegral<int>(); in LLVMFuzzerTestOneInput()
29 pid_t tid = dataProvider.ConsumeIntegral<pid_t>(); in LLVMFuzzerTestOneInput()
30 std::string logTag = dataProvider.ConsumeRandomLengthString(MAX_STRING_SIZE); in LLVMFuzzerTestOneInput()
31 std::string prefix = dataProvider.ConsumeRandomLengthString(MAX_STRING_SIZE); in LLVMFuzzerTestOneInput()
H A DBitSet_fuzz.cpp56 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
57 uint32_t thirty_two_base = dataProvider.ConsumeIntegral<uint32_t>(); in LLVMFuzzerTestOneInput()
58 uint64_t sixty_four_base = dataProvider.ConsumeIntegral<uint64_t>(); in LLVMFuzzerTestOneInput()
63 while (dataProvider.remaining_bytes() > 0 && opsRun++ < MAX_OPERATIONS) { in LLVMFuzzerTestOneInput()
64 uint32_t bit = dataProvider.ConsumeIntegral<uint32_t>(); in LLVMFuzzerTestOneInput()
65 uint8_t op = dataProvider.ConsumeIntegral<uint8_t>(); in LLVMFuzzerTestOneInput()
H A DVector_fuzz.cpp21 FuzzedDataProvider dataProvider(data, size); in runVectorFuzz() local
27 size_t vectorSize = dataProvider.ConsumeIntegralInRange<size_t>(0, MAX_VEC_SIZE); in runVectorFuzz()
31 uint8_t count = dataProvider.ConsumeIntegralInRange<uint8_t>(1, 5); in runVectorFuzz()
40 size_t index = dataProvider.ConsumeIntegralInRange<size_t>(0, vec.size()); in runVectorFuzz()
41 std::vector<uint8_t> remainingVec = dataProvider.ConsumeRemainingBytes<uint8_t>(); in runVectorFuzz()
/aosp12/system/bt/osi/test/fuzzers/ringbuffer/
H A Dfuzz_ringbuffer.cc29 size_t index = dataProvider->ConsumeIntegralInRange<size_t>( in getArbitraryRingBuf()
35 FuzzedDataProvider* dataProvider) { in callArbitraryFunction() argument
37 char func_id = dataProvider->ConsumeIntegralInRange<char>(0, 8); in callArbitraryFunction()
68 buf = getArbitraryRingBuf(ringbuf_vector, dataProvider); in callArbitraryFunction()
74 buf = getArbitraryRingBuf(ringbuf_vector, dataProvider); in callArbitraryFunction()
80 buf = getArbitraryRingBuf(ringbuf_vector, dataProvider); in callArbitraryFunction()
99 buf = getArbitraryRingBuf(ringbuf_vector, dataProvider); in callArbitraryFunction()
119 off_t offset = dataProvider->ConsumeIntegral<off_t>(); in callArbitraryFunction()
132 buf = getArbitraryRingBuf(ringbuf_vector, dataProvider); in callArbitraryFunction()
147 FuzzedDataProvider dataProvider(Data, Size); in LLVMFuzzerTestOneInput() local
[all …]
/aosp12/system/bt/osi/test/fuzzers/alarm/
H A Dfuzz_alarm.cc49 alarm_t* fuzz_init_alarm(FuzzedDataProvider* dataProvider) { in fuzz_init_alarm() argument
51 dataProvider->ConsumeIntegralInRange<size_t>(0, MAX_BUFFER_LEN); in fuzz_init_alarm()
53 dataProvider->ConsumeBytesWithTerminator<char>(name_len, '\0'); in fuzz_init_alarm()
57 if (dataProvider->ConsumeBool()) { in fuzz_init_alarm()
65 FuzzedDataProvider* dataProvider) { in fuzz_set_alarm() argument
76 dataProvider->ConsumeBytes<uint8_t>(buff_len); in fuzz_set_alarm()
82 if (dataProvider->ConsumeBool()) { in fuzz_set_alarm()
94 FuzzedDataProvider dataProvider(Data, Size); in LLVMFuzzerTestOneInput() local
101 if (dataProvider.ConsumeBool()) { in LLVMFuzzerTestOneInput()
103 alarm = fuzz_init_alarm(&dataProvider); in LLVMFuzzerTestOneInput()
[all …]
/aosp12/frameworks/native/libs/input/
H A DPropertyMap_fuzz.cpp34 [](FuzzedDataProvider* dataProvider, android::PropertyMap propertyMap) -> void { in __anond7bced8b0302()
35 std::string keyStr = dataProvider->ConsumeRandomLengthString(MAX_STR_LEN); in __anond7bced8b0302()
39 [](FuzzedDataProvider* dataProvider, android::PropertyMap propertyMap) -> void { in __anond7bced8b0402()
40 std::string keyStr = dataProvider->ConsumeRandomLengthString(MAX_STR_LEN); in __anond7bced8b0402()
45 [](FuzzedDataProvider* dataProvider, android::PropertyMap /*unused*/) -> void { in __anond7bced8b0502()
58 std::string keyStr = dataProvider->ConsumeRandomLengthString(MAX_STR_LEN); in __anond7bced8b0602()
59 std::string valStr = dataProvider->ConsumeRandomLengthString(MAX_STR_LEN); in __anond7bced8b0602()
66 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
70 while (dataProvider.remaining_bytes() > 0 && opsRun++ < MAX_OPERATIONS) { in LLVMFuzzerTestOneInput()
71 uint8_t op = dataProvider.ConsumeIntegralInRange<uint8_t>(0, operations.size() - 1); in LLVMFuzzerTestOneInput()
[all …]
/aosp12/system/bt/osi/test/fuzzers/fixed_queue/
H A Dfuzz_fixed_queue.cc38 fixed_queue_free_cb cbOrNull(FuzzedDataProvider* dataProvider) { in cbOrNull() argument
39 bool null_cb = dataProvider->ConsumeBool(); in cbOrNull()
76 FuzzedDataProvider* dataProvider) { in callArbitraryFunction() argument
81 switch (dataProvider->ConsumeIntegralInRange<char>(0, 17)) { in callArbitraryFunction()
88 fixed_queue_flush(fixed_queue, cbOrNull(dataProvider)); in callArbitraryFunction()
107 buf_ptr = generateBuffer(dataProvider, MAX_BUF_SIZE, false); in callArbitraryFunction()
120 buf_ptr = generateBuffer(dataProvider, MAX_BUF_SIZE, false); in callArbitraryFunction()
151 index = dataProvider->ConsumeIntegralInRange<size_t>( in callArbitraryFunction()
210 FuzzedDataProvider dataProvider(Data, Size); in LLVMFuzzerTestOneInput() local
225 &dataProvider); in LLVMFuzzerTestOneInput()
[all …]
/aosp12/system/bt/osi/test/fuzzers/allocator/
H A Dfuzz_allocator.cc25 FuzzedDataProvider* dataProvider) { in callArbitraryFunction() argument
27 char func_id = dataProvider->ConsumeIntegralInRange<char>(0, 6); in callArbitraryFunction()
38 dataProvider->ConsumeIntegralInRange<size_t>(0, MAX_BUF_SIZE); in callArbitraryFunction()
59 size_t index = dataProvider->ConsumeIntegralInRange<size_t>( in callArbitraryFunction()
76 char* buf = generateBuffer(dataProvider, MAX_BUF_SIZE, true); in callArbitraryFunction()
85 dataProvider->ConsumeIntegralInRange<size_t>(1, MAX_BUF_SIZE); in callArbitraryFunction()
101 FuzzedDataProvider dataProvider(Data, Size); in LLVMFuzzerTestOneInput() local
107 dataProvider.ConsumeIntegralInRange<size_t>(0, MAX_NUM_FUNCTIONS); in LLVMFuzzerTestOneInput()
109 callArbitraryFunction(&alloc_vector, &dataProvider); in LLVMFuzzerTestOneInput()
/aosp12/system/bt/osi/test/fuzzers/allocation_tracker/
H A Dfuzz_allocation_tracker.cc47 FuzzedDataProvider* dataProvider) { in callArbitraryFunction() argument
49 switch (dataProvider->ConsumeIntegralInRange<char>(0, 6)) { in callArbitraryFunction()
66 alloc.alloc_id = dataProvider->ConsumeIntegral<allocator_id_t>(); in callArbitraryFunction()
68 dataProvider->ConsumeIntegralInRange<size_t>(1, MAX_BUF_SIZE); in callArbitraryFunction()
91 size_t index = dataProvider->ConsumeIntegralInRange<size_t>( in callArbitraryFunction()
105 dataProvider->ConsumeIntegralInRange<size_t>(0, MAX_BUF_SIZE); in callArbitraryFunction()
124 FuzzedDataProvider dataProvider(Data, Size); in LLVMFuzzerTestOneInput() local
131 dataProvider.ConsumeIntegralInRange<size_t>(0, MAX_NUM_FUNCTIONS); in LLVMFuzzerTestOneInput()
133 callArbitraryFunction(&alloc_vector, &dataProvider); in LLVMFuzzerTestOneInput()
/aosp12/system/bt/gd/hci/fuzz/
H A Dacl_manager_fuzz_test.cc39 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
43 fuzzHci->TurnOnAutoReply(&dataProvider); in LLVMFuzzerTestOneInput()
47 while (dataProvider.remaining_bytes() > 0) { in LLVMFuzzerTestOneInput()
48 const uint8_t action = dataProvider.ConsumeIntegralInRange(0, 2); in LLVMFuzzerTestOneInput()
51 fake_timerfd_advance(dataProvider.ConsumeIntegral<uint64_t>()); in LLVMFuzzerTestOneInput()
54 fuzzHci->injectArbitrary(dataProvider); in LLVMFuzzerTestOneInput()
H A Dhci_layer_fuzz_test.cc39 FuzzedDataProvider dataProvider(data, size); in LLVMFuzzerTestOneInput() local
46 while (dataProvider.remaining_bytes() > 0) { in LLVMFuzzerTestOneInput()
47 const uint8_t action = dataProvider.ConsumeIntegralInRange(0, 5); in LLVMFuzzerTestOneInput()
50 fake_timerfd_advance(dataProvider.ConsumeIntegral<uint64_t>()); in LLVMFuzzerTestOneInput()
53 fuzzHal->injectArbitrary(dataProvider); in LLVMFuzzerTestOneInput()
56 fuzzClient->injectArbitrary(dataProvider); in LLVMFuzzerTestOneInput()
/aosp12/system/bt/osi/test/fuzzers/array/
H A Dfuzz_array.cc27 FuzzedDataProvider dataProvider(Data, Size); in LLVMFuzzerTestOneInput() local
31 dataProvider.ConsumeIntegralInRange<size_t>(1, MAX_ELEMENT_SIZE); in LLVMFuzzerTestOneInput()
38 dataProvider.ConsumeIntegralInRange<size_t>(0, MAX_ARRAY_LEN); in LLVMFuzzerTestOneInput()
41 uint32_t new_val = dataProvider.ConsumeIntegral<uint32_t>(); in LLVMFuzzerTestOneInput()
49 dataProvider.ConsumeIntegralInRange<size_t>(0, array_length(arr) - 1); in LLVMFuzzerTestOneInput()
/aosp12/system/bt/osi/test/fuzzers/compat/
H A Dfuzz_compat.cc25 FuzzedDataProvider dataProvider(Data, Size); in LLVMFuzzerTestOneInput() local
28 dataProvider.ConsumeIntegralInRange<size_t>(0, MAX_BUFFER_SIZE); in LLVMFuzzerTestOneInput()
37 dataProvider.ConsumeBytesWithTerminator<char>(buf_size, '\0'); in LLVMFuzzerTestOneInput()
51 size_t len_to_cpy = dataProvider.ConsumeIntegralInRange<size_t>(0, buf_size); in LLVMFuzzerTestOneInput()
/aosp12/system/bt/osi/test/fuzzers/future/
H A Dfuzz_future.cc24 FuzzedDataProvider dataProvider(Data, Size); in LLVMFuzzerTestOneInput() local
28 dataProvider.ConsumeIntegralInRange<size_t>(1, MAX_BUFFER_SIZE); in LLVMFuzzerTestOneInput()
33 std::vector<uint8_t> bytes = dataProvider.ConsumeBytes<uint8_t>(buf_size); in LLVMFuzzerTestOneInput()
38 bool is_immediate = dataProvider.ConsumeBool(); in LLVMFuzzerTestOneInput()
/aosp12/system/bt/osi/test/fuzzers/buffer/
H A Dfuzz_buffer.cc25 FuzzedDataProvider dataProvider(Data, Size); in LLVMFuzzerTestOneInput() local
29 dataProvider.ConsumeIntegralInRange<size_t>(1, MAX_BUFFER_SIZE); in LLVMFuzzerTestOneInput()
39 dataProvider.ConsumeIntegralInRange<size_t>(0, MAX_NUM_SLICES); in LLVMFuzzerTestOneInput()
43 dataProvider.ConsumeIntegralInRange<size_t>(1, buf_size - 1); in LLVMFuzzerTestOneInput()

123