/aosp12/system/unwinding/libunwindstack/tests/fuzz/ |
H A D | UnwinderComponentCreator.cpp | 58 ArchEnum GetArch(FuzzedDataProvider* data_provider) { in GetArch() argument 77 bool global = data_provider->ConsumeBool(); in ElfPushFakeFunctionData() 106 elf->FakeSetArch(GetArch(data_provider)); in PopulateElfFake() 109 ElfPushFakeFunctionData(data_provider, interface_fake); in PopulateElfFake() 110 ElfPushFakeStepData(data_provider); in PopulateElfFake() 165 bool exec = data_provider->ConsumeBool(); in GetMaps() 170 bool shouldAddElf = data_provider->ConsumeBool(); in GetMaps() 173 PopulateElfFake(data_provider)); in GetMaps() 338 bool sixty_four_bit = data_provider->ConsumeBool(); in PutElfFilesInMemory() 339 bool write_jit = data_provider->ConsumeBool(); in PutElfFilesInMemory() [all …]
|
H A D | UnwinderFuzz.cpp | 35 void PerformUnwind(FuzzedDataProvider* data_provider, Unwinder* unwinder) { in PerformUnwind() argument 40 uint8_t set_values = data_provider->ConsumeIntegral<uint8_t>() % 4; in PerformUnwind() 46 GetStringList(data_provider, kMaxUnwindStringLen, kMaxUnwindStrings); in PerformUnwind() 52 GetStringList(data_provider, kMaxUnwindStringLen, kMaxUnwindStrings); in PerformUnwind() 58 GetStringList(data_provider, kMaxUnwindStringLen, kMaxUnwindStrings); in PerformUnwind() 67 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 71 std::unique_ptr<Maps> maps = GetMaps(&data_provider); in LLVMFuzzerTestOneInput() 82 size_t max_frames = data_provider.ConsumeIntegralInRange<size_t>(0, 5000); in LLVMFuzzerTestOneInput() 89 unwinder.SetResolveNames(data_provider.ConsumeBool()); in LLVMFuzzerTestOneInput() 91 PerformUnwind(&data_provider, &unwinder); in LLVMFuzzerTestOneInput() [all …]
|
H A D | UnwinderComponentCreator.h | 71 std::unique_ptr<unwindstack::Maps> GetMaps(FuzzedDataProvider* data_provider); 72 std::vector<std::string> GetStringList(FuzzedDataProvider* data_provider, uint max_str_len, 74 unwindstack::ArchEnum GetArch(FuzzedDataProvider* data_provider); 78 void PutElfFilesInMemory(MemoryFake* memory, FuzzedDataProvider* data_provider); 80 std::unique_ptr<unwindstack::DexFiles> GetDexFiles(FuzzedDataProvider* data_provider,
|
/aosp12/frameworks/av/media/utils/fuzzers/ |
H A D | ServiceUtilitiesFuzz.cpp | 33 [](FuzzedDataProvider* data_provider, android::MediaPackageManager pm) -> void { in __anon43666a650102() 34 uid_t uid = data_provider->ConsumeIntegral<uid_t>(); in __anon43666a650102() 37 [](FuzzedDataProvider* data_provider, android::MediaPackageManager pm) -> void { in __anon43666a650202() 38 int spaces = data_provider->ConsumeIntegral<int>(); in __anon43666a650202() 48 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 49 int32_t uid = data_provider.ConsumeIntegral<int32_t>(); in LLVMFuzzerTestOneInput() 50 int32_t pid = data_provider.ConsumeIntegral<int32_t>(); in LLVMFuzzerTestOneInput() 51 audio_source_t source = static_cast<audio_source_t>(data_provider in LLVMFuzzerTestOneInput() 55 std::string msgStr = data_provider.ConsumeRandomLengthString(kMaxStringLen); in LLVMFuzzerTestOneInput() 85 while (data_provider.remaining_bytes() > 0 && ops_run++ < kMaxOperations) { in LLVMFuzzerTestOneInput() [all …]
|
H A D | TimeCheckFuzz.cpp | 31 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 38 data_provider.ConsumeIntegralInRange<uint32_t>(kMinTimeoutMs, kMaxTimeoutMs); in LLVMFuzzerTestOneInput() 39 uint8_t pid_size = data_provider.ConsumeIntegral<uint8_t>(); in LLVMFuzzerTestOneInput() 42 pid = data_provider.ConsumeIntegral<pid_t>(); in LLVMFuzzerTestOneInput() 48 std::string name = data_provider.ConsumeRandomLengthString(kMaxStringLen); in LLVMFuzzerTestOneInput() 53 uint8_t sleep_amount_ms = data_provider.ConsumeIntegralInRange<uint8_t>(0, timeoutMs / 2); in LLVMFuzzerTestOneInput()
|
H A D | BatteryNotifierFuzz.cpp | 77 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 78 std::string camera_name = data_provider.ConsumeRandomLengthString(kMaxStringLength); in LLVMFuzzerTestOneInput() 79 std::string flashlight_name = data_provider.ConsumeRandomLengthString(kMaxStringLength); in LLVMFuzzerTestOneInput() 80 uid_t video_id = data_provider.ConsumeIntegral<uid_t>(); in LLVMFuzzerTestOneInput() 81 uid_t audio_id = data_provider.ConsumeIntegral<uid_t>(); in LLVMFuzzerTestOneInput() 82 uid_t light_id = data_provider.ConsumeIntegral<uid_t>(); in LLVMFuzzerTestOneInput() 83 uid_t camera_id = data_provider.ConsumeIntegral<uid_t>(); in LLVMFuzzerTestOneInput() 85 while (data_provider.remaining_bytes() > 0 && ops_run++ < kMaxOperations) { in LLVMFuzzerTestOneInput() 86 uint8_t op = data_provider.ConsumeIntegralInRange<uint8_t>(0, operations.size() - 1); in LLVMFuzzerTestOneInput()
|
H A D | SchedulingPolicyServiceFuzz.cpp | 46 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 50 int32_t priority = data_provider.ConsumeIntegral<int32_t>(); in LLVMFuzzerTestOneInput() 51 bool is_for_app = data_provider.ConsumeBool(); in LLVMFuzzerTestOneInput() 52 bool async = data_provider.ConsumeBool(); in LLVMFuzzerTestOneInput()
|
/aosp12/system/update_engine/payload_consumer/ |
H A D | delta_performer_fuzzer.cc | 53 FuzzedDataProvider data_provider(data, size); in FuzzDeltaPerformer() local 67 .size = data_provider.ConsumeIntegralInRange<uint64_t>(0, 10000), in FuzzDeltaPerformer() 68 .metadata_size = data_provider.ConsumeIntegralInRange<uint64_t>(0, 1000), in FuzzDeltaPerformer() 69 .hash = data_provider.ConsumeBytes<uint8_t>(32), in FuzzDeltaPerformer() 71 data_provider.ConsumeIntegralInRange(0, 3)), in FuzzDeltaPerformer() 72 .already_applied = data_provider.ConsumeBool(), in FuzzDeltaPerformer() 81 data_provider.ConsumeBool()); in FuzzDeltaPerformer() 83 auto chunk_size = data_provider.ConsumeIntegralInRange<size_t>(0, 100); in FuzzDeltaPerformer() 84 auto data = data_provider.ConsumeBytes<uint8_t>(chunk_size); in FuzzDeltaPerformer() 87 } while (data_provider.remaining_bytes() > 0); in FuzzDeltaPerformer()
|
/aosp12/system/bt/packet/tests/fuzzers/ |
H A D | get_capabilities_res_fuzzer.cc | 31 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 33 data_provider.ConsumeIntegral<uint32_t>()); in LLVMFuzzerTestOneInput() 34 builder->AddCompanyId(data_provider.ConsumeIntegral<uint32_t>()); in LLVMFuzzerTestOneInput() 35 builder->AddCompanyId(data_provider.ConsumeIntegral<uint32_t>()); in LLVMFuzzerTestOneInput()
|
H A D | get_total_number_of_items_res_fuzzer.cc | 34 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 36 Status::NO_ERROR, data_provider.ConsumeIntegral<uint32_t>(), in LLVMFuzzerTestOneInput() 37 data_provider.ConsumeIntegral<uint32_t>()); in LLVMFuzzerTestOneInput()
|
H A D | get_play_status_req_fuzzer.cc | 33 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 36 0, data_provider.ConsumeIntegral<uint32_t>(), 0); in LLVMFuzzerTestOneInput()
|
H A D | get_play_status_res_fuzzer.cc | 32 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 34 0, data_provider.ConsumeIntegral<uint32_t>(), 0); in LLVMFuzzerTestOneInput()
|
H A D | change_path_res_fuzzer.cc | 36 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 38 Status::NO_ERROR, data_provider.ConsumeIntegral<uint32_t>()); in LLVMFuzzerTestOneInput()
|
H A D | get_item_attributes_res_fuzzer.cc | 33 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 34 std::string s = data_provider.ConsumeRemainingBytesAsString(); in LLVMFuzzerTestOneInput()
|
H A D | get_element_attributes_res_packet_fuzzer.cc | 31 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 32 std::string s = data_provider.ConsumeRemainingBytesAsString(); in LLVMFuzzerTestOneInput()
|
H A D | get_folder_items_res_fuzzer.cc | 34 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 35 std::string s = data_provider.ConsumeRemainingBytesAsString(); in LLVMFuzzerTestOneInput()
|
/aosp12/bootable/recovery/tests/fuzz/ |
H A D | verify_package_fuzzer.cpp | 28 FuzzedDataProvider data_provider(data, size); in LLVMFuzzerTestOneInput() local 29 auto package_contents = data_provider.ConsumeRemainingBytes<uint8_t>(); in LLVMFuzzerTestOneInput()
|