/aosp12/build/soong/cc/ |
H A D | fuzz.go | 260 fuzz.corpus = android.PathsForModuleSrc(ctx, fuzz.Properties.Corpus) 271 fuzz.data = android.PathsForModuleSrc(ctx, fuzz.Properties.Data) 283 fuzz.dictionary = android.PathForModuleSrc(ctx, *fuzz.Properties.Dictionary) 287 fuzz.dictionary.String()) 294 fuzz.config = configPath 314 fuzz.installedSharedDeps = append(fuzz.installedSharedDeps, 320 fuzz.installedSharedDeps = append(fuzz.installedSharedDeps, 332 fuzz := &fuzzBinary{ 336 module.compiler = fuzz 337 module.linker = fuzz [all …]
|
H A D | androidmk.go | 401 ctx.subAndroidMk(entries, fuzz.binaryDecorator) 404 for _, d := range fuzz.corpus { 406 filepath.Dir(fuzz.corpusIntermediateDir.String())+":corpus/"+d.Base()) 409 for _, d := range fuzz.data { 411 filepath.Dir(fuzz.dataIntermediateDir.String())+":data/"+d.Rel()) 414 if fuzz.dictionary != nil { 416 filepath.Dir(fuzz.dictionary.String())+":"+fuzz.dictionary.Base()) 419 if fuzz.config != nil { 421 filepath.Dir(fuzz.config.String())+":config.json") 429 if fuzz.installedSharedDeps != nil { [all …]
|
/aosp12/build/soong/rust/ |
H A D | fuzz.go | 54 fuzz := &fuzzDecorator{ 59 fuzz.binaryDecorator.baseCompiler.dir = "fuzz" 60 fuzz.binaryDecorator.baseCompiler.dir64 = "fuzz" 63 module.compiler = fuzz 64 return module, fuzz 292 if fuzz.Properties.Corpus != nil { 293 fuzz.corpus = android.PathsForModuleSrc(ctx, fuzz.Properties.Corpus) 295 if fuzz.Properties.Data != nil { 296 fuzz.data = android.PathsForModuleSrc(ctx, fuzz.Properties.Data) 298 if fuzz.Properties.Dictionary != nil { [all …]
|
H A D | androidmk.go | 204 func (fuzz *fuzzDecorator) AndroidMkEntries(ctx AndroidMkContext, entries *android.AndroidMkEntries… 205 ctx.SubAndroidMk(entries, fuzz.binaryDecorator) 208 for _, d := range fuzz.corpus { 210 filepath.Dir(fuzz.corpusIntermediateDir.String())+":corpus/"+d.Base()) 213 for _, d := range fuzz.data { 215 filepath.Dir(fuzz.dataIntermediateDir.String())+":data/"+d.Rel()) 218 if fuzz.dictionary != nil { 220 filepath.Dir(fuzz.dictionary.String())+":"+fuzz.dictionary.Base()) 223 if fuzz.config != nil { 225 filepath.Dir(fuzz.config.String())+":config.json")
|
/aosp12/system/bt/gd/hci/fuzz/ |
H A D | hci_layer_fuzz_test.cc | 30 using bluetooth::fuzz::GetArbitraryBytes; 32 using bluetooth::hal::fuzz::FuzzHciHal; 33 using bluetooth::hci::fuzz::HciLayerFuzzClient; 34 using bluetooth::os::fuzz::fake_timerfd_advance; 35 using bluetooth::os::fuzz::fake_timerfd_cap_at; 36 using bluetooth::os::fuzz::fake_timerfd_reset;
|
H A D | acl_manager_fuzz_test.cc | 30 using bluetooth::fuzz::GetArbitraryBytes; 33 using bluetooth::hci::fuzz::FuzzHciLayer; 34 using bluetooth::os::fuzz::fake_timerfd_advance; 35 using bluetooth::os::fuzz::fake_timerfd_cap_at; 36 using bluetooth::os::fuzz::fake_timerfd_reset;
|
H A D | hci_layer_fuzz_client.cc | 22 namespace fuzz { namespace 23 using bluetooth::fuzz::GetArbitraryBytes; 30 aclDevNull_ = new os::fuzz::DevNullQueue<AclView>(hci_->GetAclQueueEnd(), GetHandler()); in Start() 32 aclInject_ = new os::fuzz::FuzzInjectQueue<AclBuilder>(hci_->GetAclQueueEnd(), GetHandler()); in Start()
|
H A D | fuzz_hci_layer.cc | 22 namespace fuzz { namespace 25 using bluetooth::fuzz::GetArbitraryBytes; 26 using bluetooth::fuzz::InvokeIfValid; 70 acl_dev_null_ = new os::fuzz::DevNullQueue<AclBuilder>(acl_queue_.GetDownEnd(), GetHandler()); in Start() 72 acl_inject_ = new os::fuzz::FuzzInjectQueue<AclView>(acl_queue_.GetDownEnd(), GetHandler()); in Start()
|
H A D | hci_layer_fuzz_client.h | 32 namespace fuzz { 80 os::fuzz::DevNullQueue<AclView>* aclDevNull_; 81 os::fuzz::FuzzInjectQueue<AclBuilder>* aclInject_;
|
/aosp12/system/update_engine/update_manager/ |
H A D | next_update_check_policy_impl.cc | 113 int fuzz = 0; in NextUpdateCheckTime() local 139 fuzz = constants.timeout_regular_fuzz; in NextUpdateCheckTime() 143 if (fuzz == 0) in NextUpdateCheckTime() 144 fuzz = interval; in NextUpdateCheckTime() 147 *last_checked_time + FuzzedInterval(&prng, interval, fuzz); in NextUpdateCheckTime() 153 int fuzz) { in FuzzedInterval() argument 155 DCHECK_GE(fuzz, 0); in FuzzedInterval() 156 int half_fuzz = fuzz / 2; in FuzzedInterval()
|
/aosp12/system/nfc/src/fuzzers/ |
H A D | fuzz.sh | 17 FUZZ_DIR=data/fuzz/$(get_build_var TARGET_ARCH)/$FUZZER_NAME 63 run_once >./logs/fuzz.log 2>&1 66 CRASH=$(grep -aoP "Test unit written to \K\S+" ./logs/fuzz.log) 70 mv ./logs/fuzz.log ./logs/ERROR/run_$TS.log 80 cat ./logs/verify.log>>./logs/fuzz.log 82 cp ./logs/verify.log ./logs/fuzz.log 94 mv ./logs/fuzz.log ./logs/$SIG_DIR/run_$TS.log 147 function fuzz() { function 173 fuzz $@
|
H A D | README.md | 49 4. `fuzz.sh` helper script: 52 it easier, a `fuzz.sh` helper script is included. It needs to be run with 54 it and then use the "fuzz" function defined in it. 64 ../fuzz.sh build 74 ../fuzz.sh run --once 89 By default "fuzz run" will continue with whatever left last time. However, 92 7. Other tools provided by `fuzz.sh`: 94 Here are some extra options provided by `fuzz.sh` script: 95 * "fuzz gcov" pulls the coverage data from device, and generate a 97 * "fuzz gdb" setup gdb instance with the fuzz input so you can debug a
|
/aosp12/system/core/trusty/apploader/fuzz/ |
H A D | app_fuzzer.cpp | 31 using android::trusty::fuzz::ExtraCounters; 32 using android::trusty::fuzz::TrustyApp; 103 android::trusty::fuzz::TrustyApp ta(TIPC_DEV, APPLOADER_PORT); in LLVMFuzzerTestOneInput() 107 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput() 115 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput() 121 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput() 129 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput()
|
/aosp12/packages/modules/NeuralNetworks/runtime/test/android_fuzzing/ |
H A D | README.md | 4 fuzz tests. 8 unexpected inputs. For NNAPI fuzz testing, Android uses tests based on 27 https://source.android.com/devices/tech/debug/fuzz-sanitize 37 ## Developing an NNAPI fuzz test 41 To create a new fuzz test: 71 [Building and uploading fuzz test](#building-and-uploading-fuzz-test) describes 91 ## Building and uploading fuzz test 98 $ FUZZER_TARGET_DIR=/data/fuzz/$FUZZER_TARGET_ARCH/$FUZZER_NAME 127 * `$FUZZER_NAME` -- fuzz test binary 129 up fuzz tests [all …]
|
/aosp12/packages/services/Car/cpp/computepipe/tests/fuzz/ |
H A D | PixelMemHandleFuzzer.cpp | 35 InputFrame convertToInputFrame(const fuzz::proto::Frame frame) { in convertToInputFrame() 44 int setFrameDataTest(const fuzz::proto::PixelMemHandleFuzzerInput& input) { in setFrameDataTest() 63 bool isValid(const fuzz::proto::PixelMemHandleFuzzerInput& input) { in isValid() 86 DEFINE_PROTO_FUZZER(const fuzz::proto::PixelMemHandleFuzzerInput& input) { in DEFINE_PROTO_FUZZER() 88 [](const fuzz::proto::PixelMemHandleFuzzerInput* input, unsigned int seed) { in DEFINE_PROTO_FUZZER()
|
/aosp12/frameworks/av/media/codecs/g711/fuzzer/ |
H A D | README.md | 38 $ adb shell /data/fuzz/arm64/g711alaw_dec_fuzzer/g711alaw_dec_fuzzer CORPUS_DIR 39 $ adb shell /data/fuzz/arm64/g711mlaw_dec_fuzzer/g711mlaw_dec_fuzzer CORPUS_DIR 43 $ $ANDROID_HOST_OUT/fuzz/x86_64/g711alaw_dec_fuzzer/g711alaw_dec_fuzzer CORPUS_DIR 44 $ $ANDROID_HOST_OUT/fuzz/x86_64/g711mlaw_dec_fuzzer/g711mlaw_dec_fuzzer CORPUS_DIR 49 * https://github.com/google/oss-fuzz
|
/aosp12/system/core/trusty/confirmationui/fuzz/ |
H A D | msg_fuzzer.cpp | 30 using android::trusty::fuzz::ExtraCounters; 31 using android::trusty::fuzz::TrustyApp; 154 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput() 162 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput() 169 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput()
|
/aosp12/system/bt/gd/os/linux_generic/ |
H A D | linux.h | 25 #define TIMERFD_CREATE ::bluetooth::os::fuzz::fake_timerfd_create 26 #define TIMERFD_SETTIME ::bluetooth::os::fuzz::fake_timerfd_settime 27 #define TIMERFD_CLOSE ::bluetooth::os::fuzz::fake_timerfd_close
|
/aosp12/frameworks/native/services/inputflinger/reader/mapper/ |
H A D | JoystickInputMapper.h | 41 float highOffset, float min, float max, float flat, float fuzz, in Axis() 53 fuzz(fuzz), in Axis() 72 float fuzz; // normalized error tolerance member
|
H A D | JoystickInputMapper.cpp | 46 info->addMotionRange(axisId, AINPUT_SOURCE_JOYSTICK, axis.min, axis.max, axis.flat, axis.fuzz, in addMotionRange() 54 axis.fuzz, axis.resolution); in addMotionRange() 95 axis.min, axis.max, axis.flat, axis.fuzz, axis.resolution); in dump() 102 axis.rawAxisInfo.flat, axis.rawAxisInfo.fuzz, in dump() 198 const float fuzz = rawAxisInfo.fuzz * scale; in createAxis() local 203 const float filter = fuzz ? fuzz : flat * 0.25f; in createAxis() 205 max, flat, fuzz, resolution, filter); in createAxis()
|
H A D | SensorInputMapper.h | 45 float offset, float min, float max, float flat, float fuzz, float resolution, in Axis() 54 fuzz(fuzz), in Axis() 69 float fuzz; // normalized error tolerance member
|
/aosp12/frameworks/av/media/extractors/fuzzers/ |
H A D | README.md | 58 $ adb shell /data/fuzz/arm64/mp4_extractor_fuzzer/mp4_extractor_fuzzer CORPUS_DIR 87 $ adb shell /data/fuzz/arm64/wav_extractor_fuzzer/wav_extractor_fuzzer CORPUS_DIR 121 $ adb shell /data/fuzz/arm64/amr_extractor_fuzzer/amr_extractor_fuzzer CORPUS_DIR 155 $ adb shell /data/fuzz/arm64/mkv_extractor_fuzzer/mkv_extractor_fuzzer CORPUS_DIR 189 $ adb shell /data/fuzz/arm64/ogg_extractor_fuzzer/ogg_extractor_fuzzer CORPUS_DIR 229 $ adb shell /data/fuzz/arm64/mpeg2ps_extractor_fuzzer/mpeg2ps_extractor_fuzzer CORPUS_DIR 259 $ adb shell /data/fuzz/arm64/mp3_extractor_fuzzer/mp3_extractor_fuzzer CORPUS_DIR 288 $ adb shell /data/fuzz/arm64/aac_extractor_fuzzer/aac_extractor_fuzzer CORPUS_DIR 322 $ adb shell /data/fuzz/arm64/flac_extractor_fuzzer/flac_extractor_fuzzer CORPUS_DIR 357 $ adb shell /data/fuzz/arm64/midi_extractor_fuzzer/midi_extractor_fuzzer CORPUS_DIR [all …]
|
/aosp12/frameworks/av/media/codecs/m4v_h263/fuzzer/ |
H A D | README.md | 46 $ adb shell /data/fuzz/arm64/mpeg4_dec_fuzzer/mpeg4_dec_fuzzer CORPUS_DIR 47 $ adb shell /data/fuzz/arm64/h263_dec_fuzzer/h263_dec_fuzzer CORPUS_DIR 51 $ $ANDROID_HOST_OUT/fuzz/x86_64/mpeg4_dec_fuzzer/mpeg4_dec_fuzzer CORPUS_DIR 52 $ $ANDROID_HOST_OUT/fuzz/x86_64/h263_dec_fuzzer/h263_dec_fuzzer CORPUS_DIR 147 $ adb shell /data/fuzz/arm64/m4v_h263_enc_fuzzer/m4v_h263_enc_fuzzer CORPUS_DIR 148 $ adb shell /data/fuzz/arm64/h263_enc_fuzzer/h263_enc_fuzzer CORPUS_DIR 152 $ $ANDROID_HOST_OUT/fuzz/x86_64/mpeg4_enc_fuzzer/mpeg4_enc_fuzzer CORPUS_DIR 153 $ $ANDROID_HOST_OUT/fuzz/x86_64/h263_enc_fuzzer/h263_enc_fuzzer CORPUS_DIR 158 * https://github.com/google/oss-fuzz
|
/aosp12/system/core/trusty/fuzz/ |
H A D | tipc_fuzzer.cpp | 27 using android::trusty::fuzz::ExtraCounters; 28 using android::trusty::fuzz::TrustyApp; 92 android::trusty::fuzz::Abort(); in LLVMFuzzerTestOneInput()
|
/aosp12/system/bt/gd/hci/ |
H A D | Android.bp | 81 "fuzz/status_vs_complete_commands.cc", 82 "fuzz/hci_layer_fuzz_client.cc", 83 "fuzz/fuzz_hci_layer.cc",
|