1 /*
2  * Copyright (c) 2023 Huawei Device Co., Ltd.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at
6  *
7  *     http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 
16 #include "registerpermstatechangecallbackstub_fuzzer.h"
17 
18 #include <string>
19 #include <thread>
20 #include <vector>
21 #undef private
22 #include "accesstoken_fuzzdata.h"
23 #include "accesstoken_manager_client.h"
24 #include "accesstoken_manager_service.h"
25 #include "i_accesstoken_manager.h"
26 
27 using namespace std;
28 using namespace OHOS::Security::AccessToken;
29 
30 class CbCustomizeTest2 : public PermStateChangeCallbackCustomize {
31 public:
CbCustomizeTest2(const PermStateChangeScope & scopeInfo)32     explicit CbCustomizeTest2(const PermStateChangeScope &scopeInfo)
33         : PermStateChangeCallbackCustomize(scopeInfo)
34     {
35     }
36 
~CbCustomizeTest2()37     ~CbCustomizeTest2()
38     {}
39 
PermStateChangeCallback(PermStateChangeInfo & result)40     virtual void PermStateChangeCallback(PermStateChangeInfo& result)
41     {
42         ready_ = true;
43     }
44 
45     bool ready_ = false;
46 };
47 
48 namespace OHOS {
RegisterPermStateChangeCallbackStubFuzzTest(const uint8_t * data,size_t size)49     bool RegisterPermStateChangeCallbackStubFuzzTest(const uint8_t* data, size_t size)
50     {
51         if ((data == nullptr) || (size == 0)) {
52             return false;
53         }
54 
55         AccessTokenFuzzData fuzzData(data, size);
56         AccessTokenID tokenId = fuzzData.GetData<AccessTokenID>();
57         std::string testName(fuzzData.GenerateRandomString());
58 
59         PermStateChangeScope scopeInfo;
60         scopeInfo.permList = { testName };
61         scopeInfo.tokenIDs = { tokenId };
62         auto callbackPtr = std::make_shared<CbCustomizeTest2>(scopeInfo);
63 
64         PermStateChangeScopeParcel scopeParcel;
65         scopeParcel.scope = scopeInfo;
66 
67         sptr<PermissionStateChangeCallback> callback;
68         callback = new (std::nothrow) PermissionStateChangeCallback(callbackPtr);
69 
70         MessageParcel datas;
71         datas.WriteInterfaceToken(IAccessTokenManager::GetDescriptor());
72         if (!datas.WriteParcelable(&scopeParcel)) {
73                 return false;
74             }
75             if (!datas.WriteRemoteObject(callback->AsObject())) {
76                 return false;
77             }
78 
79         uint32_t code = static_cast<uint32_t>(
80             AccessTokenInterfaceCode::REGISTER_PERM_STATE_CHANGE_CALLBACK);
81 
82         MessageParcel reply;
83         MessageOption option;
84         DelayedSingleton<AccessTokenManagerService>::GetInstance()->OnRemoteRequest(code, datas, reply, option);
85 
86         return true;
87     }
88 } // namespace OHOS
89 
90 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)91 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
92 {
93     /* Run your code on data */
94     OHOS::RegisterPermStateChangeCallbackStubFuzzTest(data, size);
95     return 0;
96 }
97