/* * Copyright (c) 2022-2023 Huawei Device Co., Ltd. * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "splitmessage_fuzzer.h" #define private public #include "addsmstoken_fuzzer.h" #include "cdma_sms_message.h" #include "core_manager_inner.h" #include "sms_service.h" using namespace OHOS::Telephony; namespace OHOS { static bool g_isInited = false; static int32_t SLOT_NUM = 2; bool IsServiceInited() { if (!g_isInited) { CoreManagerInner::GetInstance().isInitAllObj_ = true; DelayedSingleton::GetInstance()->registerToService_ = true; DelayedSingleton::GetInstance()->WaitCoreServiceToInit(); DelayedSingleton::GetInstance()->OnStart(); if (DelayedSingleton::GetInstance()->GetServiceRunningState() == static_cast(Telephony::ServiceRunningState::STATE_RUNNING)) { g_isInited = true; } } return g_isInited; } void SplitMessage(const uint8_t *data, size_t size) { MessageParcel dataParcel; MessageParcel replyParcel; MessageOption option(MessageOption::TF_SYNC); std::string message(reinterpret_cast(data), size); auto messageU16 = Str8ToStr16(message); dataParcel.WriteString16(messageU16); dataParcel.RewindRead(0); DelayedSingleton::GetInstance()->OnSplitMessage(dataParcel, replyParcel, option); int32_t slotId = static_cast(size % SLOT_NUM); std::shared_ptr interfaceManager = std::make_shared(slotId); if (interfaceManager == nullptr) { TELEPHONY_LOGE("interfaceManager nullptr error"); return; } interfaceManager->InitInterfaceManager(); std::string messageData(reinterpret_cast(data), size); std::vector splitMessage; interfaceManager->SplitMessage(messageData, splitMessage); auto smsSendManager = std::make_unique(slotId); if (smsSendManager == nullptr) { TELEPHONY_LOGE("failed to create SmsSendManager"); return; } smsSendManager->Init(); smsSendManager->InitNetworkHandle(); smsSendManager->SplitMessage(messageData, splitMessage); DataCodingScheme codingType; std::vector cellsInfos; GsmSmsMessage gsmSmsMessage; gsmSmsMessage.SplitMessage(cellsInfos, messageData, false, codingType, false, ""); CdmaSmsMessage cdmaSmsMessage; cdmaSmsMessage.SplitMessage(cellsInfos, messageData, false, codingType, false, ""); } void GetImsShortMessageFormat(const uint8_t *data, size_t size) { MessageParcel dataParcel; MessageParcel replyParcel; MessageOption option(MessageOption::TF_SYNC); dataParcel.WriteBuffer(data, size); dataParcel.RewindRead(0); DelayedSingleton::GetInstance()->OnGetImsShortMessageFormat(dataParcel, replyParcel, option); int32_t slotId = static_cast(size % SLOT_NUM); std::shared_ptr interfaceManager = std::make_shared(slotId); if (interfaceManager == nullptr) { TELEPHONY_LOGE("interfaceManager nullptr error"); return; } std::u16string format; interfaceManager->InitInterfaceManager(); interfaceManager->GetImsShortMessageFormat(format); auto smsSendManager = std::make_unique(slotId); if (smsSendManager == nullptr) { TELEPHONY_LOGE("failed to create SmsSendManager"); return; } smsSendManager->Init(); smsSendManager->InitNetworkHandle(); smsSendManager->GetImsShortMessageFormat(format); } void DoSomethingInterestingWithMyAPI(const uint8_t *data, size_t size) { if (data == nullptr || size == 0) { return; } if (!IsServiceInited()) { return; } SplitMessage(data, size); GetImsShortMessageFormat(data, size); DelayedSingleton::DestroyInstance(); } } // namespace OHOS /* Fuzzer entry point */ extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { /* Run your code on data */ OHOS::AddSmsTokenFuzzer token; OHOS::DoSomethingInterestingWithMyAPI(data, size); return 0; }