/* * Copyright (c) 2022 Huawei Device Co., Ltd. * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include "audiointerfaceliboutputrendercmdid_fuzzer.h" #include "audio_adm_fuzzer_common.h" namespace OHOS { namespace Audio { bool AudioInterfaceliboutputrenderCmdidFuzzTest(const uint8_t *data, size_t size) { bool result = false; char resolvedPath[] = HDF_LIBRARY_FULL_PATH("libaudio_render_adapter"); void *outputRenFuzzPtrHandle = dlopen(resolvedPath, RTLD_LAZY); if (outputRenFuzzPtrHandle == nullptr) { HDF_LOGE("%{public}s: dlopen failed \n", __func__); return false; } struct DevHandle *(*BindServiceRender)(const char *) = nullptr; int32_t (*InterfaceLibOutputRender)(struct DevHandle *, int, struct AudioHwRenderParam *) = nullptr; BindServiceRender = reinterpret_cast (dlsym(outputRenFuzzPtrHandle, "AudioBindServiceRender")); if (BindServiceRender == nullptr) { HDF_LOGE("%{public}s: dlsym AudioBindServiceRender failed \n", __func__); dlclose(outputRenFuzzPtrHandle); return false; } struct DevHandle *handle = nullptr; handle = BindServiceRender(BIND_CONTROL.c_str()); if (handle == nullptr) { HDF_LOGE("%{public}s: BindServiceRender failed \n", __func__); dlclose(outputRenFuzzPtrHandle); return false; } InterfaceLibOutputRender = reinterpret_cast(dlsym(outputRenFuzzPtrHandle, "AudioInterfaceLibOutputRender")); if (InterfaceLibOutputRender == nullptr) { HDF_LOGE("%{public}s: dlsym AudioInterfaceLibOutputRender failed \n", __func__); dlclose(outputRenFuzzPtrHandle); return false; } struct AudioHwRender *hwRender = nullptr; int32_t ret = BindServiceAndHwRender(hwRender); int32_t cmdId = *(reinterpret_cast(const_cast(data))); InterfaceLibOutputRender(handle, cmdId, &hwRender->renderParam); if (ret == HDF_SUCCESS) { result = true; } free(hwRender); void (*CloseService)(const struct DevHandle *) = nullptr; CloseService = reinterpret_cast(dlsym(outputRenFuzzPtrHandle, "AudioCloseServiceRender")); if (CloseService == nullptr) { HDF_LOGE("%{public}s: dlsym AudioCloseServiceRender failed \n", __func__); dlclose(outputRenFuzzPtrHandle); return false; } CloseService(handle); dlclose(outputRenFuzzPtrHandle); return result; } } } extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { OHOS::Audio::AudioInterfaceliboutputrenderCmdidFuzzTest(data, size); return 0; }