1 /*
2 * Copyright (c) 2022 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15 #include "hksfinish_fuzzer.h"
16
17 #include <securec.h>
18
19 #include "hks_api.h"
20 #include "hks_mem.h"
21 #include "hks_param.h"
22 #include "hks_type.h"
23
24 #include "hks_fuzz_util.h"
25
26 namespace OHOS {
27 namespace Security {
28 namespace Hks {
29
DoSomethingInterestingWithMyAPI(uint8_t * data,size_t size)30 int DoSomethingInterestingWithMyAPI(uint8_t *data, size_t size)
31 {
32 if (data == nullptr || size <= (sizeof(uint64_t) + sizeof(uint32_t))) {
33 return -1;
34 }
35
36 struct HksBlob handle = { sizeof(uint64_t), ReadData<uint8_t *>(data, size, sizeof(uint64_t)) };
37 uint32_t inDataSize = *ReadData<uint32_t *>(data, size, sizeof(uint32_t));
38 if (size < inDataSize) {
39 return -1;
40 }
41 struct HksBlob inData = { inDataSize, ReadData<uint8_t *>(data, size, inDataSize) };
42 std::vector<uint8_t> outDataBuffer(inDataSize);
43 struct HksBlob outData = { outDataBuffer.size(), outDataBuffer.data() };
44
45 WrapParamSet ps = ConstructHksParamSetFromFuzz(data, size);
46
47 [[maybe_unused]] int ret = HksFinish(&handle, ps.s, &inData, &outData);
48
49 return 0;
50 }
51 }}}
52
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)53 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
54 {
55 std::vector<uint8_t> v(data, data + size);
56 return OHOS::Security::Hks::DoSomethingInterestingWithMyAPI(v.data(), v.size());
57 }
58