1 /*
2  * Copyright (c) 2022-2023 Huawei Device Co., Ltd.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at
6  *
7  *     http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 
16 #include "cmfinish_fuzzer.h"
17 
18 #include "cert_manager_api.h"
19 #include "cm_fuzz_test_common.h"
20 #include "cm_test_common.h"
21 
22 using namespace CmFuzzTest;
23 namespace OHOS {
24     static const uint32_t CM_FINISH_BLOB_NUM = 3;
25 
DoSomethingInterestingWithMyAPI(const uint8_t * data,size_t size)26     bool DoSomethingInterestingWithMyAPI(const uint8_t* data, size_t size)
27     {
28         uint32_t minSize = CM_FINISH_BLOB_NUM * sizeof(struct CmBlob);
29         uint8_t *myData = nullptr;
30         if (!CopyMyData(data, size, minSize, &myData)) {
31             return false;
32         }
33 
34         uint32_t remainSize = static_cast<uint32_t>(size);
35         uint32_t offset = 0;
36 
37         struct CmBlob fiHandle = { 0, nullptr };
38         if (!GetCmBlobFromBuffer(myData, &remainSize, &offset, &fiHandle)) {
39             CmFree(myData);
40             return false;
41         }
42 
43         struct CmBlob inData = { 0, nullptr };
44         if (!GetCmBlobFromBuffer(myData, &remainSize, &offset, &inData)) {
45             CmFree(myData);
46             return false;
47         }
48 
49         struct CmBlob outData = { 0, nullptr };
50         if (!GetCmBlobFromBuffer(myData, &remainSize, &offset, &outData)) {
51             CmFree(myData);
52             return false;
53         }
54 
55         CertmanagerTest::SetATPermission();
56         (void)CmFinish(&fiHandle, &inData, &outData);
57 
58         CmFree(myData);
59         return true;
60     }
61 }
62 
63 
64 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)65 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
66 {
67     /* Run your code on data */
68     OHOS::DoSomethingInterestingWithMyAPI(data, size);
69     return 0;
70 }
71 
72