1 /*
2  * Copyright (c) 2022-2023 Huawei Device Co., Ltd.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at
6  *
7  *     http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 
16 #include "cmsetcertstatus_fuzzer.h"
17 
18 #include "cert_manager_api.h"
19 #include "cm_fuzz_test_common.h"
20 #include "cm_test_common.h"
21 
22 using namespace CmFuzzTest;
23 namespace OHOS {
DoSomethingInterestingWithMyAPI(const uint8_t * data,size_t size)24     bool DoSomethingInterestingWithMyAPI(const uint8_t* data, size_t size)
25     {
26         uint32_t minSize = sizeof(struct CmBlob) + sizeof(uint32_t) + sizeof(bool);
27         uint8_t *myData = nullptr;
28         if (!CopyMyData(data, size, minSize, &myData)) {
29             return false;
30         }
31 
32         uint32_t remainSize = static_cast<uint32_t>(size);
33         uint32_t offset = 0;
34 
35         struct CmBlob sysCertUri = { 0, nullptr };
36         if (!GetCmBlobFromBuffer(myData, &remainSize, &offset, &sysCertUri)) {
37             CmFree(myData);
38             return false;
39         }
40 
41         uint32_t store;
42         if (!GetUintFromBuffer(myData, &remainSize, &offset, &store)) {
43             CmFree(myData);
44             return false;
45         }
46 
47         if (remainSize < sizeof(bool)) {
48             CmFree(myData);
49             return false;
50         }
51         bool status;
52         (void)memcpy_s(&status, sizeof(bool), myData + offset, sizeof(bool));
53 
54         CertmanagerTest::SetATPermission();
55         (void)CmSetCertStatus(&sysCertUri, store, status);
56         CmFree(myData);
57         return true;
58     }
59 }
60 
61 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)62 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
63 {
64     /* Run your code on data */
65     OHOS::DoSomethingInterestingWithMyAPI(data, size);
66     return 0;
67 }
68