1 /*
2 * Copyright (c) 2022 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "runextracommand_fuzzer.h"
17 #include <securec.h>
18 #include "hdf_base.h"
19 #include "hdf_log.h"
20 #include "input_manager.h"
21
22 namespace OHOS {
RunExtraCommandFuzzTest(const uint8_t * data,size_t size)23 bool RunExtraCommandFuzzTest(const uint8_t* data, size_t size)
24 {
25 bool result = false;
26 int32_t ret;
27 const int MAX_DEVICES = 32;
28 InputDevDesc sta[MAX_DEVICES];
29 InputExtraCmd extraCmd = {0};
30 extraCmd.cmdCode = "WakeUpMode";
31 extraCmd.cmdValue = "Enable";
32 IInputInterface *g_inputInterface = nullptr;
33
34 (void)memset_s(sta, MAX_DEVICES * sizeof(InputDevDesc), 0, MAX_DEVICES * sizeof(InputDevDesc));
35 ret = GetInputInterface(&g_inputInterface);
36 if (ret != INPUT_SUCCESS) {
37 HDF_LOGE("%s: get input hdi failed, ret %d", __func__, ret);
38 }
39
40 ret = g_inputInterface->iInputManager->ScanInputDevice(sta, MAX_DEVICES);
41 if (ret) {
42 HDF_LOGE("%s: scan device failed, ret %d", __func__, ret);
43 }
44 for (int32_t i = 0; i < MAX_DEVICES; i++) {
45 if (sta[i].devIndex == 0) {
46 break;
47 }
48
49 ret = g_inputInterface->iInputManager->OpenInputDevice(sta[i].devIndex);
50 if (ret != INPUT_SUCCESS) {
51 HDF_LOGE("%s: open input device failed, ret %d", __func__, ret);
52 }
53 }
54
55 ret = g_inputInterface->iInputController->RunExtraCommand(*(uint32_t *)data, &extraCmd);
56 if (ret == INPUT_SUCCESS) {
57 result = true;
58 }
59
60 for (int32_t i = 0; i < MAX_DEVICES; i++) {
61 if (sta[i].devIndex == 0) {
62 break;
63 }
64
65 ret = g_inputInterface->iInputManager->CloseInputDevice(sta[i].devIndex);
66 if (ret != INPUT_SUCCESS) {
67 HDF_LOGE("%s: close input device failed, ret %d", __func__, ret);
68 }
69 }
70
71 ReleaseInputInterface(g_inputInterface);
72 return result;
73 }
74 }
75
76 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)77 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
78 {
79 if (data == nullptr) {
80 return 0;
81 }
82 if (size < sizeof(uint32_t)) {
83 return 0;
84 }
85 OHOS::RunExtraCommandFuzzTest(data, size);
86 return 0;
87 }
88
89