1 /*
2  * Copyright (c) 2022 Huawei Device Co., Ltd.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at
6  *
7  *     http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 
16 #include "event_queue.h"
17 #include "event_queue_base.h"
18 #include "eventqueue_fuzzer.h"
19 #include "securec.h"
20 
21 namespace OHOS {
22 namespace {
23     constexpr size_t U32_AT_SIZE = 4;
24 }
25 
26 class DumperTest : public AppExecFwk::Dumper {
27 public:
28     DumperTest() = default;
~DumperTest()29     virtual ~DumperTest()
30     {};
Dump(const std::string & message)31     void Dump(const std::string &message) override
32     {}
GetTag()33     std::string GetTag() override
34     {
35         return {};
36     }
37 };
38 
DoSomethingInterestingWithMyAPI(const char * data,size_t size)39 bool DoSomethingInterestingWithMyAPI(const char* data, size_t size)
40 {
41     AppExecFwk::InnerEvent::TimePoint nextExpiredTime = AppExecFwk::InnerEvent::TimePoint::max();
42     DumperTest dumper;
43     std::string stringData(data);
44     std::shared_ptr<AppExecFwk::IoWaiter> ioWaiter = nullptr;
45     AppExecFwk::EventQueueBase eventQueue(ioWaiter);
46     eventQueue.GetExpiredEvent(nextExpiredTime);
47     eventQueue.Dump(dumper);
48     eventQueue.DumpQueueInfo(stringData);
49     eventQueue.IsQueueEmpty();
50     return true;
51 }
52 }
53 
54 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)55 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
56 {
57     /* Run your code on data */
58     if (data == nullptr) {
59         return 0;
60     }
61 
62     if (size < OHOS::U32_AT_SIZE) {
63         return 0;
64     }
65 
66     char* ch = (char *)malloc(size + 1);
67     if (ch == nullptr) {
68         return 0;
69     }
70 
71     (void)memset_s(ch, size + 1, 0x00, size + 1);
72     if (memcpy_s(ch, size, data, size) != EOK) {
73         free(ch);
74         ch = nullptr;
75         return 0;
76     }
77 
78     OHOS::DoSomethingInterestingWithMyAPI(ch, size);
79     free(ch);
80     ch = nullptr;
81     return 0;
82 }
83