1 /*
2 * Copyright (c) 2022-2024 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "setgetsmsc_fuzzer.h"
17
18 #ifdef GTEST_API_
19 #define private public
20 #endif
21
22 #include "addsmstoken_fuzzer.h"
23 #include "core_manager_inner.h"
24 #include "sms_service.h"
25
26 using namespace OHOS::Telephony;
27 namespace OHOS {
28 static bool g_isInited = false;
29 static int32_t SIM_COUNT = 2;
30
IsServiceInited()31 bool IsServiceInited()
32 {
33 if (!g_isInited) {
34 CoreManagerInner::GetInstance().isInitAllObj_ = true;
35 DelayedSingleton<SmsService>::GetInstance()->registerToService_ = true;
36 DelayedSingleton<SmsService>::GetInstance()->WaitCoreServiceToInit();
37 DelayedSingleton<SmsService>::GetInstance()->OnStart();
38 if (DelayedSingleton<SmsService>::GetInstance()->GetServiceRunningState() ==
39 static_cast<int32_t>(Telephony::ServiceRunningState::STATE_RUNNING)) {
40 g_isInited = true;
41 }
42 }
43 return g_isInited;
44 }
45
SetSmscFuzz(const uint8_t * data,size_t size)46 void SetSmscFuzz(const uint8_t *data, size_t size)
47 {
48 if (!IsServiceInited()) {
49 return;
50 }
51
52 MessageParcel dataParcel;
53 MessageParcel replyParcel;
54 MessageOption option(MessageOption::TF_SYNC);
55
56 int32_t slotId = static_cast<int32_t>(size % SIM_COUNT);
57 std::string smsc(reinterpret_cast<const char *>(data), size);
58 auto smscU16 = Str8ToStr16(smsc);
59
60 dataParcel.WriteInt32(slotId);
61 dataParcel.WriteString16(smscU16);
62 dataParcel.WriteBuffer(data, size);
63 dataParcel.RewindRead(0);
64 DelayedSingleton<SmsService>::GetInstance()->OnSetSmscAddr(dataParcel, replyParcel, option);
65
66 std::shared_ptr<SmsInterfaceManager> interfaceManager = std::make_shared<SmsInterfaceManager>(slotId);
67 if (interfaceManager == nullptr) {
68 TELEPHONY_LOGE("interfaceManager nullptr error");
69 return;
70 }
71 interfaceManager->InitInterfaceManager();
72 interfaceManager->SetSmscAddr(smsc);
73 }
74
GetSmscFuzz(const uint8_t * data,size_t size)75 void GetSmscFuzz(const uint8_t *data, size_t size)
76 {
77 if (!IsServiceInited()) {
78 return;
79 }
80 MessageParcel dataParcel;
81 MessageParcel replyParcel;
82 MessageOption option(MessageOption::TF_SYNC);
83
84 int32_t slotId = static_cast<int32_t>(size % SIM_COUNT);
85 dataParcel.WriteInt32(slotId);
86 dataParcel.WriteBuffer(data, size);
87 dataParcel.RewindRead(0);
88 DelayedSingleton<SmsService>::GetInstance()->OnGetSmscAddr(dataParcel, replyParcel, option);
89
90 std::shared_ptr<SmsInterfaceManager> interfaceManager = std::make_shared<SmsInterfaceManager>(slotId);
91 if (interfaceManager == nullptr) {
92 TELEPHONY_LOGE("interfaceManager nullptr error");
93 return;
94 }
95 std::u16string smscAddress;
96 interfaceManager->InitInterfaceManager();
97 interfaceManager->GetSmscAddr(smscAddress);
98 }
99
DoSetGetSmscMyAPI(const uint8_t * data,size_t size)100 void DoSetGetSmscMyAPI(const uint8_t *data, size_t size)
101 {
102 if (data == nullptr || size == 0) {
103 return;
104 }
105 SetSmscFuzz(data, size);
106 GetSmscFuzz(data, size);
107 DelayedSingleton<SmsService>::DestroyInstance();
108 }
109 } // namespace OHOS
110
111 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)112 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
113 {
114 /* Run your code on data */
115 OHOS::AddSmsTokenFuzzer token;
116 OHOS::DoSetGetSmscMyAPI(data, size);
117 return 0;
118 }
119