1 /*
2  * Copyright (c) 2022-2024 Huawei Device Co., Ltd.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at
6  *
7  *     http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 
16 #include <cstddef>
17 #include <cstdint>
18 #include <string>
19 #include <unistd.h>
20 
21 #include "device_manager_impl.h"
22 #include "device_manager.h"
23 #include "device_manager_callback.h"
24 #include "device_discovery_fuzzer.h"
25 
26 namespace OHOS {
27 namespace DistributedHardware {
28 namespace {
29     constexpr uint32_t SLEEP_TIME_US = 10 * 1000;
30 }
31 
32 class DeviceDiscoveryCallbackTest : public DiscoveryCallback {
33 public:
DeviceDiscoveryCallbackTest()34     DeviceDiscoveryCallbackTest() : DiscoveryCallback() {}
~DeviceDiscoveryCallbackTest()35     virtual ~DeviceDiscoveryCallbackTest() {}
OnDiscoverySuccess(uint16_t subscribeId)36     void OnDiscoverySuccess(uint16_t subscribeId) override {}
OnDiscoveryFailed(uint16_t subscribeId,int32_t failedReason)37     void OnDiscoveryFailed(uint16_t subscribeId, int32_t failedReason) override {}
OnDeviceFound(uint16_t subscribeId,const DmDeviceInfo & deviceInfo)38     void OnDeviceFound(uint16_t subscribeId, const DmDeviceInfo &deviceInfo) override {}
39 };
40 
DeviceDiscoveryFuzzTest(const uint8_t * data,size_t size)41 void DeviceDiscoveryFuzzTest(const uint8_t* data, size_t size)
42 {
43     if ((data == nullptr) || (size < sizeof(uint16_t))) {
44         return;
45     }
46     std::string bundleName(reinterpret_cast<const char*>(data), size);
47     uint16_t subscriptionId = 22;
48 
49     DmSubscribeInfo subInfo;
50     subInfo.subscribeId = *(reinterpret_cast<const uint16_t*>(data));
51     subInfo.mode = DM_DISCOVER_MODE_ACTIVE;
52     subInfo.medium = DM_USB;
53     subInfo.isSameAccount = true;
54     subInfo.isWakeRemote = true;
55     if (strncpy_s(subInfo.capability, DM_MAX_DEVICE_CAPABILITY_LEN, "111", DM_MAX_DEVICE_CAPABILITY_LEN) != 0) {
56         return;
57     }
58     std::string extra(reinterpret_cast<const char*>(data), size);
59 
60     std::shared_ptr<DiscoveryCallback> callback = std::make_shared<DeviceDiscoveryCallbackTest>();
61     bundleName = "111";
62     subInfo.subscribeId = subscriptionId;
63     DeviceManager::GetInstance().StartDeviceDiscovery(bundleName, subInfo, extra, callback);
64     usleep(SLEEP_TIME_US);
65     DeviceManager::GetInstance().StopDeviceDiscovery(bundleName, subInfo.subscribeId);
66     usleep(SLEEP_TIME_US);
67     uint16_t subscribeId = *(reinterpret_cast<const uint16_t*>(data));
68     DeviceManager::GetInstance().StartDeviceDiscovery(bundleName, subscribeId, extra, callback);
69     usleep(SLEEP_TIME_US);
70     DeviceManager::GetInstance().StopDeviceDiscovery(bundleName, subscribeId);
71     DeviceManager::GetInstance().CheckAPIAccessPermission();
72     DeviceManager::GetInstance().CheckNewAPIAccessPermission();
73 }
74 }
75 }
76 
77 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)78 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
79 {
80     /* Run your code on data */
81     OHOS::DistributedHardware::DeviceDiscoveryFuzzTest(data, size);
82     return 0;
83 }
84