1 /*
2  * Copyright (c) 2024 Huawei Device Co., Ltd.
3  * Licensed under the Apache License, Version 2.0 (the "License");
4  * you may not use this file except in compliance with the License.
5  * You may obtain a copy of the License at
6  *
7  *     http://www.apache.org/licenses/LICENSE-2.0
8  *
9  * Unless required by applicable law or agreed to in writing, software
10  * distributed under the License is distributed on an "AS IS" BASIS,
11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12  * See the License for the specific language governing permissions and
13  * limitations under the License.
14  */
15 
16 #include <cstddef>
17 #include <cstdint>
18 #include <parcel.h>
19 #include <securec.h>
20 
21 #include <iremote_stub.h>
22 #include "message_option.h"
23 #include "message_parcel.h"
24 #include "marshalling_helper.h"
25 #include "session/container/include/zidl/window_event_ipc_interface_code.h"
26 #include "session/container/include/window_event_channel.h"
27 #include "windoweventchstubkeyevent_fuzzer.h"
28 
29 using namespace OHOS::Rosen;
30 
31 namespace OHOS {
32 namespace {
33 constexpr size_t DATA_MIN_SIZE = 2;
34 }
35 
DoSomethingInterestingWithMyAPI(const uint8_t * data,size_t size)36 bool DoSomethingInterestingWithMyAPI(const uint8_t* data, size_t size)
37 {
38     if (data == nullptr || size < DATA_MIN_SIZE) {
39         return false;
40     }
41 
42     MessageParcel parcel;
43     MessageParcel reply;
44     MessageOption option;
45 
46     parcel.WriteInterfaceToken(WindowEventChannelStub::GetDescriptor());
47     parcel.WriteBuffer(data, size);
48 
49     sptr<WindowEventChannel> eventStub = new (std::nothrow) WindowEventChannel(nullptr);
50     if (eventStub == nullptr) {
51         return false;
52     }
53     parcel.RewindRead(0);
54     eventStub->OnRemoteRequest(
55         static_cast<uint32_t>(Rosen::WindowEventInterfaceCode::TRANS_ID_TRANSFER_KEY_EVENT),
56         parcel, reply, option);
57     parcel.RewindRead(0);
58     eventStub->OnRemoteRequest(
59         static_cast<uint32_t>(Rosen::WindowEventInterfaceCode::TRANS_ID_TRANSFER_KEY_EVENT_ASYNC),
60         parcel, reply, option);
61     parcel.RewindRead(0);
62     eventStub->OnRemoteRequest(
63         static_cast<uint32_t>(Rosen::WindowEventInterfaceCode::TRANS_ID_TRANSFER_ACCESSIBILITY_HOVER_EVENT),
64         parcel, reply, option);
65     parcel.RewindRead(0);
66     eventStub->OnRemoteRequest(
67         static_cast<uint32_t>(Rosen::WindowEventInterfaceCode::TRANS_ID_TRANSFER_ACCESSIBILITY_CHILD_TREE_REGISTER),
68         parcel, reply, option);
69     parcel.RewindRead(0);
70     eventStub->OnRemoteRequest(
71         static_cast<uint32_t>(Rosen::WindowEventInterfaceCode::TRANS_ID_TRANSFER_ACCESSIBILITY_CHILD_TREE_UNREGISTER),
72         parcel, reply, option);
73     parcel.RewindRead(0);
74     eventStub->OnRemoteRequest(
75         static_cast<uint32_t>(Rosen::WindowEventInterfaceCode::TRANS_ID_TRANSFER_ACCESSIBILITY_DUMP_CHILD_INFO),
76         parcel, reply, option);
77     parcel.RewindRead(0);
78     eventStub->OnRemoteRequest(
79         static_cast<uint32_t>(Rosen::WindowEventInterfaceCode::TRANS_ID_TRANSFER_ACCESSIBILITY_CHILD_TREE_REGISTER),
80         parcel, reply, option);
81     parcel.RewindRead(0);
82     eventStub->OnRemoteRequest(
83         static_cast<uint32_t>(Rosen::WindowEventInterfaceCode::TRANS_ID_TRANSFER_ACCESSIBILITY_DUMP_CHILD_INFO),
84         parcel, reply, option);
85     return true;
86 }
87 } // namespace.OHOS
88 
89 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)90 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
91 {
92     /* Run your code on data */
93     OHOS::DoSomethingInterestingWithMyAPI(data, size);
94     return 0;
95 }