* Copyright (c) 2024 Huawei Device Co., Ltd.
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include "rstransactionipc_fuzzer.h"
#include <cstddef>
#include <cstdint>
#include <securec.h>
#include "platform/ohos/rs_irender_service_connection_ipc_interface_code_access_verifier.h"
#include "transaction/rs_render_service_connection_stub.h"
namespace OHOS {
namespace Rosen {
namespace {
const uint8_t* DATA = nullptr;
size_t g_size = 0;
size_t g_pos;
}
template<class T>
T GetData()
{
T object {};
size_t objectSize = sizeof(object);
if (DATA == nullptr || objectSize > g_size - g_pos) {
return object;
}
errno_t ret = memcpy_s(&object, objectSize, DATA + g_pos, objectSize);
if (ret != EOK) {
return {};
}
g_pos += objectSize;
return object;
}
bool RSITransactionIpcInterFaceCodeAccessVerifierFuzztest001(const uint8_t* data, size_t size)
{
if (data == nullptr) {
return false;
}
DATA = data;
g_size = size;
g_pos = 0;
uint32_t code = GetData<uint32_t>();
RSIRenderServiceConnectionInterfaceCodeAccessVerifier verifier;
verifier.IsExclusiveVerificationPassed(code);
#ifdef ENABLE_IPC_SECURITY
uint32_t times = GetData<uint32_t>();
verifier.AddRSIRenderServiceConnectionInterfaceCodePermission();
verifier.IsAccessTimesVerificationPassed(code, times);
#endif
return true;
}
bool RSITransactionIpcInterFaceCodeAccessVerifierFuzztest002(const uint8_t* data, size_t size)
{
if (data == nullptr) {
return false;
}
DATA = data;
g_size = size;
g_pos = 0;
RSIRenderServiceConnectionInterfaceCodeAccessVerifier verifier;
uint32_t code = static_cast<CodeUnderlyingType>(
RSIRenderServiceConnectionInterfaceCodeAccessVerifier::CodeEnumType::SET_REFRESH_RATE_MODE);
verifier.IsExclusiveVerificationPassed(code);
code = static_cast<CodeUnderlyingType>(
RSIRenderServiceConnectionInterfaceCodeAccessVerifier::CodeEnumType::GET_SHOW_REFRESH_RATE_ENABLED);
verifier.IsExclusiveVerificationPassed(code);
code = static_cast<CodeUnderlyingType>(
RSIRenderServiceConnectionInterfaceCodeAccessVerifier::CodeEnumType::SET_SHOW_REFRESH_RATE_ENABLED);
verifier.IsExclusiveVerificationPassed(code);
code = static_cast<CodeUnderlyingType>(
RSIRenderServiceConnectionInterfaceCodeAccessVerifier::CodeEnumType::TAKE_SURFACE_CAPTURE);
verifier.IsExclusiveVerificationPassed(code);
code = static_cast<CodeUnderlyingType>(
RSIRenderServiceConnectionInterfaceCodeAccessVerifier::CodeEnumType::GET_MEMORY_GRAPHICS);
verifier.IsExclusiveVerificationPassed(code);
code = static_cast<CodeUnderlyingType>(
RSIRenderServiceConnectionInterfaceCodeAccessVerifier::CodeEnumType::SET_SCREEN_POWER_STATUS);
verifier.IsExclusiveVerificationPassed(code);
#ifdef ENABLE_IPC_SECURITY
uint32_t times = GetData<uint32_t>();
PermissionType permission = PermissionType::CAPTURE_SCREEN;
verifier.permissionRSIRenderServiceInterfaceMappings_.emplace(code, permission);
verifier.permissionRSIRenderServiceInterfaceMappings_.emplace(code + 1, "unknown");
verifier.AddRSIRenderServiceConnectionInterfaceCodePermission();
verifier.accessRSIRenderServiceInterfaceTimesRestrictions_.emplace(code, code);
verifier.IsAccessTimesVerificationPassed(code, times);
#endif
return true;
}
}
}
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
{
OHOS::Rosen::RSITransactionIpcInterFaceCodeAccessVerifierFuzztest001(data, size);
OHOS::Rosen::RSITransactionIpcInterFaceCodeAccessVerifierFuzztest002(data, size);
return 0;
}