* Copyright (c) 2026 Huawei Device Co., Ltd.
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include "appspawnclient_sendmsg_fuzzer.h"
#include <string>
#include "appspawn.h"
#include "fuzzer/FuzzedDataProvider.h"
namespace OHOS {
int FuzzAppSpawnClientSendMsg(const uint8_t *data, size_t size)
{
const char *name = APPSPAWN_SERVER_NAME;
AppSpawnClientHandle handle = nullptr;
if (AppSpawnClientInit(name, &handle) != 0) {
return -1;
}
AppSpawnReqMsgHandle reqHandle = nullptr;
FuzzedDataProvider provider(data, size);
AppSpawnResult appResult = {provider.ConsumeIntegral<int>(), 0};
int type = provider.ConsumeIntegralInRange<int>(static_cast<int>(MSG_APP_SPAWN),
static_cast<int>(MAX_TYPE_INVALID));
AppSpawnMsgType msgType = static_cast<AppSpawnMsgType>(type);
std::string processName(reinterpret_cast<const char*>(data), size);
(void)AppSpawnReqMsgCreate(msgType, processName.c_str(), &reqHandle);
(void)AppSpawnClientSendMsg(handle, reqHandle, &appResult);
return AppSpawnClientDestroy(handle);
}
}
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
{
OHOS::FuzzAppSpawnClientSendMsg(data, size);
return 0;
}