Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 51ce9101 authored by Pawan Wagh's avatar Pawan Wagh
Browse files

Adding a AIDL service fuzzer for ResourceObserverService

Test: m resourcemanager_service_fuzzer && adb sync data &&
adb shell /data/fuzz/arm64/resourcemanager_service_fuzzer/resourcemanager_service_fuzzer
Bug: 232439428

Change-Id: I3a6c5e59c99efcc8b0979b1bbea86842d84ddb46
parent 5f52b1b9
Loading
Loading
Loading
Loading
+17 −1
Original line number Diff line number Diff line
@@ -71,3 +71,19 @@ cc_fuzz {
        "resourcemanager_service_fuzzer.cpp",
    ],
}

cc_fuzz {
    name: "resourceobserver_service_fuzzer",
    defaults: [
        "mediaresourcemanager_fuzzer_defaults",
    ],
    static_libs: [
        "resourceobserver_aidl_interface-V1-ndk",
    ],
    srcs: [
        "resourceobserver_service_fuzzer.cpp",
    ],
    fuzz_config: {
        triage_assignee: "waghpawan@google.com",
    },
}
+32 −0
Original line number Diff line number Diff line
/*
 * Copyright 2023 The Android Open Source Project
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#include <android/binder_interface_utils.h>

#include <fuzzbinder/libbinder_ndk_driver.h>
#include <fuzzer/FuzzedDataProvider.h>

#include "ResourceObserverService.h"

using android::fuzzService;
using android::ResourceObserverService;
using ndk::SharedRefBase;

extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
   auto service = SharedRefBase::make<ResourceObserverService>();
   fuzzService(service->asBinder().get(), FuzzedDataProvider(data, size));
   return 0;
}