Loading libs/binder/tests/parcel_fuzzer/libbinder_driver.cpp +6 −0 Original line number Diff line number Diff line Loading @@ -18,6 +18,7 @@ #include <fuzzbinder/random_parcel.h> #include <android-base/logging.h> #include <binder/IPCThreadState.h> #include <binder/ProcessState.h> namespace android { Loading @@ -30,6 +31,11 @@ void fuzzService(const sp<IBinder>& binder, FuzzedDataProvider&& provider) { .extraFds = {}, }; if (provider.ConsumeBool()) { // set calling uid IPCThreadState::self()->restoreCallingIdentity(provider.ConsumeIntegral<int64_t>()); } while (provider.remaining_bytes() > 0) { uint32_t code = provider.ConsumeIntegral<uint32_t>(); uint32_t flags = provider.ConsumeIntegral<uint32_t>(); Loading Loading
libs/binder/tests/parcel_fuzzer/libbinder_driver.cpp +6 −0 Original line number Diff line number Diff line Loading @@ -18,6 +18,7 @@ #include <fuzzbinder/random_parcel.h> #include <android-base/logging.h> #include <binder/IPCThreadState.h> #include <binder/ProcessState.h> namespace android { Loading @@ -30,6 +31,11 @@ void fuzzService(const sp<IBinder>& binder, FuzzedDataProvider&& provider) { .extraFds = {}, }; if (provider.ConsumeBool()) { // set calling uid IPCThreadState::self()->restoreCallingIdentity(provider.ConsumeIntegral<int64_t>()); } while (provider.remaining_bytes() > 0) { uint32_t code = provider.ConsumeIntegral<uint32_t>(); uint32_t flags = provider.ConsumeIntegral<uint32_t>(); Loading