Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 19f4098f authored by Ayushi Khopkar's avatar Ayushi Khopkar
Browse files

Added automotiveSvV1.0_fuzzer 

Test: adb shell /data/fuzz/${TARGET_ARCH}/automotiveSvV1.0_fuzzer/automotiveSvV1.0_fuzzer
Bug: 187131529

Change-Id: I873c2e00e21a8b7fc81efeb807643ccee9fe242c
parent 341369e9

automotive/sv/1.0/default/Android.bp

+15 −3
Original line number Diff line number Diff line
@@ -29,9 +29,7 @@ cc_binary { 
    relative_install_path: "hw",

    srcs: [

        "service.cpp",

        "SurroundViewService.cpp",

        "SurroundView2dSession.cpp",

        "SurroundView3dSession.cpp",

        ":automotiveSvV1.0_sources",

    ],

    init_rc: ["android.hardware.automotive.sv@1.0-service.rc"],

    vintf_fragments: ["android.hardware.automotive.sv@1.0-service.xml"],
@@ -54,3 +52,17 @@ cc_binary { 
        "-g",

    ],

}



filegroup {

    name: "automotiveSvV1.0_sources",

    srcs: [

        "SurroundViewService.cpp",

        "SurroundView2dSession.cpp",

        "SurroundView3dSession.cpp",

    ],

}



cc_library_headers {

    name: "automotiveSvV1.0_headers",

    export_include_dirs: ["."],

}

automotive/sv/1.0/default/tests/fuzzer/Android.bp

0 → 100644
+42 −0
Original line number Diff line number Diff line 
/*

 * Copyright (C) 2022 The Android Open Source Project

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at:

 *

 * http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 *

 */



cc_fuzz {

    name: "automotiveSvV1.0_fuzzer",

    srcs: [

        "AutomotiveSvV1_0Fuzzer.cpp",

        "SurroundViewStream.cpp",

        ":automotiveSvV1.0_sources",

    ],

    header_libs: [

        "automotiveSvV1.0_headers",

    ],

    shared_libs: [

        "android.hardware.automotive.sv@1.0",

        "android.hidl.allocator@1.0",

        "libhidlbase",

        "libutils",

        "libhidlmemory",

        "liblog",

    ],

    fuzz_config: {

        cc: [

            "android-media-fuzzing-reports@google.com",

        ],

        componentid: 533764,

    },

}

automotive/sv/1.0/default/tests/fuzzer/AutomotiveSvV1_0Fuzzer.cpp

0 → 100644
+433 −0

File added.

Preview size limit exceeded, changes collapsed.

automotive/sv/1.0/default/tests/fuzzer/AutomotiveSvV1_0Fuzzer.h

0 → 100644
+52 −0
Original line number Diff line number Diff line 
/*

 * Copyright (C) 2022 The Android Open Source Project

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at:

 *

 * http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 *

 */

#pragma once

#include <SurroundViewService.h>

#include <android/hidl/memory/1.0/IMemory.h>

#include <fuzzer/FuzzedDataProvider.h>



namespace android::hardware::automotive::sv::V1_0::implementation::fuzzer {



using ::android::sp;

using ::android::hidl::memory::V1_0::IMemory;



constexpr size_t kMinOverlays = 2;



class SurroundViewFuzzer {

  public:

    SurroundViewFuzzer(const uint8_t* data, size_t size) : mFuzzedDataProvider(data, size) {

        mSurroundViewService = sp<SurroundViewService>::make();

    }

    ~SurroundViewFuzzer() = default;

    void process();



  private:

    void invoke2dSessionAPI();

    void invoke3dSessionAPI();

    std::pair<hidl_memory, sp<IMemory>> getMappedSharedMemory(int32_t bytesSize);

    void initSampleOverlaysData();

    void setIndexOfOverlaysMemory(const std::vector<OverlayMemoryDesc>& overlaysMemDesc,

                                  sp<IMemory> pIMemory, int32_t indexPosition, uint16_t indexValue);

    OverlaysData mOverlaysdata = {};

    size_t mNumOverlays = kMinOverlays;

    sp<IMemory> mMemory = nullptr;

    FuzzedDataProvider mFuzzedDataProvider;

    sp<SurroundViewService> mSurroundViewService = nullptr;

    bool mIs2dStreamStarted = false;

    bool mIs3dStreamStarted = false;

};

}  // namespace android::hardware::automotive::sv::V1_0::implementation::fuzzer

automotive/sv/1.0/default/tests/fuzzer/SurroundViewStream.cpp

0 → 100644
+74 −0

File added.

Preview size limit exceeded, changes collapsed.