Merge "Add a fuzzer in bluetooth gd for l2cap dynamic channel allocator" (3e47b9ea) · Commits · e / os / android_packages_modules_Bluetooth

system/gd/Android.bp

+28 −0

Original line number	Diff line number	Diff line
		@@ -287,6 +287,34 @@ cc_test {
		},
		}

		cc_fuzz {
		name: "bluetooth_gd_fuzz_test",
		defaults: ["gd_defaults"],
		srcs: [
		"fuzz_test.cc",
		":BluetoothL2capFuzzTestSources",
		],
		static_libs: [
		"libbluetooth_gd",
		"libchrome",
		"libgmock",
		"libgtest",
		],
		host_supported: true,
		generated_headers: [
		"BluetoothGeneratedPackets_h",
		],
		target: {
		android: {
		shared_libs: [
		"android.hardware.bluetooth@1.0",
		"libhidlbase",
		"libutils",
		],
		},
		},
		}

		cc_benchmark {
		name: "bluetooth_benchmark_gd",
		defaults: ["gd_defaults"],

system/gd/fuzz_test.cc

0 → 100644

+25 −0

Original line number	Diff line number	Diff line
		/*
		* Copyright 2019 The Android Open Source Project
		*
		* Licensed under the Apache License, Version 2.0 (the "License");
		* you may not use this file except in compliance with the License.
		* You may obtain a copy of the License at
		*
		* http://www.apache.org/licenses/LICENSE-2.0
		*
		* Unless required by applicable law or agreed to in writing, software
		* distributed under the License is distributed on an "AS IS" BASIS,
		* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
		* See the License for the specific language governing permissions and
		* limitations under the License.
		*/

		#include <stddef.h>
		#include <stdint.h>

		extern void RunL2capClassicDynamicChannelAllocatorFuzzTest(const uint8_t* data, size_t size);

		extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
		RunL2capClassicDynamicChannelAllocatorFuzzTest(data, size);
		return 0;
		}
		No newline at end of file

system/gd/l2cap/Android.bp

+7 −0

Original line number	Diff line number	Diff line
		@@ -61,3 +61,10 @@ filegroup {
		"classic/cert/cert.cc",
		],
		}

		filegroup {
		name: "BluetoothL2capFuzzTestSources",
		srcs: [
		"classic/internal/dynamic_channel_allocator_fuzz_test.cc",
		],
		}

system/gd/l2cap/classic/internal/dynamic_channel_allocator_fuzz_test.cc

0 → 100644

+89 −0

Original line number	Diff line number	Diff line
		/*
		* Copyright 2019 The Android Open Source Project
		*
		* Licensed under the Apache License, Version 2.0 (the "License");
		* you may not use this file except in compliance with the License.
		* You may obtain a copy of the License at
		*
		* http://www.apache.org/licenses/LICENSE-2.0
		*
		* Unless required by applicable law or agreed to in writing, software
		* distributed under the License is distributed on an "AS IS" BASIS,
		* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
		* See the License for the specific language governing permissions and
		* limitations under the License.
		*/

		#include "l2cap/classic/internal/dynamic_channel_allocator.h"
		#include "l2cap/classic/internal/link_mock.h"
		#include "l2cap/internal/parameter_provider_mock.h"

		#include <gmock/gmock.h>

		namespace bluetooth {
		namespace l2cap {
		namespace classic {
		namespace internal {

		using hci::testing::MockAclConnection;
		using l2cap::internal::testing::MockParameterProvider;
		using l2cap::internal::testing::MockScheduler;
		using testing::MockLink;
		using ::testing::NiceMock;
		using ::testing::Return;

		const hci::Address device{{0x01, 0x02, 0x03, 0x04, 0x05, 0x06}};

		class L2capClassicDynamicChannelAllocatorFuzzTest {
		public:
		void RunTests(const uint8_t* data, size_t size) {
		SetUp();
		TestPrecondition(data, size);
		TearDown();
		}

		private:
		void SetUp() {
		thread_ = new os::Thread("test_thread", os::Thread::Priority::NORMAL);
		handler_ = new os::Handler(thread_);
		mock_parameter_provider_ = new NiceMock<MockParameterProvider>();
		mock_classic_link_ =
		new NiceMock<MockLink>(handler_, mock_parameter_provider_, std::make_unique<NiceMock<MockAclConnection>>(),
		std::make_unique<NiceMock<MockScheduler>>());
		EXPECT_CALL(*mock_classic_link_, GetDevice()).WillRepeatedly(Return(device));
		channel_allocator_ = std::make_unique<DynamicChannelAllocator>(mock_classic_link_, handler_);
		}

		void TearDown() {
		channel_allocator_.reset();
		delete mock_classic_link_;
		delete mock_parameter_provider_;
		handler_->Clear();
		delete handler_;
		delete thread_;
		}

		void TestPrecondition(const uint8_t* data, size_t size) {
		if (size != 2) {
		return;
		}
		Psm psm = reinterpret_cast<const Psm>(data);
		EXPECT_FALSE(channel_allocator_->IsPsmUsed(psm));
		}

		os::Thread* thread_{nullptr};
		os::Handler* handler_{nullptr};
		NiceMock<MockParameterProvider>* mock_parameter_provider_{nullptr};
		NiceMock<MockLink>* mock_classic_link_{nullptr};
		std::unique_ptr<DynamicChannelAllocator> channel_allocator_;
		};

		} // namespace internal
		} // namespace classic
		} // namespace l2cap
		} // namespace bluetooth

		void RunL2capClassicDynamicChannelAllocatorFuzzTest(const uint8_t* data, size_t size) {
		bluetooth::l2cap::classic::internal::L2capClassicDynamicChannelAllocatorFuzzTest test;
		test.RunTests(data, size);
		}
		No newline at end of file

system/gd/l2cap/classic/internal/link_mock.h

+4 −0

Original line number	Diff line number	Diff line
		@@ -36,6 +36,10 @@ class MockLink : public Link {
		explicit MockLink(os::Handler* handler, l2cap::internal::ParameterProvider* parameter_provider)
		: Link(handler, std::make_unique<MockAclConnection>(),
		std::make_unique<l2cap::internal::testing::MockScheduler>(), parameter_provider, nullptr, nullptr){};
		explicit MockLink(os::Handler* handler, l2cap::internal::ParameterProvider* parameter_provider,
		std::unique_ptr<hci::AclConnection> acl_connection,
		std::unique_ptr<l2cap::internal::Scheduler> scheduler)
		: Link(handler, std::move(acl_connection), std::move(scheduler), parameter_provider, nullptr, nullptr){};
		MOCK_METHOD(hci::Address, GetDevice, (), (override));
		MOCK_METHOD(void, OnAclDisconnected, (hci::ErrorCode status), (override));
		MOCK_METHOD(void, Disconnect, (), (override));