Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c4bd2afc authored by Pawan Wagh's avatar Pawan Wagh
Browse files

Adding fuzzer for gatekeeperd 

Fuzzing AIDL service gatekeeperd with fuzzService API.

Test: m gatekeeperd_service_fuzzer && adb sync data && adb shell /data/fuzz/x86_64/gatekeeperd_service_fuzzer/gatekeeperd_service_fuzzer
Bug: 232439428
Change-Id: I20a451f7981cab312e4c67b11c715198284d0051
parent c5c0c302

gatekeeperd/Android.bp

+17 −0
Original line number Diff line number Diff line
@@ -98,3 +98,20 @@ cc_library_shared { 
        "libbinder",

    ],

}



cc_fuzz {

    name: "gatekeeperd_service_fuzzer",

    defaults: [

        "gatekeeperd_defaults",

        "service_fuzzer_defaults"

    ],

    srcs: [

        "fuzzer/GateKeeperServiceFuzzer.cpp",

    ],

    fuzz_config: {

        cc: [

            "subrahmanyaman@google.com",

            "swillden@google.com",

        ],

    },

}
 
 No newline at end of file

gatekeeperd/fuzzer/GateKeeperServiceFuzzer.cpp

0 → 100644
+28 −0
Original line number Diff line number Diff line 
/*

 * Copyright (C) 2023 The Android Open Source Project

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 *

 *      http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 */



#include <fuzzbinder/libbinder_driver.h>



#include "gatekeeperd.h"



using android::fuzzService;

using android::GateKeeperProxy;



extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {

    auto gatekeeperService = new GateKeeperProxy();

    fuzzService(gatekeeperService, FuzzedDataProvider(data, size));

    return 0;

}
 
 No newline at end of file