Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 6bd67429 authored by Pawan Wagh's avatar Pawan Wagh Committed by Automerger Merge Worker
Browse files

Merge "Fuzz AParcel_marshal and AParcel_unmarshal APIs" am: d3fa088f am:... 

Merge "Fuzz AParcel_marshal and AParcel_unmarshal APIs" am: d3fa088f am: 7a793d3e am: 8760734e

Original change: https://android-review.googlesource.com/c/platform/frameworks/native/+/2375150



Change-Id: I9fd97ff27b7dca6f640066576e078b876c966f97
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents c2a77771 8760734e

libs/binder/tests/parcel_fuzzer/binder_ndk.cpp

+18 −0
Original line number Diff line number Diff line
@@ -199,5 +199,23 @@ std::vector<ParcelRead<NdkParcelAdapter>> BINDER_NDK_PARCEL_READ_FUNCTIONS{ 
            binder_status_t status = genericDataParcelable.readFromParcel(p.aParcel());

            FUZZ_LOG() << "status: " << status;

        },

        [](const NdkParcelAdapter& p, FuzzedDataProvider& provider) {

            FUZZ_LOG() << "about to marshal AParcel";

            size_t start = provider.ConsumeIntegral<size_t>();

            // limit 1MB to avoid OOM issues

            size_t len = provider.ConsumeIntegralInRange<size_t>(0, 1000000);

            uint8_t buffer[len];

            binder_status_t status = AParcel_marshal(p.aParcel(), buffer, start, len);

            FUZZ_LOG() << "status: " << status;

        },

        [](const NdkParcelAdapter& /*p*/, FuzzedDataProvider& provider) {

            FUZZ_LOG() << "about to unmarshal AParcel";

            size_t len = provider.ConsumeIntegralInRange<size_t>(0, provider.remaining_bytes());

            std::vector<uint8_t> parcelData = provider.ConsumeBytes<uint8_t>(len);

            const uint8_t* buffer = parcelData.data();

            binder_status_t status = AParcel_unmarshal(AParcel_create(), buffer, len);

            FUZZ_LOG() << "status: " << status;

        },



};

// clang-format on