1 // Copyright 2023 The Pigweed Authors
2 //
3 // Licensed under the Apache License, Version 2.0 (the "License"); you may not
4 // use this file except in compliance with the License. You may obtain a copy of
5 // the License at
6 //
7 // https://www.apache.org/licenses/LICENSE-2.0
8 //
9 // Unless required by applicable law or agreed to in writing, software
10 // distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
11 // WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
12 // License for the specific language governing permissions and limitations under
13 // the License.
14
15 #include <fuzzer/FuzzedDataProvider.h>
16
17 #include "pw_bluetooth_sapphire/internal/host/common/advertising_data.h"
18 #include "pw_bluetooth_sapphire/internal/host/common/byte_buffer.h"
19
20 namespace bt::common {
21
fuzz(const uint8_t * data,size_t size)22 void fuzz(const uint8_t* data, size_t size) {
23 FuzzedDataProvider fuzzed_data(data, size);
24 auto adv_flags = fuzzed_data.ConsumeIntegral<AdvFlags>();
25 bool include_adv_flags = fuzzed_data.ConsumeBool();
26 auto write_buffer_size = fuzzed_data.ConsumeIntegralInRange(0, 2000);
27 auto adv_data = fuzzed_data.ConsumeRemainingBytes<uint8_t>();
28
29 AdvertisingData::ParseResult result =
30 AdvertisingData::FromBytes(BufferView(adv_data));
31
32 if (result.is_ok()) {
33 DynamicByteBuffer write_buffer(write_buffer_size);
34 result->WriteBlock(
35 &write_buffer,
36 include_adv_flags ? std::optional(adv_flags) : std::nullopt);
37 }
38 }
39
40 } // namespace bt::common
41
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)42 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
43 bt::common::fuzz(data, size);
44 return 0;
45 }
46