xref: /aosp_15_r20/hardware/interfaces/broadcastradio/aidl/default/fuzzer.cpp (revision 4d7e907c777eeecc4c5bd7cf640a754fac206ff7)
1 /*
2  * Copyright (C) 2023 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #include <fuzzbinder/libbinder_ndk_driver.h>
18 #include <fuzzer/FuzzedDataProvider.h>
19 #include "BroadcastRadio.h"
20 #include "VirtualRadio.h"
21 
22 using ::aidl::android::hardware::broadcastradio::BroadcastRadio;
23 using ::aidl::android::hardware::broadcastradio::VirtualRadio;
24 using ::android::fuzzService;
25 
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)26 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
27     // TODO(b/183141167): need to rewrite 'dump' to avoid SIGPIPE.
28     signal(SIGPIPE, SIG_IGN);
29     const VirtualRadio& amFmRadioMock = VirtualRadio::getAmFmRadio();
30     std::shared_ptr<BroadcastRadio> amFmRadio =
31             ::ndk::SharedRefBase::make<BroadcastRadio>(amFmRadioMock);
32     const VirtualRadio& dabRadioMock = VirtualRadio::getDabRadio();
33     std::shared_ptr<BroadcastRadio> dabRadio =
34             ::ndk::SharedRefBase::make<BroadcastRadio>(dabRadioMock);
35 
36     std::vector<ndk::SpAIBinder> binder_services = {amFmRadio->asBinder(), dabRadio->asBinder()};
37 
38     fuzzService(binder_services, FuzzedDataProvider(data, size));
39 
40     return 0;
41 }
42