drivers_peripheral/codec/test/fuzztest/codecfreebuffer_fuzzer/codecfreebuffer_fuzzer.cpp

/*
 * Copyright (c) 2022 Huawei Device Co., Ltd.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#include "codecfreebuffer_fuzzer.h"
#include "codec_callback_type_stub.h"
#include "codec_component_type.h"
#include "codec_component_manager.h"

#include <osal_mem.h>
#include <hdf_log.h>

namespace OHOS {
namespace Codec {
    const int32_t DATA_BUFFERID = 10;
    const int32_t DATA_SIZE = 20;
    const int32_t DATA_VERSION_NVERSION = 30;
    const int32_t DATA_BUFFERTYPE = 40;
    const int32_t DATA_BUFFERLEN = 50;
    const int32_t DATA_ALLOCLEN = 60;
    const int32_t DATA_FILLEDLEN = 70;
    const int32_t DATA_OFFSET = 80;
    const int32_t DATA_FENCEFD = 90;
    const int32_t DATA_TYPE = 100;
    const int32_t DATA_PTS = 200;
    const int32_t DATA_FLAG = 300;

    static void FillDataOmxCodecBuffer(struct OmxCodecBuffer *dataFuzz)
    {
        dataFuzz->bufferId = DATA_BUFFERID;
        dataFuzz->size = DATA_SIZE;
        dataFuzz->version.nVersion = DATA_VERSION_NVERSION;
        dataFuzz->bufferType = (enum BufferType)DATA_BUFFERTYPE;
        dataFuzz->buffer = (uint8_t*)OsalMemAlloc(DATA_BUFFERLEN);
        dataFuzz->bufferLen = DATA_BUFFERLEN;
        dataFuzz->allocLen = DATA_ALLOCLEN;
        dataFuzz->filledLen = DATA_FILLEDLEN;
        dataFuzz->offset = DATA_OFFSET;
        dataFuzz->fenceFd = DATA_FENCEFD;
        dataFuzz->type = (enum ShareMemTypes)DATA_TYPE;
        dataFuzz->pts = DATA_PTS;
        dataFuzz->flag = DATA_FLAG;
    }

    bool CodecFreeBuffer(const uint8_t* data, size_t size)
    {
        bool result = false;
        const int32_t testingAppData = 33;
        struct CodecComponentManager *manager = nullptr;
        struct CodecComponentType *component = nullptr;
        int32_t appData = testingAppData;
        CodecCallbackType* callback = CodecCallbackTypeStubGetInstance();

        manager = GetCodecComponentManager();
        if (manager == nullptr) {
            HDF_LOGE("%{public}s: GetCodecComponentManager failed\n", __func__);
            return false;
        }

        int32_t ret = manager->CreateComponent(&component, (char*)"compName", &appData, sizeof(appData), callback);
        if (ret != HDF_SUCCESS) {
            HDF_LOGE("%{public}s: CreateComponent failed\n", __func__);
            return false;
        }

        OMX_STATETYPE state;
        ret = component->GetState(component, &state);
        if (ret != HDF_SUCCESS) {
            HDF_LOGE("%{public}s: GetState Component faild\n", __func__);
            return false;
        }
        struct OmxCodecBuffer buffer;
        FillDataOmxCodecBuffer(&buffer);
        ret = component->FreeBuffer(component, (uint32_t)data, &buffer);
        if (ret == HDF_SUCCESS) {
            HDF_LOGI("%{public}s: FreeBuffer succeed\n", __func__);
            result = true;
        }

        ret = manager->DestoryComponent(component);
        if (ret != HDF_SUCCESS) {
            HDF_LOGE("%{public}s: DestoryComponent failed\n", __func__);
            return false;
        }
        CodecComponentManagerRelease();

        return result;
    }
} // namespace codec
} // namespace OHOS

extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
{
    OHOS::Codec::CodecFreeBuffer(data, size);
    return 0;
}