openharmony/filemanagement_app_file_service
1
0
Fork 0
mirror of https://gitee.com/openharmony/filemanagement_app_file_service synced 2025-02-16 22:58:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

modify fuzz testcases

Browse Source 
Signed-off-by: wangpeng <wangpeng477@huawei.com>
This commit is contained in:
wangpggg 2024-11-19 19:33:21 +08:00
parent cdde0846c2
commit cfb11ccb19
2 changed files with 22 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
test/fuzztest/remotefileshare_fuzzer/remotefileshare_fuzzer.cpp
View File

@ -142,7 +142,7 @@ bool ShareFilePathIoctlFdFuzzTest(const uint8_t* data, size_t size)
int32_t ret = 0;
int32_t dirFd;
if (size == 0) {
if (data == nullptr || size < sizeof(int)) {
return false;
}
@ -168,7 +168,7 @@ bool ShareFilePathIoctlFdFuzzTest(const uint8_t* data, size_t size)
close(dirFd);
return false;
}
sc.srcFd = size;
sc.srcFd = *(reinterpret_cast<const int*>(data));
ret = ioctl(dirFd, HMDFS_IOC_SET_SHARE_PATH, &sc);
if (ret < 0) {

31
test/fuzztest/servicereverse_fuzzer/servicereverse_fuzzer.cpp
View File

@ -34,7 +34,6 @@
using namespace OHOS::FileManagement::Backup;
namespace OHOS {
constexpr size_t FOO_MAX_LEN = 1024;
constexpr size_t U32_AT_SIZE = 4;
constexpr uint8_t MAX_CALL_TRANSACTION = 24;
constexpr int32_t SHIFT_FIRST = 24;
@ -56,6 +55,11 @@ uint32_t ConvertToUint32(const uint8_t* ptr)
bool BackupFuzzTest(const uint8_t *data, size_t size)
{
/* Validate the length of size */
if (data == nullptr || size < U32_AT_SIZE) {
return false;
}
uint32_t code = ConvertToUint32(data);
if (code > static_cast<uint32_t>(IServiceReverseInterfaceCode::SERVICER_BACKUP_ON_TASK_FINISHED)) {
return true;
@ -77,6 +81,11 @@ bool BackupFuzzTest(const uint8_t *data, size_t size)
bool RestoreFuzzTest(const uint8_t *data, size_t size)
{
/* Validate the length of size */
if (data == nullptr || size < U32_AT_SIZE) {
return false;
}
uint32_t code = ConvertToUint32(data);
if (code < static_cast<uint32_t>(IServiceReverseInterfaceCode::SERVICER_RESTORE_ON_SUB_TASK_STARTED) ||
code > static_cast<uint32_t>(IServiceReverseInterfaceCode::SERVICER_RESTORE_ON_FILE_READY)) {
@ -99,6 +108,11 @@ bool RestoreFuzzTest(const uint8_t *data, size_t size)
bool IncrementalBackupFuzzTest(const uint8_t *data, size_t size)
{
/* Validate the length of size */
if (data == nullptr || size < U32_AT_SIZE) {
return false;
}
uint32_t code = ConvertToUint32(data);
if (code < static_cast<uint32_t>(IServiceReverseInterfaceCode::SERVICER_INCREMENTAL_BACKUP_ON_FILE_READY) ||
code > static_cast<uint32_t>(IServiceReverseInterfaceCode::SERVICER_INCREMENTAL_BACKUP_ON_TASK_FINISHED)) {
@ -121,6 +135,11 @@ bool IncrementalBackupFuzzTest(const uint8_t *data, size_t size)
bool IncrementalRestoreFuzzTest(const uint8_t *data, size_t size)
{
/* Validate the length of size */
if (data == nullptr || size < U32_AT_SIZE) {
return false;
}
uint32_t code = ConvertToUint32(data);
if (code < static_cast<uint32_t>(IServiceReverseInterfaceCode::SERVICER_INCREMENTAL_RESTORE_ON_SUB_TASK_STARTED) ||
code > static_cast<uint32_t>(IServiceReverseInterfaceCode::SERVICER_INCREMENTAL_RESTORE_ON_FILE_READY)) {
@ -145,16 +164,6 @@ bool IncrementalRestoreFuzzTest(const uint8_t *data, size_t size)
/* Fuzzer entry point */
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
{
/* Run your code on data */
if (data == nullptr) {
return 0;
}
/* Validate the length of size */
if (size < OHOS::U32_AT_SIZE || size > OHOS::FOO_MAX_LEN) {
return 0;
}
OHOS::BackupFuzzTest(data, size);
OHOS::RestoreFuzzTest(data, size);
OHOS::IncrementalBackupFuzzTest(data, size);