/* * Copyright 2022 The Android Open Source Project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include namespace android { static void addProperty(FuzzContainer& fuzzer, std::shared_ptr fdp) { // Pick a random property to set for the mapper to have set. fdp->PickValueInArray>( {[&]() -> void { fuzzer.addProperty("cursor.mode", "pointer"); }, [&]() -> void { fuzzer.addProperty("cursor.mode", "navigation"); }, [&]() -> void { fuzzer.addProperty("cursor.mode", fdp->ConsumeRandomLengthString(100).data()); }, [&]() -> void { fuzzer.addProperty("cursor.orientationAware", fdp->ConsumeRandomLengthString(100).data()); }})(); } extern "C" int LLVMFuzzerTestOneInput(uint8_t* data, size_t size) { std::shared_ptr fdp = std::make_shared(data, size); FuzzContainer fuzzer(fdp); auto policyConfig = fuzzer.getPolicyConfig(); CursorInputMapper& mapper = fuzzer.getMapper(policyConfig); // Loop through mapper operations until randomness is exhausted. while (fdp->remaining_bytes() > 0) { fdp->PickValueInArray>({ [&]() -> void { addProperty(fuzzer, fdp); }, [&]() -> void { std::string dump; mapper.dump(dump); }, [&]() -> void { mapper.getSources(); }, [&]() -> void { std::list unused = mapper.reconfigure(fdp->ConsumeIntegral(), policyConfig, InputReaderConfiguration::Change( fdp->ConsumeIntegral())); }, [&]() -> void { // Need to reconfigure with 0 or you risk a NPE. std::list unused = mapper.reconfigure(fdp->ConsumeIntegral(), policyConfig, InputReaderConfiguration::Change(0)); InputDeviceInfo info; mapper.populateDeviceInfo(info); }, [&]() -> void { int32_t type, code; type = fdp->ConsumeBool() ? fdp->PickValueInArray(kValidTypes) : fdp->ConsumeIntegral(); code = fdp->ConsumeBool() ? fdp->PickValueInArray(kValidCodes) : fdp->ConsumeIntegral(); // Need to reconfigure with 0 or you risk a NPE. std::list unused = mapper.reconfigure(fdp->ConsumeIntegral(), policyConfig, InputReaderConfiguration::Change(0)); RawEvent rawEvent{fdp->ConsumeIntegral(), fdp->ConsumeIntegral(), fdp->ConsumeIntegral(), type, code, fdp->ConsumeIntegral()}; unused += mapper.process(&rawEvent); }, [&]() -> void { std::list unused = mapper.reset(fdp->ConsumeIntegral()); }, [&]() -> void { mapper.getScanCodeState(fdp->ConsumeIntegral(), fdp->ConsumeIntegral()); }, [&]() -> void { // Need to reconfigure with 0 or you risk a NPE. std::list unused = mapper.reconfigure(fdp->ConsumeIntegral(), policyConfig, InputReaderConfiguration::Change(0)); mapper.getAssociatedDisplayId(); }, })(); } return 0; } } // namespace android