diff options
Diffstat (limited to 'cras/src/fuzz/cras_hfp_slc.cc')
-rw-r--r-- | cras/src/fuzz/cras_hfp_slc.cc | 66 |
1 files changed, 0 insertions, 66 deletions
diff --git a/cras/src/fuzz/cras_hfp_slc.cc b/cras/src/fuzz/cras_hfp_slc.cc deleted file mode 100644 index 4a76ea46..00000000 --- a/cras/src/fuzz/cras_hfp_slc.cc +++ /dev/null @@ -1,66 +0,0 @@ -/* Copyright 2020 The Chromium OS Authors. All rights reserved. - * Use of this source code is governed by a BSD-style license that can be - * found in the LICENSE file. - */ - -#include <assert.h> -#include <fuzzer/FuzzedDataProvider.h> -#include <stddef.h> -#include <stdint.h> - -extern "C" { -#include "cras_bt_device.h" -#include "cras_bt_log.h" -#include "cras_hfp_slc.h" -#include "cras_iodev_list.h" -#include "cras_mix.h" -#include "cras_observer.h" -#include "cras_shm.h" -#include "cras_system_state.h" - -struct cras_bt_event_log* btlog; -} - -int disconnect_cb(struct hfp_slc_handle*) { - return 0; -} - -extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { - FuzzedDataProvider data_provider(data, size); - bool is_hsp = data_provider.ConsumeIntegralInRange(0, 1); - int ag_supported_features = data_provider.ConsumeIntegral<int>(); - std::string command = data_provider.ConsumeRemainingBytesAsString(); - int fd = open("/dev/null", O_RDWR); - - struct cras_bt_device* bt_dev = cras_bt_device_create(NULL, ""); - struct hfp_slc_handle* handle = hfp_slc_create( - fd, is_hsp, ag_supported_features, bt_dev, NULL, &disconnect_cb); - if (!handle) - return 0; - - handle_at_command_for_test(handle, command.c_str()); - - hfp_slc_destroy(handle); - cras_bt_device_remove(bt_dev); - return 0; -} - -extern "C" int LLVMFuzzerInitialize(int* argc, char*** argv) { - char* shm_name; - if (asprintf(&shm_name, "/cras-%d", getpid()) < 0) - exit(-ENOMEM); - struct cras_server_state* exp_state = - (struct cras_server_state*)calloc(1, sizeof(*exp_state)); - if (!exp_state) - exit(-1); - int rw_shm_fd = open("/dev/null", O_RDWR); - int ro_shm_fd = open("/dev/null", O_RDONLY); - cras_system_state_init("/tmp", shm_name, rw_shm_fd, ro_shm_fd, exp_state, - sizeof(*exp_state)); - free(shm_name); - cras_observer_server_init(); - cras_mix_init(0); - cras_iodev_list_init(); - btlog = cras_bt_event_log_init(); - return 0; -} |