From d4a38ba1a41765806ca672f37a4aac9d5dacd5cf Mon Sep 17 00:00:00 2001 From: l30054665 Date: Thu, 12 Jun 2025 20:56:48 +0800 Subject: [PATCH 1/6] fuzz Signed-off-by: l30054665 --- .../authenticate_device_service_impl_fuzzer.cpp | 1 - 1 file changed, 1 deletion(-) diff --git a/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp b/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp index c53e1d157..1a897ed91 100644 --- a/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp +++ b/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp @@ -150,7 +150,6 @@ void AuthenticateDeviceServiceImplFuzzTest(const uint8_t* data, size_t size) deviceManagerServiceImpl->GetUdidHashByNetWorkId(str.c_str(), str); deviceManagerServiceImpl->ImportAuthCode(str, str); deviceManagerServiceImpl->ExportAuthCode(str); - deviceManagerServiceImpl->BindTarget(str, peerTargetId, bindParam); deviceManagerServiceImpl->UnRegisterCredentialCallback(str); deviceManagerServiceImpl->UnRegisterUiStateCallback(str); deviceManagerServiceImpl->Release(); -- Gitee From 7ee682e44d45f389f187f73f7c117d90e22aa1a7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=9D=8E=E5=B0=9A?= Date: Fri, 13 Jun 2025 01:18:23 +0000 Subject: [PATCH 2/6] a MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: 李尚 --- .../authenticate_device_service_impl_fuzzer.cpp | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp b/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp index 1a897ed91..8f32f5880 100644 --- a/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp +++ b/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp @@ -154,6 +154,21 @@ void AuthenticateDeviceServiceImplFuzzTest(const uint8_t* data, size_t size) deviceManagerServiceImpl->UnRegisterUiStateCallback(str); deviceManagerServiceImpl->Release(); } + +void AuthenticateDeviceServiceImplFuzzTestSec(const uint8_t* data, size_t size) +{ + if ((data == nullptr) || (size == 0) || (size < sizeof(int32_t))) { + return; + } + + std::string str(reinterpret_cast(data), size); + FuzzedDataProvider fdp(data, size); + AddPermission(); + std::shared_ptr listener = std::make_shared(); + auto deviceManagerServiceImplSec = std::make_shared(); + + deviceManagerServiceImplSec->BindTarget(str, peerTargetId, bindParam); +} } } @@ -162,6 +177,7 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { /* Run your code on data */ OHOS::DistributedHardware::AuthenticateDeviceServiceImplFuzzTest(data, size); + OHOS::DistributedHardware::AuthenticateDeviceServiceImplFuzzTestSec(data, size); return 0; } \ No newline at end of file -- Gitee From 22981e4bd573e0a9a14aec86f6886a76aebba5eb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=9D=8E=E5=B0=9A?= Date: Fri, 13 Jun 2025 02:33:33 +0000 Subject: [PATCH 3/6] 1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: 李尚 --- .../authenticate_device_service_impl_fuzzer.cpp | 1 - 1 file changed, 1 deletion(-) diff --git a/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp b/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp index 8f32f5880..0ed44dd75 100644 --- a/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp +++ b/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp @@ -164,7 +164,6 @@ void AuthenticateDeviceServiceImplFuzzTestSec(const uint8_t* data, size_t size) std::string str(reinterpret_cast(data), size); FuzzedDataProvider fdp(data, size); AddPermission(); - std::shared_ptr listener = std::make_shared(); auto deviceManagerServiceImplSec = std::make_shared(); deviceManagerServiceImplSec->BindTarget(str, peerTargetId, bindParam); -- Gitee From 300daf273b09eaef5a192c8b687da971d294b0e5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=9D=8E=E5=B0=9A?= Date: Wed, 18 Jun 2025 06:41:23 +0000 Subject: [PATCH 4/6] update MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: 李尚 --- ...authenticate_device_service_impl_fuzzer.cpp | 18 +++--------------- 1 file changed, 3 insertions(+), 15 deletions(-) diff --git a/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp b/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp index 0ed44dd75..ec982a51d 100644 --- a/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp +++ b/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/authenticate_device_service_impl_fuzzer.cpp @@ -47,6 +47,7 @@ int32_t g_eventId = 1; int32_t g_action = 1; int32_t g_authType = -1; uint16_t g_subscribeId = 123; +int32_t USLEEP_TIME_US_5000000 = 5000000; std::string g_reqJsonStr = R"( { @@ -150,24 +151,12 @@ void AuthenticateDeviceServiceImplFuzzTest(const uint8_t* data, size_t size) deviceManagerServiceImpl->GetUdidHashByNetWorkId(str.c_str(), str); deviceManagerServiceImpl->ImportAuthCode(str, str); deviceManagerServiceImpl->ExportAuthCode(str); + deviceManagerServiceImpl->BindTarget(str, peerTargetId, bindParam); deviceManagerServiceImpl->UnRegisterCredentialCallback(str); deviceManagerServiceImpl->UnRegisterUiStateCallback(str); + usleep(USLEEP_TIME_US_5000000); deviceManagerServiceImpl->Release(); } - -void AuthenticateDeviceServiceImplFuzzTestSec(const uint8_t* data, size_t size) -{ - if ((data == nullptr) || (size == 0) || (size < sizeof(int32_t))) { - return; - } - - std::string str(reinterpret_cast(data), size); - FuzzedDataProvider fdp(data, size); - AddPermission(); - auto deviceManagerServiceImplSec = std::make_shared(); - - deviceManagerServiceImplSec->BindTarget(str, peerTargetId, bindParam); -} } } @@ -176,7 +165,6 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { /* Run your code on data */ OHOS::DistributedHardware::AuthenticateDeviceServiceImplFuzzTest(data, size); - OHOS::DistributedHardware::AuthenticateDeviceServiceImplFuzzTestSec(data, size); return 0; } \ No newline at end of file -- Gitee From 4d99a6a591f33bc95b49c21e7d61ca01259b44ba Mon Sep 17 00:00:00 2001 From: l30054665 Date: Wed, 18 Jun 2025 14:43:08 +0800 Subject: [PATCH 5/6] fuzz Signed-off-by: l30054665 --- .../commonfuzztest/authenticatedeviceserviceimpl_fuzzer/BUILD.gn | 1 + 1 file changed, 1 insertion(+) diff --git a/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/BUILD.gn b/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/BUILD.gn index 6a4dccbc0..d90b28d10 100644 --- a/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/BUILD.gn +++ b/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/BUILD.gn @@ -45,6 +45,7 @@ ohos_fuzztest("AuthenticateDeviceServiceImplFuzzTest") { "${servicesimpl_path}/include/config", ] + cflags = [ "-g", "-O0", -- Gitee From 1f25f0c4979b73f3cfabb2b3a22be568ed940118 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=9D=8E=E5=B0=9A?= Date: Wed, 18 Jun 2025 06:44:17 +0000 Subject: [PATCH 6/6] update test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/BUILD.gn. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: 李尚 --- .../authenticatedeviceserviceimpl_fuzzer/BUILD.gn | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/BUILD.gn b/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/BUILD.gn index d90b28d10..91a31da58 100644 --- a/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/BUILD.gn +++ b/test/commonfuzztest/authenticatedeviceserviceimpl_fuzzer/BUILD.gn @@ -45,6 +45,14 @@ ohos_fuzztest("AuthenticateDeviceServiceImplFuzzTest") { "${servicesimpl_path}/include/config", ] + sanitize = { + boundary_sanitize = true + cfi = true + cfi_cross_dso = true + debug = true + integer_overflow = true + ubsan = true + } cflags = [ "-g", -- Gitee