diff --git a/OAT.xml b/OAT.xml
index e52288de5741b09b03f9e8201948e18399ea5f8e..51d529661045e87202a39750ea281936ca1900a1 100755
--- a/OAT.xml
+++ b/OAT.xml
@@ -65,14 +65,18 @@ Note:If the text contains special characters, please escape them according to th
 				<policyitem type="copyright" name="xxx" path=".*" rule="may" group="defaultGroup" filefilter="copyrightPolicyFilter" desc="xxxx开发代码"/-->		        
             </policy>
         </policylist>
-		<filefilterlist>			
+               <filefilterlist>			
 			<filefilter name="licenseFileNamePolicyFilter" desc="根目录LICENSE文件校验策略的过滤条件" >
 				<filteritem type="filepath" name="adapter/.*" desc="adapter目录下是自研代码"/>		
 				<filteritem type="filepath" name="services/etc/updater_init.cfg" desc="升级服务应用的资源文件"/>
-				<filteritem type="filepath" name="services/resources/*.png" desc="升级服务应用的资源文件"/>
-			</filefilter>				
-	
-		</filefilterlist>
+				<filteritem type="filepath" name="resources/*.png" desc="升级服务应用的资源文件"/>
+			</filefilter>
+                        <filefilter name="binaryFileTypePolicyFilter" desc="Filters for binary file policies" >
+                                <filteritem type="filepath" name="resources/*.png" desc="升级服务应用的资源文件"/>
+                                <filteritem type="filepath" name="test/fuzztest/fuzz_src_data/*" desc="升级功能Fuzz测试的资源文件"/>
+				<filteritem type="filepath" name="test/unittest/test_data/*" desc="升级功能UT测试的资源文件"/>
+                        </filefilter>
+               </filefilterlist>
 	
     </oatconfig>
 </configuration>
diff --git a/services/fs_manager/mount.cpp b/services/fs_manager/mount.cpp
index 20f99e769518fefbaf30516f461787d0143d13ec..f407e5d2df89cf23956dd5ded81b85eaed45d7ab 100644
--- a/services/fs_manager/mount.cpp
+++ b/services/fs_manager/mount.cpp
@@ -135,7 +135,7 @@ int FormatPartition(const std::string &path)
 
 static MountStatus GetMountStatusForMountPoint(const std::string &mountPoint)
 {
-    char buffer[512];
+    char buffer[512] = {0};
     size_t n;
     constexpr size_t numMountItems = 6;
     const std::string mountFile = "/proc/mounts";
diff --git a/services/ui/surface_dev.cpp b/services/ui/surface_dev.cpp
index 73de0f69f16fb5f9de6cb6cff153b2c101b52cdc..92e616a68a7287149b5295fb20281dd3bfc6e0ac 100644
--- a/services/ui/surface_dev.cpp
+++ b/services/ui/surface_dev.cpp
@@ -17,7 +17,7 @@
 #include "updater_ui_const.h"
 
 namespace updater {
-void SurfaceDev::Flip(void *buf)
+void SurfaceDev::Flip(const void *buf)
 {
     if (!buf) {
         LOG(ERROR) << "buf is null";
@@ -47,4 +47,4 @@ SurfaceDev::~SurfaceDev()
 {
     LOG(INFO)<<"SurfaceDev end";
 }
-} // namespace updater
\ No newline at end of file
+} // namespace updater
diff --git a/services/ui/surface_dev.h b/services/ui/surface_dev.h
index cc7c47ac098eb65bbf91720568e499c9e7372cc0..96770a1a166b6f6e7aa31a299a89e0eb3813871a 100644
--- a/services/ui/surface_dev.h
+++ b/services/ui/surface_dev.h
@@ -27,7 +27,7 @@ public:
 
     explicit SurfaceDev(SurfaceDev::DevType deviceType);
     ~SurfaceDev() override;
-    void Flip(void* buf);
+    void Flip(const void* buf);
     void GetScreenSize(int &w, int &h);
 private:
     int screenSizeW_ = 0;
diff --git a/services/updater.cpp b/services/updater.cpp
index f5e66db35fc9207cfd25a8f55a5c287c64d9bd19..683c2ed1dfda0c634227542e096556349c531b65 100644
--- a/services/updater.cpp
+++ b/services/updater.cpp
@@ -326,7 +326,7 @@ UpdaterStatus StartUpdaterProc(PkgManager::PkgManagerPtr pkgManager, const std::
     }
 
     close(pipeWrite); // close write endpoint
-    char buffer[MAX_BUFFER_SIZE];
+    char buffer[MAX_BUFFER_SIZE] = {0};
     bool retryUpdate = false;
     FILE* fromChild = fdopen(pipeRead, "r");
     UPDATER_ERROR_CHECK(fromChild != nullptr, "fdopen pipeRead failed", return UPDATE_ERROR);