/* * Copyright 2022 The Android Open Source Project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include namespace android { const int32_t kMaxKeycodes = 100; static void addProperty(FuzzEventHub& eventHub, std::shared_ptr fdp) { // Pick a random property to set for the mapper to have set. fdp->PickValueInArray>( {[&]() -> void { eventHub.addProperty("touch.deviceType", "touchScreen"); }, [&]() -> void { eventHub.addProperty("touch.deviceType", fdp->ConsumeRandomLengthString(8).data()); }, [&]() -> void { eventHub.addProperty("touch.size.scale", fdp->ConsumeRandomLengthString(8).data()); }, [&]() -> void { eventHub.addProperty("touch.size.bias", fdp->ConsumeRandomLengthString(8).data()); }, [&]() -> void { eventHub.addProperty("touch.size.isSummed", fdp->ConsumeRandomLengthString(8).data()); }, [&]() -> void { eventHub.addProperty("touch.size.calibration", fdp->ConsumeRandomLengthString(8).data()); }, [&]() -> void { eventHub.addProperty("touch.pressure.scale", fdp->ConsumeRandomLengthString(8).data()); }, [&]() -> void { eventHub.addProperty("touch.size.calibration", fdp->ConsumeBool() ? "diameter" : "area"); }, [&]() -> void { eventHub.addProperty("touch.pressure.calibration", fdp->ConsumeRandomLengthString(8).data()); }})(); } extern "C" int LLVMFuzzerTestOneInput(uint8_t* data, size_t size) { std::shared_ptr fdp = std::make_shared(data, size); // Create mocked objects to support the fuzzed input mapper. std::shared_ptr eventHub = std::make_shared(fdp); FuzzInputReaderContext context(eventHub, fdp); InputDevice device = getFuzzedInputDevice(*fdp, &context); InputReaderConfiguration policyConfig; MultiTouchInputMapper& mapper = getMapperForDevice(*fdp.get(), device, policyConfig); // Loop through mapper operations until randomness is exhausted. while (fdp->remaining_bytes() > 0) { fdp->PickValueInArray>({ [&]() -> void { addProperty(*eventHub.get(), fdp); configureAndResetDevice(*fdp, device); }, [&]() -> void { std::string dump; mapper.dump(dump); }, [&]() -> void { InputDeviceInfo info; mapper.populateDeviceInfo(info); }, [&]() -> void { mapper.getSources(); }, [&]() -> void { std::list unused = mapper.reconfigure(fdp->ConsumeIntegral(), policyConfig, InputReaderConfiguration::Change( fdp->ConsumeIntegral())); }, [&]() -> void { std::list unused = mapper.reset(fdp->ConsumeIntegral()); }, [&]() -> void { RawEvent rawEvent = getFuzzedRawEvent(*fdp); std::list unused = mapper.process(rawEvent); }, [&]() -> void { mapper.getKeyCodeState(fdp->ConsumeIntegral(), fdp->ConsumeIntegral()); }, [&]() -> void { mapper.getScanCodeState(fdp->ConsumeIntegral(), fdp->ConsumeIntegral()); }, [&]() -> void { std::vector keyCodes; int32_t numBytes = fdp->ConsumeIntegralInRange(0, kMaxKeycodes); for (int32_t i = 0; i < numBytes; ++i) { keyCodes.push_back(fdp->ConsumeIntegral()); } mapper.markSupportedKeyCodes(fdp->ConsumeIntegral(), keyCodes, nullptr); }, [&]() -> void { std::list unused = mapper.cancelTouch(fdp->ConsumeIntegral(), fdp->ConsumeIntegral()); }, [&]() -> void { std::list unused = mapper.timeoutExpired(fdp->ConsumeIntegral()); }, [&]() -> void { StylusState state{fdp->ConsumeIntegral(), fdp->ConsumeFloatingPoint(), fdp->ConsumeIntegral(), getFuzzedToolType(*fdp)}; std::list unused = mapper.updateExternalStylusState(state); }, [&]() -> void { mapper.getAssociatedDisplayId(); }, })(); } return 0; } } // namespace android