1 /*
2  * Copyright (C) 2022 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 package android.security.cts;
18 
19 import android.platform.test.annotations.AsbSecurityTest;
20 
21 import com.android.sts.common.tradefed.testtype.NonRootSecurityTestCase;
22 import com.android.sts.common.util.TombstoneUtils;
23 import com.android.sts.common.util.TombstoneUtils.Config.BacktraceFilterPattern;
24 import com.android.tradefed.testtype.DeviceJUnit4ClassRunner;
25 
26 import org.junit.Test;
27 import org.junit.runner.RunWith;
28 
29 import java.util.regex.Pattern;
30 
31 @RunWith(DeviceJUnit4ClassRunner.class)
32 public class CVE_2020_0241 extends NonRootSecurityTestCase {
33 
34     /**
35      * b/151456667
36      * Vulnerability Behavior : SIGABRT in self
37      * Vulnerable Library     : libmediaplayerservice (As per AOSP code)
38      * Vulnerable Function    : android::NuPlayer::NuPlayerStreamListener::NuPlayerStreamListener
39                                 (As per AOSP code)
40      */
41     @AsbSecurityTest(cveBugId = 151456667)
42     @Test
testPocCVE_2020_0241()43     public void testPocCVE_2020_0241() throws Exception {
44         pocPusher.only32();
45         String binaryName = "CVE-2020-0241";
46         AdbUtils.pocConfig testConfig = new AdbUtils.pocConfig(binaryName, getDevice());
47         testConfig.config = new TombstoneUtils.Config().setProcessPatterns(Pattern.compile(binaryName))
48                 .setBacktraceIncludes(new BacktraceFilterPattern("libmediaplayerservice",
49                         "android::NuPlayer::NuPlayerStreamListener::NuPlayerStreamListener"));
50         String[] signals = {TombstoneUtils.Signals.SIGABRT};
51         testConfig.config.setSignals(signals);
52         testConfig.config.setAbortMessageIncludes(
53                 AdbUtils.escapeRegexSpecialChars("Pure virtual function called"));
54         AdbUtils.runPocAssertNoCrashesNotVulnerable(testConfig);
55     }
56 }
57