1 /*
2 * Copyright (c) 2023, The OpenThread Authors.
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions are met:
7 * 1. Redistributions of source code must retain the above copyright
8 * notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright
10 * notice, this list of conditions and the following disclaimer in the
11 * documentation and/or other materials provided with the distribution.
12 * 3. Neither the name of the copyright holder nor the
13 * names of its contributors may be used to endorse or promote products
14 * derived from this software without specific prior written permission.
15 *
16 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
17 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
20 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
23 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
24 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
25 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
26 * POSSIBILITY OF SUCH DAMAGE.
27 */
28
29 #include <fuzzbinder/libbinder_ndk_driver.h>
30 #include <fuzzer/FuzzedDataProvider.h>
31
32 #include "otdaemon_server.hpp"
33
34 using android::fuzzService;
35 using otbr::Android::MdnsPublisher;
36 using otbr::Android::OtDaemonServer;
37 using otbr::Mdns::Publisher;
38 using otbr::Ncp::RcpHost;
39
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)40 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
41 {
42 RcpHost rcpHost = RcpHost{"" /* aInterfaceName */,
43 {"threadnetwork_hal://binder?none"},
44 "" /* aBackboneInterfaceName */,
45 true /* aDryRun */,
46 false /* aEnableAutoAttach*/};
47 auto mdnsPublisher = static_cast<MdnsPublisher *>(Publisher::Create([](Publisher::State) {}));
48 otbr::BorderAgent borderAgent{rcpHost, *mdnsPublisher};
49
50 auto service = ndk::SharedRefBase::make<OtDaemonServer>(rcpHost, *mdnsPublisher, borderAgent);
51 fuzzService(service->asBinder().get(), FuzzedDataProvider(data, size));
52 return 0;
53 }
54
otPlatReset(otInstance * aInstance)55 extern "C" void otPlatReset(otInstance *aInstance)
56 {
57 }
58