Evolution-x/hardware_interfaces
1
0
Fork 0
mirror of https://github.com/Evolution-X/hardware_interfaces synced 2026-02-01 21:37:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge "bluetoothV1.0_fuzzer: Bug Fix" am: 80dee80bd6

Browse Source 
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/2082699

Change-Id: I9b561d567d7838c7f8bae61025282f0d93b59534
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Treehugger Robot
2022-05-09 06:09:45 +00:00
committed by Automerger Merge Worker
parent 7462ae59b9 80dee80bd6
commit 7d6e997d59
1 changed files with 11 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
bluetooth/1.0/default/test/fuzzer/bluetoothV1.0_fuzzer.cpp
View File

@@ -88,11 +88,18 @@ class BluetoothFuzzer {
}
mBtHci->close();
mBtHci.clear();
for (size_t i = 0; i < mFdCount; ++i) {
if (mFdList[i]) {
close(mFdList[i]);
}
}
}
bool init(const uint8_t* data, size_t size);
void process();
private:
size_t mFdCount = 1;
int32_t mFdList[CH_MAX] = {0};
sp<BluetoothHci> mBtHci = nullptr;
FuzzedDataProvider* mFdp = nullptr;
};
@@ -143,17 +150,15 @@ void BluetoothFuzzer::process() {
bool shouldSetH4Protocol = mFdp->ConsumeBool();
BtVendor* btVendor = BtVendor::getInstance();
size_t fdcount = 1;
int32_t fdList[CH_MAX] = {0};
if (!shouldSetH4Protocol) {
fdcount = mFdp->ConsumeIntegralInRange<size_t>(kMinFdcount, CH_MAX - 1);
mFdCount = mFdp->ConsumeIntegralInRange<size_t>(kMinFdcount, CH_MAX - 1);
}
for (size_t i = 0; i < fdcount; ++i) {
fdList[i] = open("/dev/null", O_RDWR | O_CREAT);
for (size_t i = 0; i < mFdCount; ++i) {
mFdList[i] = open("/dev/null", O_RDWR | O_CREAT);
}
btVendor->populateFdList(fdList, fdcount);
btVendor->populateFdList(mFdList, mFdCount);
mBtHci->initialize(bluetoothCallback);
if (!bluetoothCallback->isInitialized) {
@@ -181,12 +186,6 @@ void BluetoothFuzzer::process() {
}
btVendor->callRemainingCbacks();
for (size_t i = 0; i < fdcount; ++i) {
if (fdList[i]) {
close(fdList[i]);
}
}
}
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {