1 /*
2  * Copyright 2020 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 // Adapted from register_notification_packet_test.cc
18 
19 #include <gtest/gtest.h>
20 
21 #include "avrcp_test_packets.h"
22 #include "packet_test_helper.h"
23 #include "register_notification_packet.h"
24 
25 namespace bluetooth {
26 namespace avrcp {
27 
28 using TestRegNotifReqPacket = TestPacketType<RegisterNotificationRequest>;
29 using TestRegNotifRspPacket = TestPacketType<RegisterNotificationResponse>;
30 // as small as 4
31 
LLVMFuzzerTestOneInput(const char * data,size_t size)32 extern "C" int LLVMFuzzerTestOneInput(const char* data, size_t size) {
33   std::vector<uint8_t> register_play_status_notification;
34 
35   // We will use stability testing to see the sensible max size for fuzzing.
36   // Max BT packet size = 251
37   // Expected packet size by the library is as small as 4.
38   // Seems to raise exceptions below 15.
39 
40   if (size >= 15) {
41     for (size_t x = 0; x < size; x++) {
42       register_play_status_notification.push_back(data[x]);
43     }
44 
45     auto test_packet =
46         TestRegNotifReqPacket::Make(register_play_status_notification);
47 
48     test_packet->GetEventRegistered();
49     test_packet->GetInterval();
50     test_packet->GetData();
51     test_packet->ToString();
52   }
53 
54   return 0;
55 }
56 
57 }  // namespace avrcp
58 }  // namespace bluetooth
59