1 /*
2  * Copyright 2020 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #ifndef BT_STACK_FUZZ_A2DP_CODECINFO_HELPERS_H_
18 #define BT_STACK_FUZZ_A2DP_CODECINFO_HELPERS_H_
19 
20 // NOTE: This file should not be included directly.
21 //       It is included by the corresponding "...Functions.h" file.
22 
23 #include <fuzzer/FuzzedDataProvider.h>
24 #include <vector>
25 #include "a2dp_codec_api.h"
26 #include "bt_types.h"
27 
28 // Keep a vector of any allocated codec_info objects.
29 // It will be up to the caller to free this array at the end of a fuzz loop
30 std::vector<uint8_t*> a2dp_codec_info_vect;
31 
32 // Calls a function from the ops_vector
callArbitraryCodecInfoFunction(FuzzedDataProvider * fdp,std::vector<std::function<void (FuzzedDataProvider *,uint8_t *)>> ops_vector)33 void callArbitraryCodecInfoFunction(
34     FuzzedDataProvider* fdp,
35     std::vector<std::function<void(FuzzedDataProvider*, uint8_t*)>>
36         ops_vector) {
37   // Choose which function we'll be calling
38   uint8_t function_id =
39       fdp->ConsumeIntegralInRange<uint8_t>(0, ops_vector.size() - 1);
40 
41   // Get a info object
42   uint8_t* codec_info =
43       getArbitraryVectorElement(fdp, a2dp_codec_info_vect, false);
44 
45   // Most functions require a valid codec_info
46   if (codec_info || function_id == 0 || function_id == 25 ||
47       function_id == 26) {
48     // Call the function we've chosen
49     ops_vector[function_id](fdp, codec_info);
50   }
51 }
52 
53 // Function to clean up and clear our allocated objects
cleanupA2dpCodecInfoFuzz()54 void cleanupA2dpCodecInfoFuzz() {
55   for (auto it : a2dp_codec_info_vect) {
56     if (it != nullptr) {
57       delete it;
58     }
59   }
60   a2dp_codec_info_vect.clear();
61 }
62 
63 #endif  // BT_STACK_FUZZ_A2DP_CODECINFO_HELPERS_H_
64