1 /*
2  * Copyright (C) 2022 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #pragma once
18 
19 #include <android/binder_auto_utils.h>
20 #include <android/binder_parcel.h>
21 #include <fuzzer/FuzzedDataProvider.h>
22 
23 #include <vector>
24 
25 namespace android {
26 
27 /**
28  * See fuzzService, but fuzzes multiple services at the same time.
29  *
30  * Consumes providers.
31  */
32 void fuzzService(const std::vector<ndk::SpAIBinder>& binders, FuzzedDataProvider&& provider);
33 
34 /**
35  * Based on the random data in provider, construct an arbitrary number of
36  * Parcel objects and send them to the service in serial.
37  *
38  * Usage:
39  *
40  *   extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
41  *       FuzzedDataProvider provider = FuzzedDataProvider(data, size);
42  *       // can use provider here to create a service with different options
43  *       std::shared_ptr<IFoo> myService = ndk::SharedRefBase<IFoo>::make(...);
44  *       fuzzService(myService->asBinder().get(), std::move(provider));
45  *   }
46  */
47 void fuzzService(AIBinder* binder, FuzzedDataProvider&& provider);
48 } // namespace android
49