Added policy_timers_fuzzer
exec/s: 12119 Test: ./policy_timers_fuzzer Bug: 265234582 Change-Id: Ia5085ea6064a84ed6a4e5cb07a70b28893dd8879
This commit is contained in:
committed by
Akshata Kadam
parent
aebfcbb789
commit
a252eba173
@@ -80,9 +80,15 @@ cc_fuzz {
|
||||
name: "system_id_extractor_fuzzer",
|
||||
srcs: ["system_id_extractor_fuzzer.cpp"],
|
||||
defaults: ["libcdm_fuzzer_defaults"],
|
||||
|
||||
}
|
||||
cc_fuzz{
|
||||
name: "service_certificate_fuzzer",
|
||||
srcs: ["service_certificate_fuzzer.cpp"],
|
||||
defaults: ["libcdm_fuzzer_defaults"]
|
||||
}
|
||||
|
||||
cc_fuzz {
|
||||
name: "policy_timers_fuzzer",
|
||||
srcs: ["policy_timers_fuzzer.cpp"],
|
||||
defaults: ["libcdm_fuzzer_defaults"],
|
||||
}
|
||||
|
||||
@@ -5,6 +5,7 @@
|
||||
+ [content_decryption_fuzzer](#ContentDecryption)
|
||||
+ [system_id_extractor_fuzzer](#SystemIdExtractor)
|
||||
+ [service_certificate_fuzzer](#ServiceCertificate)
|
||||
+ [policy_timers_fuzzer](#PolicyTimers)
|
||||
|
||||
# <a name="PolicyEngine"></a> Fuzzer for PolicyEngine
|
||||
|
||||
@@ -53,6 +54,7 @@ ContentDecryption supports the following parameters:
|
||||
$ adb sync data
|
||||
$ adb shell /data/fuzz/arm64/content_decryption_fuzzer/vendor/content_decryption_fuzzer
|
||||
```
|
||||
|
||||
# <a name="SystemIdExtractor"></a> Fuzzer for SystemIdExtractor
|
||||
|
||||
SystemIdExtractor supports the following parameters:
|
||||
@@ -76,6 +78,7 @@ SystemIdExtractor supports the following parameters:
|
||||
$ adb sync data
|
||||
$ adb shell /data/fuzz/arm64/system_id_extractor_fuzzer/vendor/system_id_extractor_fuzzer
|
||||
```
|
||||
|
||||
# <a name="ServiceCertificate"></a> Fuzzer for ServiceCertificate
|
||||
|
||||
ServiceCertificate supports the following parameters:
|
||||
@@ -99,3 +102,24 @@ ServiceCertificate supports the following parameters:
|
||||
$ adb sync data
|
||||
$ adb shell /data/fuzz/arm64/service_certificate_fuzzer/vendor/service_certificate_fuzzer
|
||||
```
|
||||
|
||||
# <a name="PolicyTimers"></a> Fuzzer for PolicyTimers
|
||||
|
||||
PolicyTimers supports the following parameters:
|
||||
1. Seconds Since Last Played (parameter name: "secondsSinceLastPlayed")
|
||||
2. Expiry Time (parameter name: "expiryTime")
|
||||
|
||||
| Parameter| Valid Values| Configured Value|
|
||||
|------------- |-------------| ----- |
|
||||
|`secondsSinceLastPlayed`| `Integer` |Value obtained from FuzzedDataProvider|
|
||||
|`expiryTime`| `Interger` |Value obtained from FuzzedDataProvider|
|
||||
|
||||
#### Steps to run
|
||||
1. Build the fuzzer
|
||||
```
|
||||
$ mm -j$(nproc) policy_timers_fuzzer
|
||||
```
|
||||
2. Run on device
|
||||
```
|
||||
$ adb sync data
|
||||
$ adb shell /data/fuzz/arm64/policy_timers_fuzzer/vendor/policy_timers_fuzzer
|
||||
|
||||
186
fuzzer/policy_timers_fuzzer.cpp
Normal file
186
fuzzer/policy_timers_fuzzer.cpp
Normal file
@@ -0,0 +1,186 @@
|
||||
/*
|
||||
* Copyright (C) 2023 The Android Open Source Project
|
||||
*
|
||||
* Licensed under the Apache license, Version 2.0 (the "license");
|
||||
* you may not use this file except in compliance with the license.
|
||||
* You may obtain a copy of the license at:
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the license is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the license for the specific language governing permissions and
|
||||
* limitations under the license.
|
||||
*
|
||||
*/
|
||||
|
||||
#include "policy_timers.h"
|
||||
#include "policy_timers_v16.h"
|
||||
#include "policy_timers_v18.h"
|
||||
#include "wv_cdm_event_listener.h"
|
||||
#include <fuzzer/FuzzedDataProvider.h>
|
||||
|
||||
using namespace wvcdm;
|
||||
using namespace video_widevine;
|
||||
|
||||
class PolicyTimersFuzzer {
|
||||
public:
|
||||
PolicyTimersFuzzer(const uint8_t* data, size_t size) : mFdp(data, size) {};
|
||||
void process();
|
||||
|
||||
private:
|
||||
FuzzedDataProvider mFdp;
|
||||
License mLicense;
|
||||
void setUp();
|
||||
};
|
||||
|
||||
void policySetBool(std::function<void(bool)> function,
|
||||
FuzzedDataProvider *fdp) {
|
||||
if (fdp->ConsumeBool()) {
|
||||
function(fdp->ConsumeBool());
|
||||
}
|
||||
}
|
||||
void policySetInt64(std::function<void(int64_t)> function,
|
||||
FuzzedDataProvider *fdp) {
|
||||
if (fdp->ConsumeBool()) {
|
||||
function(fdp->ConsumeIntegral<int64_t>());
|
||||
}
|
||||
}
|
||||
|
||||
void PolicyTimersFuzzer::setUp() {
|
||||
License_Policy* policy = mLicense.mutable_policy();
|
||||
policySetBool(
|
||||
std::bind(&License_Policy::set_can_renew, policy, std::placeholders::_1),
|
||||
&mFdp);
|
||||
policySetInt64(std::bind(&License_Policy::set_renewal_delay_seconds, policy,
|
||||
std::placeholders::_1),
|
||||
&mFdp);
|
||||
policySetBool(std::bind(&License_Policy::set_soft_enforce_playback_duration,
|
||||
policy, std::placeholders::_1),
|
||||
&mFdp);
|
||||
policySetInt64(std::bind(&License_Policy::set_renewal_retry_interval_seconds,
|
||||
policy, std::placeholders::_1),
|
||||
&mFdp);
|
||||
policySetInt64(std::bind(&License_Policy::set_license_duration_seconds,
|
||||
policy, std::placeholders::_1),
|
||||
&mFdp);
|
||||
if (mFdp.ConsumeBool()) {
|
||||
video_widevine::License::Policy::TimerDelayBase timeDelayBase =
|
||||
(video_widevine::License::Policy::TimerDelayBase)
|
||||
mFdp.ConsumeIntegralInRange<uint8_t>(
|
||||
License_Policy_TimerDelayBase_TIMER_DELAY_BASE_UNSPECIFIED,
|
||||
License_Policy_TimerDelayBase_FIRST_DECRYPT);
|
||||
policy->set_initial_renewal_delay_base(timeDelayBase);
|
||||
}
|
||||
if (mFdp.ConsumeBool()) {
|
||||
policy->set_playback_duration_seconds(mFdp.ConsumeIntegral<int64_t>());
|
||||
}
|
||||
if (mFdp.ConsumeBool()) {
|
||||
policy->set_rental_duration_seconds(mFdp.ConsumeIntegral<int64_t>());
|
||||
}
|
||||
if (mFdp.ConsumeBool()) {
|
||||
policy->set_renewal_recovery_duration_seconds(mFdp.ConsumeIntegral<int64_t>());
|
||||
}
|
||||
if (mFdp.ConsumeBool()) {
|
||||
policy->set_soft_enforce_rental_duration(mFdp.ConsumeBool());
|
||||
}
|
||||
if (mFdp.ConsumeBool()) {
|
||||
policy->set_can_play(mFdp.ConsumeBool());
|
||||
}
|
||||
mLicense.set_license_start_time(mFdp.ConsumeIntegral<int64_t>());
|
||||
}
|
||||
|
||||
void PolicyTimersFuzzer::process() {
|
||||
std::unique_ptr<PolicyTimers> policyTimers;
|
||||
if (mFdp.ConsumeBool()) {
|
||||
policyTimers = std::make_unique<PolicyTimersV16>();
|
||||
}
|
||||
else {
|
||||
policyTimers = std::make_unique<PolicyTimersV18>();
|
||||
}
|
||||
|
||||
while (mFdp.remaining_bytes()) {
|
||||
auto invokePolicyTimersAPI =
|
||||
mFdp.PickValueInArray<const std::function<void()>>({
|
||||
[&]() {
|
||||
setUp();
|
||||
},
|
||||
[&]() {
|
||||
policyTimers->SetLicense(mLicense);
|
||||
},
|
||||
[&]() {
|
||||
policyTimers->BeginDecryption(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/);
|
||||
},
|
||||
[&]() {
|
||||
policyTimers->DecryptionEvent(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/);
|
||||
},
|
||||
[&]() {
|
||||
policyTimers->RestorePlaybackTimes(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/,
|
||||
mFdp.ConsumeIntegral<int64_t>() /*playback_start_time*/,
|
||||
mFdp.ConsumeIntegral<int64_t>() /*last_playback_time*/,
|
||||
mFdp.ConsumeIntegral<int64_t>() /* grace_period_end_time */);
|
||||
},
|
||||
[&]() {
|
||||
policyTimers->GetLicenseOrRentalOrPlaybackDurationRemaining(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/);
|
||||
},
|
||||
[&]() {
|
||||
policyTimers->GetPlaybackDurationRemaining(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/);
|
||||
},
|
||||
[&]() {
|
||||
int64_t secondsSinceLastPlayed = mFdp.ConsumeIntegral<int64_t>();
|
||||
policyTimers->GetSecondsSinceStarted(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/,
|
||||
mFdp.ConsumeBool() ? &secondsSinceLastPlayed : nullptr);
|
||||
},
|
||||
[&]() {
|
||||
int64_t secondsSinceLastPlayed = mFdp.ConsumeIntegral<int64_t>();
|
||||
policyTimers->GetSecondsSinceLastPlayed(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/,
|
||||
mFdp.ConsumeBool() ? &secondsSinceLastPlayed : nullptr);
|
||||
},
|
||||
[&]() {
|
||||
policyTimers->IsLicenseForFuture(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/);
|
||||
},
|
||||
[&]() {
|
||||
int64_t expiryTime = mFdp.ConsumeIntegral<int64_t>();
|
||||
policyTimers->UpdateExpirationTime(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/,
|
||||
mFdp.ConsumeBool() ? &expiryTime : nullptr);
|
||||
},
|
||||
[&]() {
|
||||
policyTimers->HasRenewalRetryIntervalExpired(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/);
|
||||
},
|
||||
[&]() {
|
||||
policyTimers->UpdateRenewalRequest(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/);
|
||||
},
|
||||
[&]() {
|
||||
policyTimers->HasRenewalRecoveryDurationExpired(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/);
|
||||
},
|
||||
[&]() {
|
||||
policyTimers->HasRenewalDelayExpired(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/);
|
||||
},
|
||||
[&]() {
|
||||
policyTimers->UpdateLicense(
|
||||
mFdp.ConsumeIntegral<int64_t>() /*current_time*/, mLicense);
|
||||
},
|
||||
});
|
||||
invokePolicyTimersAPI();
|
||||
}
|
||||
}
|
||||
|
||||
extern "C" int LLVMFuzzerTestOneInput(const uint8_t * data, size_t size) {
|
||||
PolicyTimersFuzzer policyTimersFuzzer(data, size);
|
||||
policyTimersFuzzer.process();
|
||||
return 0;
|
||||
}
|
||||
Reference in New Issue
Block a user