# About Widevine aidl binder fuzzer

## Build the binaries

See [go/build-fast][1] to setup the RBE environment.

From Android root:

1. source build/make/rbesetup.sh
2. `SANITIZE_TARGET`=hwaddress m `android.hardware.drm-service.widevine.aidl_fuzzer` -j128

## Push to target for testing

adb push $(OUT)/data/fuzz/arm64/lib/ /data/fuzz/arm64/lib/

## Run test

adb shell<br>
cd /data/fuzz/arm64<br>
`LD_LIBRARY_PATH=/data/fuzz/arm65/lib /data/fuzz/arm64/android.hardware.drm-service.widevine.aidl_fuzzer/vendor/hw/android.hardware.drm-service.widevine.aidl_fuzzer`

## Monitoring

By using `cc_fuzz` in Android.bp, the fuzz binary and its dependency sanitized shared libraries will be installed on the device.<br>
Libraries are installed in `/data/fuzz/<arch>/lib`, and the binary is installed in /data/fuzz/&ltarch&gt/&lt`binary_name`&gt/vendor/hw.<br>

Within 24-48 hours of merge, you can monitor the coverage data [here][2].<br>
Bugs will be filed automatically, and the owner of the fuzzer(the cc in the config section) will be notified.<br>

[1]: https://g3doc.corp.google.com/company/teams/android/developing/update/build-fast.md?cl=head
[2]: https://android-coverage.googleplex.com/