Source release 16.3.0

oemcrypto/test/oec_session_util.h

@@ -18,6 +18,7 @@
 #include "odk.h"
 #include "oec_device_features.h"
 #include "oec_key_deriver.h"
+#include "oemcrypto_fuzz_structs.h"
 #include "oemcrypto_types.h"
 #include "pst_report.h"
 
@@ -32,6 +33,8 @@ void PrintTo(const vector<uint8_t>& value, ostream* os);
 }  // namespace std
 
 namespace wvoec {
+// OEMCrypto Fuzzing: Set max signture length to 1mb.
+const size_t MB = 1024 * 1024;
 
 // Make sure this is larger than kMaxKeysPerSession, in oemcrypto_test.cpp
 constexpr size_t kMaxNumKeys = 30;
@@ -158,6 +161,9 @@ class RoundTrip {
   // Have OEMCrypto sign a request message and then verify the signature and the
   // core message.
   virtual void SignAndVerifyRequest();
+  // Used for OEMCrypto Fuzzing: Function to convert fuzzer data to valid
+  // License/Provisioning/Renwal request data that can be serialized.
+  virtual void InjectFuzzedRequestData(uint8_t* data, size_t size);
   // Create a default |response_data| and |core_response|.
   virtual void CreateDefaultResponse() = 0;
   // Copy fields from |response_data| to |padded_response_data|, encrypting
@@ -241,6 +247,11 @@ class ProvisioningRoundTrip
   void set_allowed_schemes(uint32_t allowed_schemes) {
     allowed_schemes_ = allowed_schemes;
   }
+  // Used for OEMCrypto Fuzzing: Function to convert fuzzer data to valid
+  // provisioning response data that can be parsed. Calculates signature for
+  // data generated by fuzzer, so that signature validation passes when parsing
+  // provisioning response.
+  void InjectFuzzedResponseData(const uint8_t* data, size_t size);
 
  protected:
   void VerifyRequestSignature(const vector<uint8_t>& data,
@@ -286,6 +297,18 @@ class LicenseRoundTrip
         license_type_(OEMCrypto_ContentLicense),
         request_hash_() {}
   void CreateDefaultResponse() override;
+  // Used for OEMCrypto Fuzzing: Function to inject fuzzed timer limits
+  // into timer_limits field from core_response. We need to fuzz timer
+  // limits in order to efficiently fuzz load renewal response API.
+  void InjectFuzzedTimerLimits(OEMCrypto_Renewal_Response_Fuzz& fuzzed_data);
+  // Used for OEMCrypto Fuzzing: Function to convert fuzzer data to valid
+  // License response data that can be parsed. Calculates signature for data
+  // generated by fuzzer, so that signature validation passes when parsing
+  // license response.
+  void InjectFuzzedResponseData(const uint8_t* data, size_t size);
+  // Used for OEMCrypto Fuzzing: Convert boolean flags in parsed_license to
+  // valid bytes to avoid errors from msan.
+  void ConvertDataToValidBools(ODK_ParsedLicense* t);
   // Create a license with four keys. Each key is responsible for one of generic
   // encrypt (key 0), decrypt (key 1), sign (key 2) and verify (key 3). Each key
   // is allowed only one type of operation.
@@ -298,7 +321,7 @@ class LicenseRoundTrip
   // Reload an offline license into a different session. This derives new mac
   // keys and then calls LoadResponse.
   OEMCryptoResult ReloadResponse(Session* session);
-  void VerifyTestKeys();
+  void VerifyTestKeys(Session* session);
   // Set the default key control block for all keys. This is used in
   // CreateDefaultResponse.  The key control block determines the restrictions
   // that OEMCrypto should place on a key's use. For example, it specifies the
@@ -386,6 +409,9 @@ class RenewalRoundTrip
         is_release_(false) {}
   void CreateDefaultResponse() override;
   void EncryptAndSignResponse() override;
+  void InjectFuzzedResponseData(OEMCrypto_Renewal_Response_Fuzz& fuzzed_data,
+                                const uint8_t* renewal_response,
+                                const size_t renewal_response_size);
   OEMCryptoResult LoadResponse() override { return LoadResponse(session_); }
   OEMCryptoResult LoadResponse(Session* session) override;
   uint64_t renewal_duration_seconds() const {
@@ -599,6 +625,13 @@ class Session {
   string pst_;
 };
 
+// Used for OEMCrypto Fuzzing: Convert byte to a valid boolean to avoid errors
+// generated by msan.
+bool ConvertByteToValidBoolean(const bool* in);
+// Used for OEMCrypto Fuzzing: Generates corpus for request APIs.
+template <class CoreRequest>
+void WriteRequestApiCorpus(size_t signature_length, size_t core_message_length,
+                           vector<uint8_t>& data);
 }  // namespace wvoec
 
 #endif  // CDM_OEC_SESSION_UTIL_H_