blob: 3cd8baaf8fbae0d038763bde134b8b42b80db544 [file] [log] [blame]
/*
* Copyright (C) 2016 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#ifndef __VTS_SYSFUZZER_COMMON_SPECPARSER_SPECBUILDER_H__
#define __VTS_SYSFUZZER_COMMON_SPECPARSER_SPECBUILDER_H__
#include <map>
#include <queue>
#include <string>
#include "test/vts/proto/ComponentSpecificationMessage.pb.h"
#include "fuzz_tester/FuzzerWrapper.h"
using namespace std;
#define DEFAULT_SPEC_DIR_PATH "/system/etc/"
#define SPEC_FILE_EXT ".vts"
namespace android {
namespace vts {
class FuzzerBase;
class InterfaceSpecification;
// Builder of an interface specification.
class SpecificationBuilder {
public:
// Constructor where the first argument is the path of a dir which contains
// all available interface specification files.
SpecificationBuilder(const string dir_path, int epoch_count,
const string& callback_socket_name);
// scans the dir and returns an interface specification for a requested
// component.
vts::ComponentSpecificationMessage* FindComponentSpecification(
const int target_class, const int target_type, const float target_version,
const string submodule_name = "", const string package = "",
const string component_name = "");
vts::ComponentSpecificationMessage*
FindComponentSpecification(const string& component_name);
// Returns FuzzBase for a given interface specification, and adds all the
// found functions to the fuzzing job queue.
FuzzerBase* GetFuzzerBaseAndAddAllFunctionsToQueue(
const vts::ComponentSpecificationMessage& iface_spec_msg,
const char* dll_file_name);
const string& CallFunction(FunctionSpecificationMessage* func_msg);
const string& GetAttribute(FunctionSpecificationMessage* func_msg);
// Main function for the VTS system fuzzer where dll_file_name is the path of
// a target component, spec_lib_file_path is the path of a specification
// library file, and the rest three arguments are the basic information of
// the target component.
bool Process(const char* dll_file_name, const char* spec_lib_file_path,
int target_class, int target_type, float target_version,
const char* target_package, const char* target_component_name);
bool LoadTargetComponent(const char* dll_file_name,
const char* spec_lib_file_path, int target_class,
int target_type, float target_version,
const char* target_package,
const char* target_component_name,
const char* hw_binder_service_name,
const char* module_name);
FuzzerBase* GetFuzzerBase(
const ComponentSpecificationMessage& iface_spec_msg,
const char* dll_file_name, const char* target_func_name);
FuzzerBase* GetFuzzerBaseSubModule(
const vts::ComponentSpecificationMessage& iface_spec_msg,
void* object_pointer);
// Returns the loaded interface specification message.
ComponentSpecificationMessage* GetComponentSpecification() const;
protected:
// Registers a HIDL interface (proxy) in a map.
int32_t RegisterHidlInterface(const string& name,
const uint64_t interface_pt);
// Returns a pre-registered HIDL interface proxy object's pointer address.
uint64_t GetHidlInterfacePointer(const int32_t id) const;
// Returns FuzzerBase pointer of a pre-registered HIDL interface proxy.
FuzzerBase* GetHidlInterfaceFuzzerBase(const int32_t id) const;
// Creates and returns FuzzerBase pointer of a HIDL interface (proxy).
FuzzerBase* GetFuzzerBase(const string& name,
const uint64_t interface_pt) const;
private:
// A FuzzerWrapper instance.
FuzzerWrapper wrapper_;
// the path of a dir which contains interface specification ASCII proto files.
const string dir_path_;
// the total number of epochs
const int epoch_count_;
// fuzzing job queue.
queue<pair<FunctionSpecificationMessage*, FuzzerBase*>> job_queue_;
// Loaded interface specification message.
ComponentSpecificationMessage* if_spec_msg_;
// TODO: use unique_ptr
char* spec_lib_file_path_;
char* dll_file_name_;
char* module_name_;
// HW binder service name only used for HIDL HAL
char* hw_binder_service_name_;
// the server socket port # of the agent.
const string& callback_socket_name_;
// map for submodule interface specification messages.
map<string, ComponentSpecificationMessage*> submodule_if_spec_map_;
map<string, FuzzerBase*> submodule_fuzzerbase_map_;
// mapping from a nested interface ID to a tuple containing
// its interface name, FuzzerBase pointer, and HIDL proxy pointer.
map<int32_t, tuple<string, FuzzerBase*, uint64_t>> interface_map_;
};
} // namespace vts
} // namespace android
#endif // __VTS_SYSFUZZER_COMMON_SPECPARSER_SPECBUILDER_H__