Gitiles
Code Review Sign In
LeafOS / LeafOS-Project / android_frameworks_av / c65d59fe3979a9eec28301d388fd815be5ccdfe9 / . / media / mtp / tests / MtpFuzzer
tree: f9a501d979586e7754cab417a84bb71105d6a72e [path history] [tgz]
  1. corpus/
  2. Android.bp
  3. mtp_data_packet_fuzzer.cpp
  4. mtp_device_fuzzer.cpp
  5. mtp_event_packet_fuzzer.cpp
  6. mtp_fuzzer.cpp
  7. mtp_fuzzer.dict
  8. mtp_handle_fuzzer.cpp
  9. mtp_packet_fuzzer.cpp
  10. mtp_property_fuzzer.cpp
  11. mtp_request_packet_fuzzer.cpp
  12. mtp_response_packet_fuzzer.cpp
  13. MtpMockDatabase.cpp
  14. MtpMockDatabase.h
  15. MtpMockHandle.h
  16. MtpPacketFuzzerUtils.h
  17. README.md
media/mtp/tests/MtpFuzzer/README.md

Fuzzers for libmtp

Table of contents

Fuzzer for MtpServer

MtpServer supports the following parameters:

  1. PacketData (parameter name: "packetData")
ParameterValid ValuesConfigured Value
packetDataStringValue obtained from FuzzedDataProvider

Steps to run

  1. Build the fuzzer
  $ mm -j$(nproc) mtp_fuzzer
  1. Run on device
  $ adb sync data
  $ adb shell /data/fuzz/arm64/mtp_fuzzer/mtp_fuzzer corpus/ -dict=mtp_fuzzer.dict

Fuzzer for MtpHostProperty

MtpHostProperty supports the following parameters:

  1. Feasible Type (parameter name: "kFeasibleTypes")
  2. UrbPacket Division Mode (parameter name: "kUrbPacketDivisionModes")
ParameterValid ValuesConfigured Value
kFeasibleType1. MTP_TYPE_UNDEFINED, 2. MTP_TYPE_INT8, 3.MTP_TYPE_UINT8, 4.MTP_TYPE_INT16, 5.MTP_TYPE_UINT16, 6.MTP_TYPE_INT32, 7.MTP_TYPE_UINT32, 8.MTP_TYPE_INT64, 9.MTP_TYPE_UINT64, 10.MTP_TYPE_INT128, 11.MTP_TYPE_UINT128, 12.MTP_TYPE_AINT8, 13.MTP_TYPE_AUINT8, 14.MTP_TYPE_AINT16, 15.MTP_TYPE_AUINT16, 16.MTP_TYPE_AINT32, 17.MTP_TYPE_AUINT32, 18.MTP_TYPE_AINT64, 19.MTP_TYPE_AUINT64, 20.MTP_TYPE_AINT128, 21.MTP_TYPE_AUINT128, 22.MTP_TYPE_STR,Value obtained from FuzzedDataProvider
kUrbPacketDivisionMode1. FIRST_PACKET_ONLY_HEADER, 2. FIRST_PACKET_HAS_PAYLOAD,Value obtained from FuzzedDataProvider

Steps to run

  1. Build the fuzzer
  $ mm -j$(nproc) mtp_host_property_fuzzer
  1. Run on device
  $ adb sync data
  $ adb shell /data/fuzz/arm64/mtp_host_property_fuzzer/mtp_host_property_fuzzer

Fuzzer for MtpDeviceProperty

MtpDeviceProperty supports the following parameters:

  1. Feasible Type (parameter name: "kFeasibleType")
ParameterValid ValuesConfigured Value
kFeasibleType1. MTP_TYPE_UNDEFINED, 2. MTP_TYPE_INT8, 3.MTP_TYPE_UINT8, 4.MTP_TYPE_INT16, 5.MTP_TYPE_UINT16, 6.MTP_TYPE_INT32, 7.MTP_TYPE_UINT32, 8.MTP_TYPE_INT64, 9.MTP_TYPE_UINT64, 10.MTP_TYPE_INT128, 11.MTP_TYPE_UINT128, 12.MTP_TYPE_AINT8, 13.MTP_TYPE_AUINT8, 14.MTP_TYPE_AINT16, 15.MTP_TYPE_AUINT16, 16.MTP_TYPE_AINT32, 17.MTP_TYPE_AUINT32, 18.MTP_TYPE_AINT64, 19.MTP_TYPE_AUINT64, 20.MTP_TYPE_AINT128, 21.MTP_TYPE_AUINT128, 22.MTP_TYPE_STR,Value obtained from FuzzedDataProvider

Steps to run

  1. Build the fuzzer
  $ mm -j$(nproc) mtp_device_property_fuzzer
  1. Run on device
  $ adb sync data
  $ adb shell /data/fuzz/arm64/mtp_device_property_fuzzer/mtp_device_property_fuzzer

Fuzzer for MtpHandle

Steps to run

  1. Build the fuzzer
  $ mm -j$(nproc) mtp_handle_fuzzer
  1. Run on device
  $ adb sync data
  $ adb shell /data/fuzz/arm64/mtp_handle_fuzzer/mtp_handle_fuzzer

Fuzzer for MtpPacket

MtpPacket supports the following parameters:

  1. bufferSize (parameter name: "size")
ParameterValid ValuesConfigured Value
bufferSizeInteger 1 to 1000,Value obtained from FuzzedDataProvider

Steps to run

  1. Build the fuzzer
  $ mm -j$(nproc) mtp_packet_fuzzer
  1. Run on device
  $ adb sync data
  $ adb shell /data/fuzz/arm64/mtp_packet_fuzzer/mtp_packet_fuzzer

Fuzzer for MtpDevice

MtpDevice supports the following parameters:

  1. Device Name (parameter name: "deviceName")
ParameterValid ValuesConfigured Value
deviceNameStringValue obtained from FuzzedDataProvider

Steps to run

  1. Build the fuzzer
  $ mm -j$(nproc) mtp_device_fuzzer
  1. Run on device
  $ adb sync data
  $ adb shell /data/fuzz/arm64/mtp_device_fuzzer/mtp_device_fuzzer

Fuzzer for MtpRequestPacket

MtpRequestPacket supports the following parameters:

  1. Data (parameter name: "data")
ParameterValid ValuesConfigured Value
dataVector of positive IntegerValue obtained from FuzzedDataProvider

Steps to run

  1. Build the fuzzer
  $ mm -j$(nproc) mtp_request_packet_fuzzer
  1. Run on device
  $ adb sync data
  $ adb shell /data/fuzz/arm64/mtp_request_packet_fuzzer/mtp_request_packet_fuzzer

Fuzzer for MtpEventPacket

MtpEventPacket supports the following parameters:

  1. Size (parameter name: "size")
ParameterValid ValuesConfigured Value
sizeInteger 1 to 1000,Value obtained from FuzzedDataProvider

Steps to run

  1. Build the fuzzer
  $ mm -j$(nproc) mtp_event_packet_fuzzer
  1. Run on device
  $ adb sync data
  $ adb shell /data/fuzz/arm64/mtp_event_packet_fuzzer/mtp_event_packet_fuzzer

Fuzzer for MtpResponsePacket

MtpResponsePacket supports the following parameters:

  1. Size (parameter name: "size")
ParameterValid ValuesConfigured Value
sizeInteger 1 to 1000,Value obtained from FuzzedDataProvider

Steps to run

  1. Build the fuzzer
  $ mm -j$(nproc) mtp_response_packet_fuzzer
  1. Run on device
  $ adb sync data
  $ adb shell /data/fuzz/arm64/mtp_response_packet_fuzzer/mtp_response_packet_fuzzer

Fuzzer for MtpDataPacket

MtpDataPacket supports the following parameters:

  1. UrbPacket Division Mode (parameter name: "kUrbPacketDivisionModes")
  2. Size (parameter name: "size")
ParameterValid ValuesConfigured Value
kUrbPacketDivisionMode1. FIRST_PACKET_ONLY_HEADER, 2. FIRST_PACKET_HAS_PAYLOAD,Value obtained from FuzzedDataProvider
sizeInteger 1 to 1000,Value obtained from FuzzedDataProvider

Steps to run

  1. Build the fuzzer
  $ mm -j$(nproc) mtp_data_packet_fuzzer
  1. Run on device
  $ adb sync data
  $ adb shell /data/fuzz/arm64/mtp_data_packet_fuzzer/mtp_data_packet_fuzzer