diff options
| author | 2021-10-18 17:02:23 -0700 | |
|---|---|---|
| committer | 2021-10-19 00:07:48 +0000 | |
| commit | 0866773d643aee217c39f7ef29ce44720e135d6e (patch) | |
| tree | 894e8ae0729b3a60b7984dbad0b744179ae5dcc3 | |
| parent | bdab8b6b72c516c66bdb32aff9a1e306e3b52a88 (diff) | |
binder_rpc_fuzzer: add corpus entry
Custom corpus entry to execute a special transaction. The coverage
guided fuzzer wasn't making very much progress, because it needed to
guess the wire protocol version and also the connection init string
('cci').
Corpus file created with:
echo "000000F0000000000000000000000000636369000000000000000000280000001111111111111111000000000000000000000000000000000000000000000000000000000000000000000000000000008d4a8d4a" | xxd -ps -r
Bug: 199324691
Test: binder_rpc_fuzzer corpus/
Change-Id: I4fea720d14792d5582047931ca89175856f4fa26
| -rw-r--r-- | libs/binder/tests/rpc_fuzzer/Android.bp | 1 | ||||
| -rw-r--r-- | libs/binder/tests/rpc_fuzzer/corpus/special_transaction | bin | 0 -> 84 bytes |
2 files changed, 1 insertions, 0 deletions
diff --git a/libs/binder/tests/rpc_fuzzer/Android.bp b/libs/binder/tests/rpc_fuzzer/Android.bp index c0f0a12121..71e847fd1e 100644 --- a/libs/binder/tests/rpc_fuzzer/Android.bp +++ b/libs/binder/tests/rpc_fuzzer/Android.bp @@ -14,6 +14,7 @@ cc_fuzz { fuzz_config: { cc: ["smoreland@google.com"], }, + corpus: ["corpus/*"], dictionary: "binder_rpc_fuzzer.dict", srcs: [ diff --git a/libs/binder/tests/rpc_fuzzer/corpus/special_transaction b/libs/binder/tests/rpc_fuzzer/corpus/special_transaction Binary files differnew file mode 100644 index 0000000000..37228ee8cd --- /dev/null +++ b/libs/binder/tests/rpc_fuzzer/corpus/special_transaction |