diff options
author | 2022-10-04 23:22:40 +0000 | |
---|---|---|
committer | 2022-10-04 23:48:17 +0000 | |
commit | d1c9464ad4d980d3c681cd1f762ff20a10925b51 (patch) | |
tree | afb31e5f910c247f0940ca500a4348658038d6be /libs/binder/RpcState.cpp | |
parent | 22acd027bae45862ca381c33be41b4112145ee6d (diff) |
libbinder_random_parcel: rand binder returns data
We now have a 'RandomBinder' which can return random
data. For now, this doesn't integrate with random_parcel.h
RandomParcelOptions. This is to reduce complexity and
validate this approach.
Two ideas with this:
- when we're fuzzing AIDL services, complicated random
parcel objects will get passed in (this RandomBinder)
- when we build AIDL fuzzers, we can use 'getRandomBinder'
in order to dependency inject random binders into a
service. This way, we can fuzz them assuming the
dependencies are malicious.
Bug: 241923341
Test: android.hardware.vibrator-service.example_fuzzer (check that
this code actually contributes to coverage)
Change-Id: I118d5c8d7b643fbd77f3771816600f74894e7bab
Diffstat (limited to 'libs/binder/RpcState.cpp')
0 files changed, 0 insertions, 0 deletions