Home | History | Annotate | Download | only in fuzzer
      1 /*
      2  * Copyright 2016 The Android Open Source Project
      3  *
      4  * Licensed under the Apache License, Version 2.0 (the "License");
      5  * you may not use this file except in compliance with the License.
      6  * You may obtain a copy of the License at
      7  *
      8  *      http://www.apache.org/licenses/LICENSE-2.0
      9  *
     10  * Unless required by applicable law or agreed to in writing, software
     11  * distributed under the License is distributed on an "AS IS" BASIS,
     12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     13  * See the License for the specific language governing permissions and
     14  * limitations under the License.
     15  */
     16 
     17 #ifndef VTS_COMPILATION_TOOLS_VTSC_CODE_GEN_FUZZER_HALHIDLFUZZERCODEGEN_H_
     18 #define VTS_COMPILATION_TOOLS_VTSC_CODE_GEN_FUZZER_HALHIDLFUZZERCODEGEN_H_
     19 
     20 #include "code_gen/fuzzer/FuzzerCodeGenBase.h"
     21 
     22 namespace android {
     23 namespace vts {
     24 
     25 // Generates fuzzer code for HIDL HALs.
     26 class HalHidlFuzzerCodeGen : public FuzzerCodeGenBase {
     27  public:
     28   HalHidlFuzzerCodeGen(const ComponentSpecificationMessage &comp_spec)
     29       : FuzzerCodeGenBase(comp_spec) {}
     30 
     31   void GenerateSourceIncludeFiles(Formatter &out) override;
     32   void GenerateUsingDeclaration(Formatter &out) override;
     33   void GenerateGlobalVars(Formatter &out) override;
     34   void GenerateLLVMFuzzerInitialize(Formatter &out) override;
     35   void GenerateLLVMFuzzerTestOneInput(Formatter &out) override;
     36 
     37  private:
     38   // Generates return callback function for HAL function being fuzzed.
     39   void GenerateReturnCallback(Formatter &out,
     40                               const FunctionSpecificationMessage &func_spec);
     41   // Generates function call.
     42   void GenerateHalFunctionCall(Formatter &out,
     43                                const FunctionSpecificationMessage &func_spec);
     44   // Returns name of pointer to hal instance.
     45   std::string GetHalPointerName();
     46   // Returns true if we could omit the callback function and return result
     47   // directly.
     48   bool CanElideCallback(const FunctionSpecificationMessage &func_spec);
     49   // Returns a vector of strings containing type names of function arguments.
     50   std::vector<std::string> GetFuncArgTypes(
     51       const FunctionSpecificationMessage &func_spec);
     52   // Name of return callback. Since we only fuzz one function, we'll need at
     53   // most one return callback.
     54   const std::string return_cb_name = "hidl_cb";
     55 };
     56 
     57 }  // namespace vts
     58 }  // namespace android
     59 
     60 #endif  // VTS_COMPILATION_TOOLS_VTSC_CODE_GEN_FUZZER_HALHIDLFUZZERCODEGEN_H_
     61