summaryrefslogtreecommitdiff
path: root/system/gd/hal/fuzz/fuzz_hci_hal.h
blob: 5a737844048c7114526ef61d413822c8e432dde4 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
/*
 * Copyright 2020 The Android Open Source Project
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#pragma once

#include "fuzz/helpers.h"
#include "hal/hci_hal.h"
#include "hci/hci_packets.h"

namespace bluetooth {
namespace hal {
namespace fuzz {

class FuzzHciHal : public HciHal {
 public:
  void registerIncomingPacketCallback(HciHalCallbacks* callbacks) override;
  void unregisterIncomingPacketCallback() override;

  void sendHciCommand(HciPacket command) override;
  void sendAclData(HciPacket packet) override {}
  void sendScoData(HciPacket packet) override {}
  void sendIsoData(HciPacket packet) override {}

  void injectArbitrary(FuzzedDataProvider& fdp);

  std::string ToString() const override {
    return "HciHalFuzz";
  }

  static const ModuleFactory Factory;

 protected:
  void ListDependencies(ModuleList* list) const override {}
  void Start() override {}
  void Stop() override {}

 private:
  void injectAclData(std::vector<uint8_t> data);
  void injectHciEvent(std::vector<uint8_t> data);
  void injectScoData(std::vector<uint8_t> data);
  void injectIsoData(std::vector<uint8_t> data);

  HciHalCallbacks* callbacks_;
  hci::OpCode waiting_opcode_;
  bool waiting_for_status_;
};

}  // namespace fuzz
}  // namespace hal
}  // namespace bluetooth