commit 2a4e959a678cd162246d908594af16b3fa97c576
author Ayushi Khopkar <ayushi.khopkar@ittiam.com> Fri Aug 06 16:01:20 2021 +0530
committer Ayushi Khopkar <ayushi.khopkar@ittiam.com> Thu Apr 28 14:59:57 2022 +0530
tree e32113ff7cbe3ab1a505b403479f2de8ac831488
parent 0ef532f999c5813cf51431684ae9d4c56672e081

Bug fix for libmediautils_fuzzer_scheduling_policy_service

Test: ./libmediautils_fuzzer_scheduling_policy_service clusterfuzz-testcase-minimized-libmediautils_fuzzer_scheduling_policy_service-5735758790524928
Bug: 194773741

Change-Id: I167e2224bdd5d0792fce493fc1554e7be7ff5519

media/utils/fuzzers/SchedulingPolicyServiceFuzz.cpp

diff --git a/media/utils/fuzzers/SchedulingPolicyServiceFuzz.cpp b/media/utils/fuzzers/SchedulingPolicyServiceFuzz.cpp
index 130feee..32fc3be 100644
--- a/media/utils/fuzzers/SchedulingPolicyServiceFuzz.cpp
+++ b/media/utils/fuzzers/SchedulingPolicyServiceFuzz.cpp
@@ -34,11 +34,16 @@
     const sp<IServiceManager> sm(defaultServiceManager());
     if (sm != nullptr) {
         const String16 name("batterystats");
-        batteryStatService = checked_interface_cast<IBatteryStats>(sm->checkService(name));
-        if (batteryStatService == nullptr) {
+        sp<IBinder> obj = sm->checkService(name);
+        if (!obj) {
             ALOGW("batterystats service unavailable!");
             return nullptr;
         }
+        batteryStatService = checked_interface_cast<IBatteryStats>(obj);
+        if (batteryStatService == nullptr) {
+            ALOGW("batterystats service interface is invalid");
+            return nullptr;
+        }
     }
     return batteryStatService;
 }