commit 28f8142b87ac75f7f2fc835a253e97455b084695
author Steven Moreland <smoreland@google.com> Thu Oct 03 10:40:59 2019 -0700
committer Steven Moreland <smoreland@google.com> Thu Oct 03 10:49:47 2019 -0700
tree aaa8c05ef43fe1d1945b2430818d750f1afda61e
parent d7b1f8a732d79022fc7fb60774e9123d5000809c

binder_parcel_fuzzer: also fuzz libbinder_ndk

Bug: 131861045
Test: for a few minutes:
    m SANITIZE_HOST=address binder_parcel_fuzzer && \
        $ANDROID_HOST_OUT/fuzz/x86_64/binder_parcel_fuzzer/binder_parcel_fuzzer

Change-Id: If9072405c5062cb982545dc591409fc03ba4bc29

libs/binder/fuzzer/main.cpp

diff --git a/libs/binder/fuzzer/main.cpp b/libs/binder/fuzzer/main.cpp
index 03fde3a..369aa34 100644
--- a/libs/binder/fuzzer/main.cpp
+++ b/libs/binder/fuzzer/main.cpp
@@ -16,6 +16,7 @@
 #define FUZZ_LOG_TAG "main"
 
 #include "binder.h"
+#include "binder_ndk.h"
 #include "hwbinder.h"
 #include "util.h"
 
@@ -50,6 +51,7 @@
     // although they will do completely different things, might as well fuzz both
     doFuzz<::android::hardware::Parcel>(HWBINDER_PARCEL_READ_FUNCTIONS, input, instructions);
     doFuzz<::android::Parcel>(BINDER_PARCEL_READ_FUNCTIONS, input, instructions);
+    doFuzz<NdkParcelAdapter>(BINDER_NDK_PARCEL_READ_FUNCTIONS, input, instructions);
 }
 
 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {