Add additional 2 binder fuzzers
This CL aims to add an additional set of fuzzers for binder, focusing
on BufferedTextOutput and MemoryDealer.
Test: These fuzzers were tested on a Pixel 3a for a few million
iterations without fuzzer-side crashes.
Signed-off-by: Michael Ensing <michael.ensing@leviathansecurity.com>
Change-Id: If7493ce24c78267459696a706dd67c015cf33080
diff --git a/libs/binder/tests/fuzzers/Android.bp b/libs/binder/tests/fuzzers/Android.bp
index 46379fc..fa387df 100644
--- a/libs/binder/tests/fuzzers/Android.bp
+++ b/libs/binder/tests/fuzzers/Android.bp
@@ -64,3 +64,18 @@
defaults: ["binder_fuzz_defaults"],
srcs: ["TextOutputFuzz.cpp"],
}
+
+cc_fuzz {
+ name: "binder_bufferedTextOutputFuzz",
+ include_dirs: [
+ "frameworks/native/libs/binder",
+ ],
+ defaults: ["binder_fuzz_defaults"],
+ srcs: ["BufferedTextOutputFuzz.cpp"],
+}
+
+cc_fuzz {
+ name: "binder_memoryDealerFuzz",
+ defaults: ["binder_fuzz_defaults"],
+ srcs: ["MemoryDealerFuzz.cpp"],
+}