1 /*
2 * Copyright (c) 2025 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15 #include <cstddef>
16 #include <cstdint>
17
18 #include "native_avcodec_videoencoder.h"
19 #include "native_averrors.h"
20 #include "native_avcodec_base.h"
21 #include "native_avcapability.h"
22 #include "videoenc_sample.h"
23 #include <fuzzer/FuzzedDataProvider.h>
24 #include <fstream>
25 using namespace std;
26 using namespace OHOS;
27 using namespace OHOS::Media;
28 #define FUZZ_PROJECT_NAME "encoderapi11_fuzzer"
29
SaveCorpus(const uint8_t * data,size_t size,const std::string & filename)30 void SaveCorpus(const uint8_t *data, size_t size, const std::string& filename)
31 {
32 std::ofstream file(filename, std::ios::out | std::ios::binary);
33 if (file.is_open()) {
34 file.write(reinterpret_cast<const char*>(data), size);
35 file.close();
36 }
37 }
RunNormalEncoder()38 void RunNormalEncoder()
39 {
40 auto vEncSample = make_unique<VEncNdkFuzzSample>();
41 int32_t ret = vEncSample->CreateVideoEncoder();
42 if (ret != 0) {
43 return;
44 }
45 vEncSample->SetVideoEncoderCallback();
46 vEncSample->ConfigureVideoEncoder();
47 vEncSample->StartVideoEncoder();
48 vEncSample->WaitForEOS();
49
50 auto vEncSampleSurf = make_unique<VEncNdkFuzzSample>();
51 vEncSampleSurf->surfInput = true;
52 ret = vEncSampleSurf->CreateVideoEncoder();
53 if (ret != 0) {
54 return;
55 }
56 vEncSampleSurf->SetVideoEncoderCallback();
57 vEncSampleSurf->ConfigureVideoEncoder();
58 vEncSampleSurf->StartVideoEncoder();
59 vEncSampleSurf->WaitForEOS();
60 }
61
62 bool g_needRunNormalEncoder = true;
63 namespace OHOS {
EncoderAPI10FuzzTest(const uint8_t * data,size_t size)64 bool EncoderAPI10FuzzTest(const uint8_t *data, size_t size)
65 {
66 if (size < sizeof(int32_t)) {
67 return false;
68 }
69 std::string filename = "/data/test/corpus-EncoderAPI10H2658BitFuzzTest";
70 SaveCorpus(data, size, filename);
71 if (g_needRunNormalEncoder) {
72 g_needRunNormalEncoder = false;
73 RunNormalEncoder();
74 }
75 bool result = false;
76 FuzzedDataProvider fdp(data, size);
77 int data1 = fdp.ConsumeIntegral<int32_t>();
78 bool data2 = fdp.ConsumeBool();
79 VEncNdkFuzzSample *vEncSample = new VEncNdkFuzzSample();
80 vEncSample->fuzzMode = true;
81 vEncSample->fuzzData = data;
82 vEncSample->fuzzSize = size;
83 vEncSample->surfInput = data2;
84 int32_t ret = vEncSample->CreateVideoEncoder();
85 if (ret != 0) {
86 delete vEncSample;
87 return true;
88 }
89 vEncSample->SetVideoEncoderCallback();
90 vEncSample->ConfigureVideoEncoder();
91 vEncSample->StartVideoEncoder();
92 vEncSample->SetParameterFuzz(data1);
93 vEncSample->WaitForEOS();
94 delete vEncSample;
95 return result;
96 }
97 } // namespace OHOS
98
99 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)100 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
101 {
102 /* Run your code on data */
103 OHOS::EncoderAPI10FuzzTest(data, size);
104 return 0;
105 }
106