1 /*
2 * Copyright (c) 2024 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15 #include <cstddef>
16 #include <cstdint>
17
18 #include "native_avcodec_videoencoder.h"
19 #include "native_averrors.h"
20 #include "native_avcodec_base.h"
21 #include "native_avcapability.h"
22 #include "videoenc_api11_sample.h"
23 #include <fuzzer/FuzzedDataProvider.h>
24 #include <fstream>
25 using namespace std;
26 using namespace OHOS;
27 using namespace OHOS::Media;
28 #define FUZZ_PROJECT_NAME "encoderapi11_fuzzer"
29
SaveCorpus(const uint8_t * data,size_t size,const std::string & filename)30 void SaveCorpus(const uint8_t *data, size_t size, const std::string& filename)
31 {
32 std::ofstream file(filename, std::ios::out | std::ios::binary);
33 if (file.is_open()) {
34 file.write(reinterpret_cast<const char*>(data), size);
35 file.close();
36 }
37 }
RunNormalEncoder()38 void RunNormalEncoder()
39 {
40 auto vEncSample = make_unique<VEncAPI11FuzzSample>();
41 int32_t ret = vEncSample->CreateVideoEncoder();
42 if (ret != 0) {
43 return;
44 }
45 vEncSample->SetVideoEncoderCallback();
46 vEncSample->ConfigureVideoEncoder();
47 vEncSample->StartVideoEncoder();
48 vEncSample->WaitForEOS();
49
50 auto vEncSampleSurf = make_unique<VEncAPI11FuzzSample>();
51 vEncSampleSurf->surfInput = true;
52 ret = vEncSampleSurf->CreateVideoEncoder();
53 if (ret != 0) {
54 return;
55 }
56 vEncSampleSurf->SetVideoEncoderCallback();
57 vEncSampleSurf->ConfigureVideoEncoder();
58 vEncSampleSurf->StartVideoEncoder();
59 vEncSampleSurf->WaitForEOS();
60 }
61
62 bool g_needRunNormalEncoder = true;
63 namespace OHOS {
EncoderAPI11FuzzTest(const uint8_t * data,size_t size)64 bool EncoderAPI11FuzzTest(const uint8_t *data, size_t size)
65 {
66 if (size < sizeof(int32_t)) {
67 return false;
68 }
69 std::string filename = "/data/test/corpus-EncoderAPI11FuzzTest";
70 SaveCorpus(data, size, filename);
71 if (g_needRunNormalEncoder) {
72 g_needRunNormalEncoder = false;
73 RunNormalEncoder();
74 }
75 bool result = false;
76 FuzzedDataProvider fdp(data, size);
77 int data1 = fdp.ConsumeIntegral<int32_t>();
78 bool data2 = fdp.ConsumeBool();
79 VEncAPI11FuzzSample *vEncSample = new VEncAPI11FuzzSample();
80 vEncSample->fuzzData = data;
81 vEncSample->fuzzSize = size;
82 vEncSample->surfInput = data2;
83 vEncSample->fuzzMode = true;
84 vEncSample->enableRepeat = fdp.ConsumeBool();
85 vEncSample->setMaxCount = fdp.ConsumeBool();
86 vEncSample->defaultRangeFlag = fdp.ConsumeIntegral<uint32_t>();
87 vEncSample->defaultColorPrimaries = fdp.ConsumeIntegral<uint32_t>();
88 vEncSample->defaultTransferCharacteristics = fdp.ConsumeIntegral<uint32_t>();
89 vEncSample->defaultMatarixCoefficients = fdp.ConsumeIntegral<uint32_t>();
90 vEncSample->defaultKeyFrameInterval = fdp.ConsumeIntegral<uint32_t>();
91 vEncSample->defaultBitrateMode = fdp.ConsumeIntegral<uint32_t>();
92 vEncSample->defaultBitRate = fdp.ConsumeIntegral<uint32_t>();
93 vEncSample->defaultQuality = fdp.ConsumeIntegral<uint32_t>();
94 vEncSample->defaultFrameAfter = fdp.ConsumeIntegral<int32_t>();
95 vEncSample->defaultMaxCount = fdp.ConsumeIntegral<int32_t>();
96 int32_t ret = vEncSample->CreateVideoEncoder();
97 if (ret != 0) {
98 delete vEncSample;
99 return true;
100 }
101 vEncSample->SetVideoEncoderCallback();
102 vEncSample->ConfigureVideoEncoder();
103 vEncSample->StartVideoEncoder();
104 vEncSample->SetParameter(data1);
105 vEncSample->WaitForEOS();
106 delete vEncSample;
107 return result;
108 }
109 } // namespace OHOS
110
111 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)112 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
113 {
114 /* Run your code on data */
115 OHOS::EncoderAPI11FuzzTest(data, size);
116 return 0;
117 }
118