1 /*
2 * Copyright (c) 2025 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15 #include <cstddef>
16 #include <cstdint>
17 #include <fuzzer/FuzzedDataProvider.h>
18 #include "native_avcapability.h"
19 #include "venc_async_sample.h"
20
21 using namespace std;
22 using namespace OHOS;
23 using namespace OHOS::MediaAVCodec;
24 #define FUZZ_PROJECT_NAME "avcapability_fuzzer"
25
26 std::string sourcePath = "/data/test/media/1280_720_nv.yuv";
27 uint32_t DEFAULT_WIDTH = 1280;
28 uint32_t DEFAULT_HEIGHT = 720;
29
30 std::shared_ptr<VideoEncAsyncSample> videoEnc = nullptr;
31 std::shared_ptr<FormatMock> format = nullptr;
32 std::shared_ptr<VEncCallbackTest> vencCallback = nullptr;
33
SetAsync()34 void SetAsync()
35 {
36 format->PutIntValue(MediaDescriptionKey::MD_KEY_WIDTH, DEFAULT_WIDTH);
37 format->PutIntValue(MediaDescriptionKey::MD_KEY_HEIGHT, DEFAULT_HEIGHT);
38 format->PutIntValue(MediaDescriptionKey::MD_KEY_PIXEL_FORMAT, static_cast<int32_t>(VideoPixelFormat::NV12));
39 format->PutIntValue(Media::Tag::AV_CODEC_ENABLE_SYNC_MODE, 0);
40 }
41
EncPrepareSource()42 void EncPrepareSource()
43 {
44 string prefix = "/data/test/media/";
45 string fileName = "outputTest.h264";
46 videoEnc->SetOutPath(prefix + fileName);
47 }
48
VideoEncoderFuzzTest(const uint8_t * data,size_t size)49 bool VideoEncoderFuzzTest(const uint8_t *data, size_t size)
50 {
51 std::shared_ptr<VEncSignal> vencSignal = std::make_shared<VEncSignal>();
52 vencCallback = std::make_shared<VEncCallbackTest>(vencSignal);
53 videoEnc = std::make_shared<VideoEncAsyncSample>(vencSignal);
54 if ((vencCallback == nullptr) || (videoEnc == nullptr)) {
55 return false;
56 }
57
58 format = OHOS::MediaAVCodec::FormatMockFactory::CreateFormat();
59 if (!videoEnc->CreateVideoEncMockByMime(CodecMimeType::VIDEO_AVC.data())) {
60 return false;
61 }
62 videoEnc->SetCallback(vencCallback);
63 SetAsync();
64 FuzzedDataProvider fdp(data, size);
65 uint32_t rangeFlag = fdp.ConsumeIntegral<uint32_t>();
66 format->PutIntValue(MediaDescriptionKey::MD_KEY_RANGE_FLAG, rangeFlag);
67 videoEnc->Configure(format);
68 EncPrepareSource();
69 videoEnc->Prepare();
70 videoEnc->Start();
71
72 format = nullptr;
73 videoEnc = nullptr;
74 vencCallback = nullptr;
75 return true;
76 }
77
VideoEncoderResourceFuzzTest(const uint8_t * data,size_t size)78 bool VideoEncoderResourceFuzzTest(const uint8_t *data, size_t size)
79 {
80 std::shared_ptr<OHOS::MediaAVCodec::VEncSignal> vencSignal = std::make_shared<OHOS::MediaAVCodec::VEncSignal>();
81 vencCallback = std::make_shared<OHOS::MediaAVCodec::VEncCallbackTest>(vencSignal);
82 videoEnc = std::make_shared<OHOS::MediaAVCodec::VideoEncAsyncSample>(vencSignal);
83 if ((vencCallback == nullptr) || (videoEnc == nullptr)) {
84 return false;
85 }
86
87 format = FormatMockFactory::CreateFormat();
88 if (!videoEnc->CreateVideoEncMockByMime(CodecMimeType::VIDEO_AVC.data())) {
89 return false;
90 }
91 videoEnc->SetCallback(vencCallback);
92 SetAsync();
93 videoEnc->Configure(format);
94 EncPrepareSource();
95 videoEnc->Prepare();
96 videoEnc->FuzzStart();
97 int ret = videoEnc->InputFuncFUZZ(data, size);
98 if (ret != 0) {
99 return false;
100 }
101
102 videoEnc->Stop();
103 format = nullptr;
104 videoEnc = nullptr;
105 vencCallback = nullptr;
106 return true;
107 }
108
109 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)110 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
111 {
112 /* Run your code on data */
113 VideoEncoderFuzzTest(data, size);
114 VideoEncoderResourceFuzzTest(data, size);
115 return 0;
116 }
117