1 /*
2 * Copyright (c) 2025 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include <cstddef>
17 #include <cstdint>
18 #include "native_avcodec_base.h"
19 #include "native_avcodec_videodecoder.h"
20 #include "native_averrors.h"
21 #include "videodec_sample.h"
22
23 #define FUZZ_PROJECT_NAME "mpeg2swdecoderresource_fuzzer"
24
25 using namespace std;
26 using namespace OHOS;
27 using namespace OHOS::Media;
28
29 static VDecFuzzSample *vDecSample = nullptr;
30 constexpr uint32_t DEFAULT_WIDTH = 1920;
31 constexpr uint32_t DEFAULT_HEIGHT = 1080;
32 constexpr double DEFAULT_FRAME_RATE = 30.0;
33
34 namespace OHOS {
ChangeBinaryInData(const uint8_t * data,size_t size)35 bool ChangeBinaryInData(const uint8_t *data, size_t size)
36 {
37 if (!vDecSample) {
38 vDecSample = new VDecFuzzSample();
39 vDecSample->defaultWidth = DEFAULT_WIDTH;
40 vDecSample->defaultHeight = DEFAULT_HEIGHT;
41 vDecSample->defaultFrameRate = DEFAULT_FRAME_RATE;
42 if (vDecSample->CreateVideoDecoder("OH.Media.Codec.Decoder.Video.MPEG2") != AV_ERR_OK) {
43 delete vDecSample;
44 vDecSample = nullptr;
45 return false;
46 }
47 if (vDecSample->ConfigureVideoDecoder() != AV_ERR_OK) {
48 delete vDecSample;
49 vDecSample = nullptr;
50 return false;
51 }
52 if (vDecSample->SetVideoDecoderCallback() != AV_ERR_OK) {
53 delete vDecSample;
54 vDecSample = nullptr;
55 return false;
56 }
57 if (vDecSample->Start() != AV_ERR_OK) {
58 delete vDecSample;
59 vDecSample = nullptr;
60 return false;
61 }
62 }
63 OH_AVErrCode ret = vDecSample->InputFuncFUZZ(data, size);
64 if (ret != AV_ERR_OK) {
65 vDecSample->Flush();
66 vDecSample->Stop();
67 vDecSample->Reset();
68 vDecSample->Release();
69 delete vDecSample;
70 vDecSample = nullptr;
71 return false;
72 }
73 delete vDecSample;
74 vDecSample = nullptr;
75 return true;
76 }
77 } // namespace OHOS
78
79 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)80 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
81 {
82 /* Run your code on data */
83 OHOS::ChangeBinaryInData(data, size);
84 return 0;
85 }
86