1 /*
2 * Copyright (c) 2024 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include "video_output_fuzzer.h"
17 #include "camera_device.h"
18 #include "camera_log.h"
19 #include "camera_output_capability.h"
20 #include "capture_scene_const.h"
21 #include <cstdint>
22 #include "input/camera_manager.h"
23 #include "message_parcel.h"
24 #include <cstdint>
25 #include <fuzzer/FuzzedDataProvider.h>
26 #include <memory>
27 #include "token_setproc.h"
28 #include "nativetoken_kit.h"
29 #include "accesstoken_kit.h"
30 #include "securec.h"
31
32 using namespace std;
33
34 namespace OHOS {
35 namespace CameraStandard {
36 static constexpr int32_t MIN_SIZE_NUM = 50;
37
VideoOutputFuzzTest(FuzzedDataProvider & fdp)38 void VideoOutputFuzzer::VideoOutputFuzzTest(FuzzedDataProvider& fdp)
39 {
40 auto manager = CameraManager::GetInstance();
41 auto cameras = manager->GetSupportedCameras();
42 CHECK_RETURN_ELOG(cameras.empty(), "GetSupportedCameras Error");
43 auto s = manager->CreateCaptureSession(SceneMode::VIDEO);
44 s->BeginConfig();
45 auto cap = s->GetCameraOutputCapabilities(cameras[0]);
46 CHECK_RETURN_ELOG(cap.empty(), "GetCameraOutputCapabilities Error");
47 auto vp = cap[0]->GetVideoProfiles();
48 CHECK_RETURN_ELOG(vp.empty(), "GetVideoProfiles Error");
49 sptr<Surface> surface = Surface::CreateSurfaceAsConsumer();
50 auto output = manager->CreateVideoOutput(vp[0], surface);
51 output->Start();
52 output->Stop();
53 output->Resume();
54 output->Pause();
55 output->CreateStream();
56 output->Release();
57 output->GetApplicationCallback();
58 output->GetFrameRateRange();
59 int32_t minFrameRate = fdp.ConsumeIntegral<int32_t>();
60 int32_t maxFrameRate = fdp.ConsumeIntegral<int32_t>();
61 output->SetFrameRateRange(minFrameRate, maxFrameRate);
62 output->SetOutputFormat(fdp.ConsumeIntegral<int32_t>());
63 output->SetFrameRate(minFrameRate, maxFrameRate);
64 output->GetSupportedFrameRates();
65 output->enableMirror(fdp.ConsumeBool());
66 output->IsMirrorSupported();
67 output->GetSupportedVideoMetaTypes();
68 output->AttachMetaSurface(surface, VIDEO_META_MAKER_INFO);
69 int pid = fdp.ConsumeIntegral<int>();
70 output->CameraServerDied(pid);
71 output->canSetFrameRateRange(minFrameRate, maxFrameRate);
72 output->GetVideoRotation(fdp.ConsumeIntegral<int32_t>());
73 output->IsAutoDeferredVideoEnhancementSupported();
74 output->IsAutoDeferredVideoEnhancementEnabled();
75 output->EnableAutoDeferredVideoEnhancement(fdp.ConsumeBool());
76 output->IsVideoStarted();
77 bool boolean = fdp.ConsumeBool();
78 output->IsRotationSupported(boolean);
79 output->SetRotation(fdp.ConsumeIntegral<int32_t>());
80 output->IsAutoVideoFrameRateSupported();
81 output->EnableAutoVideoFrameRate(fdp.ConsumeBool());
82 std::vector<int32_t> supportedRotations;
83 output->GetSupportedRotations(supportedRotations);
84 }
85
Test(uint8_t * data,size_t size)86 void Test(uint8_t* data, size_t size)
87 {
88 FuzzedDataProvider fdp(data, size);
89 if (fdp.remaining_bytes() < MIN_SIZE_NUM) {
90 return;
91 }
92 auto videoOutput = std::make_unique<VideoOutputFuzzer>();
93 if (videoOutput == nullptr) {
94 MEDIA_INFO_LOG("videoPostProcessor is null");
95 return;
96 }
97 videoOutput->VideoOutputFuzzTest(fdp);
98 }
99 } // namespace CameraStandard
100 } // namespace OHOS
101
102 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(uint8_t * data,size_t size)103 extern "C" int LLVMFuzzerTestOneInput(uint8_t* data, size_t size)
104 {
105 OHOS::CameraStandard::Test(data, size);
106 return 0;
107 }