1 /*
2 * Copyright (c) 2025 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15 #include <cstddef>
16 #include <cstdint>
17 #include "native_avcodec_videodecoder.h"
18 #include "native_averrors.h"
19 #include "native_avcodec_base.h"
20 #include "videodec_sample.h"
21 #include <fuzzer/FuzzedDataProvider.h>
22 using namespace std;
23 using namespace OHOS;
24 using namespace OHOS::Media;
25 #define FUZZ_PROJECT_NAME "h263swdecoderconfigure_fuzzer"
26 const size_t EXPECT_SIZE = 6;
27 namespace OHOS {
SaveCorpus(const uint8_t * data,size_t size,const std::string & filename)28 void SaveCorpus(const uint8_t *data, size_t size, const std::string& filename)
29 {
30 std::ofstream file(filename, std::ios::out | std::ios::binary);
31 if (file.is_open()) {
32 file.write(reinterpret_cast<const char*>(data), size);
33 file.close();
34 }
35 }
36
H263SwdecoderConfigureFuzzTest(const uint8_t * data,size_t size)37 bool H263SwdecoderConfigureFuzzTest(const uint8_t *data, size_t size)
38 {
39 if (size < EXPECT_SIZE) {
40 return false;
41 }
42 bool result = false;
43 FuzzedDataProvider fdp(data, size);
44 VDecFuzzSample *vDecSample = new VDecFuzzSample();
45 std::string filename = "/data/test/corpus-EncoderAPI11H265BFrame10BitFuzzTest";
46 SaveCorpus(data, size, filename);
47 vDecSample->inpDir = filename.c_str();
48 int32_t lengthMin = 176;
49 int32_t lengthMax = 4096;
50 int32_t frameRateMin = 1;
51 int32_t frameRateMax = 1000;
52 vDecSample->defaultWidth = std::clamp(fdp.ConsumeIntegral<int32_t>(), lengthMin, lengthMax);
53 vDecSample->defaultHeight = std::clamp(fdp.ConsumeIntegral<int32_t>(), lengthMin, lengthMax);
54 vDecSample->defaultFrameRate = std::clamp(fdp.ConsumeIntegral<int32_t>(), frameRateMin, frameRateMax);
55 std::vector<int32_t> rotations = {0, 90, 180, 270};
56 size_t index = fdp.ConsumeIntegralInRange<size_t>(0, rotations.size() - 1);
57 vDecSample->defaultRotation = rotations[index];
58 std::vector<int32_t> pixelFormats = {1, 2, 3, 4, 5};
59 size_t pfIndex = fdp.ConsumeIntegralInRange<size_t>(0, pixelFormats.size() - 1);
60 vDecSample->defaultPixelFormat = pixelFormats[pfIndex];
61 size_t maxSize = std::numeric_limits<size_t>::max();
62 vDecSample->randomName = fdp.ConsumeRandomLengthString(maxSize);
63 vDecSample->randomMime = fdp.ConsumeRandomLengthString(maxSize);
64 if (vDecSample->CreateVideoDecoder("OH.Media.Codec.Decoder.Video.H263") != AV_ERR_OK) {
65 delete vDecSample;
66 return false;
67 }
68 if (vDecSample->ConfigureVideoDecoder() != AV_ERR_OK) {
69 delete vDecSample;
70 return false;
71 }
72 if (vDecSample->SetVideoDecoderCallback() != AV_ERR_OK) {
73 delete vDecSample;
74 return false;
75 }
76 if (vDecSample->StartVideoDecoder() != AV_ERR_OK) {
77 delete vDecSample;
78 return false;
79 }
80 vDecSample->WaitForEOS();
81 vDecSample->Release();
82 delete vDecSample;
83 return result;
84 }
85 } // namespace OHOS
86
87 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)88 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
89 {
90 /* Run your code on data */
91 OHOS::H263SwdecoderConfigureFuzzTest(data, size);
92 return 0;
93 }
94