1 /*
2 * Copyright (c) 2025 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15 #include <cstddef>
16 #include <cstdint>
17 #include "native_avcodec_videodecoder.h"
18 #include "native_averrors.h"
19 #include "native_avcodec_base.h"
20 #include "syncdecoder_sample.h"
21 #include "native_avcapability.h"
22 #include <fuzzer/FuzzedDataProvider.h>
23 #include <fstream>
24 #include <cstring>
25 using namespace std;
26 using namespace OHOS;
27 using namespace OHOS::Media;
28 #define FUZZ_PROJECT_NAME "syncdecoder_fuzzer"
29
30 constexpr uint32_t DEFAULT_WIDTH = 1920;
31 constexpr uint32_t DEFAULT_HEIGHT = 1080;
32 constexpr double DEFAULT_FRAME_RATE = 30.0;
33 constexpr int32_t ONE = 1;
34 constexpr int32_t TWO = 2;
35 constexpr int32_t THREE = 3;
36 constexpr int32_t FOUR = 4;
37 constexpr int32_t FIVE = 5;
38 constexpr int32_t SIX = 6;
39 constexpr int32_t SEVEN = 7;
40 constexpr int32_t EIGHT = 8;
41 OH_AVCapability *cap = nullptr;
42 VDecSyncSample *g_vDecSample = nullptr;
43 string g_codeName = "";
44
45 namespace OHOS {
SaveCorpus(const uint8_t * data,size_t size,const std::string & filename)46 void SaveCorpus(const uint8_t *data, size_t size, const std::string& filename)
47 {
48 std::ofstream file(filename, std::ios::out | std::ios::binary);
49 if (file.is_open()) {
50 file.write(reinterpret_cast<const char*>(data), size);
51 file.close();
52 }
53 }
54
GetcodeName(const char * mimeName,OH_AVCodecCategory category)55 string GetcodeName(const char* mimeName, OH_AVCodecCategory category)
56 {
57 cap = OH_AVCodec_GetCapabilityByCategory(mimeName, false, category);
58 if (cap == nullptr) {
59 return "";
60 }
61 return OH_AVCapability_GetName(cap);
62 }
63
CodepType()64 void CodepType()
65 {
66 if (g_vDecSample->codecType == ONE) {
67 g_codeName = GetcodeName(OH_AVCODEC_MIMETYPE_VIDEO_AVC, HARDWARE);
68 } else if (g_vDecSample->codecType == TWO) {
69 g_codeName = GetcodeName(OH_AVCODEC_MIMETYPE_VIDEO_AVC, SOFTWARE);
70 } else if (g_vDecSample->codecType == THREE) {
71 g_codeName = GetcodeName(OH_AVCODEC_MIMETYPE_VIDEO_HEVC, HARDWARE);
72 } else if (g_vDecSample->codecType == FOUR) {
73 g_codeName = GetcodeName(OH_AVCODEC_MIMETYPE_VIDEO_HEVC, SOFTWARE);
74 } else if (g_vDecSample->codecType == FIVE) {
75 g_codeName = GetcodeName(OH_AVCODEC_MIMETYPE_VIDEO_VVC, HARDWARE);
76 } else if (g_vDecSample->codecType == SIX) {
77 g_codeName = GetcodeName(OH_AVCODEC_MIMETYPE_VIDEO_H263, SOFTWARE);
78 } else if (g_vDecSample->codecType == SEVEN) {
79 g_codeName = GetcodeName(OH_AVCODEC_MIMETYPE_VIDEO_MPEG2, SOFTWARE);
80 } else if (g_vDecSample->codecType == EIGHT) {
81 g_codeName = GetcodeName(OH_AVCODEC_MIMETYPE_VIDEO_MPEG4_PART2, SOFTWARE);
82 }
83 }
84
DecoderSyncFuzzTest(const uint8_t * data,size_t size)85 bool DecoderSyncFuzzTest(const uint8_t *data, size_t size)
86 {
87 if (size < sizeof(int32_t)) {
88 return false;
89 }
90 std::string filename = "/data/test/corpus-SyncDecoderFuzzTest";
91 SaveCorpus(data, size, filename);
92 FuzzedDataProvider fdp(data, size);
93 int data0 = fdp.ConsumeIntegral<int32_t>();
94 g_vDecSample = new VDecSyncSample();
95 g_vDecSample->codecType = fdp.ConsumeIntegralInRange<int32_t>(ONE, EIGHT);
96 CodepType();
97 g_vDecSample->sfOutput = fdp.ConsumeBool();
98 g_vDecSample->defaultWidth = DEFAULT_WIDTH;
99 g_vDecSample->defaultHeight = DEFAULT_HEIGHT;
100 g_vDecSample->defaultFrameRate = DEFAULT_FRAME_RATE;
101 g_vDecSample->enbleSyncMode = 1;
102 g_vDecSample->enbleBlankFrame = fdp.ConsumeIntegral<int>();
103 g_vDecSample->syncInputWaitTime = fdp.ConsumeIntegral<int64_t>();
104 g_vDecSample->syncOutputWaitTime = 1;
105 g_vDecSample->renderTimestampNs = fdp.ConsumeIntegral<int64_t>();
106 g_vDecSample->isRenderAttime = fdp.ConsumeBool();
107 int32_t ret = g_vDecSample->CreateVideoDecoder(g_codeName);
108 if (ret != AV_ERR_OK) {
109 delete g_vDecSample;
110 g_vDecSample = nullptr;
111 return false;
112 }
113 if (g_vDecSample->ConfigureVideoDecoder() !=AV_ERR_OK) {
114 delete g_vDecSample;
115 g_vDecSample = nullptr;
116 return false;
117 }
118 if (g_vDecSample->sfOutput) {
119 g_vDecSample->DecodeSetSurface();
120 }
121 if (g_vDecSample->Start() != AV_ERR_OK) {
122 delete g_vDecSample;
123 g_vDecSample = nullptr;
124 return false;
125 }
126 g_vDecSample->SyncInputFuncFuzz(data, size);
127 g_vDecSample->SyncOutputFuncFuzz();
128 g_vDecSample->SetParameter(data0);
129 g_vDecSample->Flush();
130 g_vDecSample->Stop();
131 g_vDecSample->Reset();
132 delete g_vDecSample;
133 g_vDecSample = nullptr;
134 return true;
135 }
136 } // namespace OHOS
137
138 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)139 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
140 {
141 /* Run your code on data */
142 OHOS::DecoderSyncFuzzTest(data, size);
143 return 0;
144 }
145