1 /*
2 * Copyright (c) 2025 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15 #include <cstddef>
16 #include <cstdint>
17 #include "native_avcodec_videodecoder.h"
18 #include "native_averrors.h"
19 #include "native_avcodec_base.h"
20 #include "syncdecoder_sample.h"
21 #include "native_avcapability.h"
22 #include <fuzzer/FuzzedDataProvider.h>
23 #include <fstream>
24 #include <cstring>
25 using namespace std;
26 using namespace OHOS;
27 using namespace OHOS::Media;
28 #define FUZZ_PROJECT_NAME "syncdecoderconfig_fuzzer"
29
30 OH_AVCapability *cap = nullptr;
31 VDecSyncSample *g_vDecSample = nullptr;
32 constexpr int32_t ONE = 1;
33 constexpr int32_t TWO = 2;
34 constexpr int32_t THREE = 3;
35 constexpr int32_t FOUR = 4;
36 constexpr int32_t FIVE = 5;
37 constexpr int32_t SIX = 6;
38 constexpr int32_t SEVEN = 7;
39 constexpr int32_t EIGHT = 8;
40 string g_codeName = "";
41
42 namespace OHOS {
SaveCorpus(const uint8_t * data,size_t size,const std::string & filename)43 void SaveCorpus(const uint8_t *data, size_t size, const std::string& filename)
44 {
45 std::ofstream file(filename, std::ios::out | std::ios::binary);
46 if (file.is_open()) {
47 file.write(reinterpret_cast<const char*>(data), size);
48 file.close();
49 }
50 }
51
GetCodeName(const char * mimeName,OH_AVCodecCategory category)52 string GetCodeName(const char* mimeName, OH_AVCodecCategory category)
53 {
54 cap = OH_AVCodec_GetCapabilityByCategory(mimeName, false, category);
55 if (cap == nullptr) {
56 return "";
57 }
58 return OH_AVCapability_GetName(cap);
59 }
60
CodepType()61 void CodepType()
62 {
63 if (g_vDecSample->codecType == ONE) {
64 g_codeName = GetCodeName(OH_AVCODEC_MIMETYPE_VIDEO_AVC, HARDWARE);
65 } else if (g_vDecSample->codecType == TWO) {
66 g_codeName = GetCodeName(OH_AVCODEC_MIMETYPE_VIDEO_AVC, SOFTWARE);
67 } else if (g_vDecSample->codecType == THREE) {
68 g_codeName = GetCodeName(OH_AVCODEC_MIMETYPE_VIDEO_HEVC, HARDWARE);
69 } else if (g_vDecSample->codecType == FOUR) {
70 g_codeName = GetCodeName(OH_AVCODEC_MIMETYPE_VIDEO_HEVC, SOFTWARE);
71 } else if (g_vDecSample->codecType == FIVE) {
72 g_codeName = GetCodeName(OH_AVCODEC_MIMETYPE_VIDEO_VVC, HARDWARE);
73 } else if (g_vDecSample->codecType == SIX) {
74 g_codeName = GetCodeName(OH_AVCODEC_MIMETYPE_VIDEO_H263, SOFTWARE);
75 } else if (g_vDecSample->codecType == SEVEN) {
76 g_codeName = GetCodeName(OH_AVCODEC_MIMETYPE_VIDEO_MPEG2, SOFTWARE);
77 } else if (g_vDecSample->codecType == EIGHT) {
78 g_codeName = GetCodeName(OH_AVCODEC_MIMETYPE_VIDEO_MPEG4_PART2, SOFTWARE);
79 }
80 }
81
ReleaseSample()82 void ReleaseSample()
83 {
84 delete g_vDecSample;
85 g_vDecSample = nullptr;
86 }
87
DecoderSyncFuzzTest(const uint8_t * data,size_t size)88 bool DecoderSyncFuzzTest(const uint8_t *data, size_t size)
89 {
90 if (size < sizeof(int32_t)) {
91 return false;
92 }
93 std::string filename = "/data/test/corpus-SyncDecoderFuzzTest";
94 SaveCorpus(data, size, filename);
95 FuzzedDataProvider fdp(data, size);
96 int data0 = fdp.ConsumeIntegral<int32_t>();
97 g_vDecSample = new VDecSyncSample();
98 g_vDecSample->codecType = fdp.ConsumeIntegralInRange<int32_t>(ONE, EIGHT);
99 CodepType();
100 g_vDecSample->sfOutput = fdp.ConsumeBool();
101 g_vDecSample->defaultWidth = fdp.ConsumeIntegral<int64_t>();
102 g_vDecSample->defaultHeight = fdp.ConsumeIntegral<int64_t>();
103 g_vDecSample->defaultFrameRate = fdp.ConsumeIntegral<int64_t>();
104 g_vDecSample->enbleSyncMode = fdp.ConsumeIntegral<int64_t>();
105 g_vDecSample->syncInputWaitTime = fdp.ConsumeIntegral<int64_t>();
106 g_vDecSample->syncOutputWaitTime = 1;
107 g_vDecSample->renderTimestampNs = fdp.ConsumeIntegral<int64_t>();
108 g_vDecSample->isRenderAttime = fdp.ConsumeBool();
109 if (g_vDecSample->enbleSyncMode == 0) {
110 ReleaseSample();
111 return false;
112 }
113 int32_t ret = g_vDecSample->CreateVideoDecoder(g_codeName);
114 if (ret != AV_ERR_OK) {
115 ReleaseSample();
116 return false;
117 }
118 if (g_vDecSample->ConfigureVideoDecoder() != AV_ERR_OK) {
119 ReleaseSample();
120 return false;
121 }
122 if (g_vDecSample->sfOutput) {
123 g_vDecSample->DecodeSetSurface();
124 }
125 if (g_vDecSample->Start() != AV_ERR_OK) {
126 ReleaseSample();
127 return false;
128 }
129 g_vDecSample->SyncInputFuncFuzz(data, size);
130 g_vDecSample->SyncOutputFuncFuzz();
131 g_vDecSample->SetParameter(data0);
132 g_vDecSample->Flush();
133 g_vDecSample->Stop();
134 g_vDecSample->Reset();
135 ReleaseSample();
136 return true;
137 }
138 } // namespace OHOS
139
140 /* Fuzzer entry point */
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)141 extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
142 {
143 /* Run your code on data */
144 OHOS::DecoderSyncFuzzTest(data, size);
145 return 0;
146 }
147