1 /*
2 * Copyright (C) 2019 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17 #include <fuzzer/FuzzedDataProvider.h>
18 #include <cmath>
19 #include <cstdlib>
20 #include <cstring>
21 #include <ctime>
22 #include "FormatConvert.h"
23
LLVMFuzzerTestOneInput(const uint8_t * data,std::size_t size)24 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, std::size_t size) {
25 // 1 random value (4bytes) + min imagesize = 16*2 times bytes per pixel (worse case 2)
26 if (size < (4 + 16 * 2 * 2)) {
27 return 0;
28 }
29 FuzzedDataProvider fdp(data, size);
30 std::size_t image_pixel_size = size - 4;
31 image_pixel_size = (image_pixel_size & INT_MAX) / 2;
32
33 // API have a requirement that width must be divied by 16 except yuyvtorgb
34 int min_height = 2;
35 int max_height = (image_pixel_size / 16);
36 int height = fdp.ConsumeIntegralInRange<uint32_t>(min_height, max_height);
37 height &= ~(1); // must be even number
38 int width = (image_pixel_size / height) & ~(0xF); // must be divisible by 16
39
40 uint8_t* src = (uint8_t*)(data + 4);
41 uint32_t* tgt = (uint32_t*)malloc(sizeof(uint32_t) * image_pixel_size);
42
43 #ifdef COPY_NV21_TO_RGB32
44 android::hardware::automotive::evs::common::Utils::copyNV21toRGB32(width, height, src, tgt,
45 width);
46 #elif COPY_NV21_TO_BGR32
47 android::hardware::automotive::evs::common::Utils::copyNV21toBGR32(width, height, src, tgt,
48 width);
49 #elif COPY_YV12_TO_RGB32
50 android::hardware::automotive::evs::common::Utils::copyYV12toRGB32(width, height, src, tgt,
51 width);
52 #elif COPY_YV12_TO_BGR32
53 android::hardware::automotive::evs::common::Utils::copyYV12toBGR32(width, height, src, tgt,
54 width);
55 #elif COPY_YUYV_TO_RGB32
56 android::hardware::automotive::evs::common::Utils::copyYUYVtoRGB32(width, height, src, width,
57 tgt, width);
58 #elif COPY_YUYV_TO_BGR32
59 android::hardware::automotive::evs::common::Utils::copyYUYVtoBGR32(width, height, src, width,
60 tgt, width);
61 #endif
62
63 free(tgt);
64
65 return 0;
66 }
67