From 26a029d407be480d791972afb5975cf62c9360a6 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Fri, 19 Apr 2024 02:47:55 +0200 Subject: Adding upstream version 124.0.1. Signed-off-by: Daniel Baumann --- dom/media/fuzz/FuzzMedia.cpp | 66 ++++++++++++++++++++++++++++++++++++++++++++ dom/media/fuzz/moz.build | 29 +++++++++++++++++++ 2 files changed, 95 insertions(+) create mode 100644 dom/media/fuzz/FuzzMedia.cpp create mode 100644 dom/media/fuzz/moz.build (limited to 'dom/media/fuzz') diff --git a/dom/media/fuzz/FuzzMedia.cpp b/dom/media/fuzz/FuzzMedia.cpp new file mode 100644 index 0000000000..add6e14486 --- /dev/null +++ b/dom/media/fuzz/FuzzMedia.cpp @@ -0,0 +1,66 @@ +/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ +/* This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ + +#include "ADTSDemuxer.h" +#include "Benchmark.h" +#include "BufferMediaResource.h" +#include "FlacDemuxer.h" +#include "FuzzingInterface.h" +#include "mozilla/AbstractThread.h" +#include "mozilla/SpinEventLoopUntil.h" +#include "MP3Demuxer.h" +#include "MP4Demuxer.h" +#include "OggDemuxer.h" +#include "systemservices/MediaUtils.h" +#include "WaveDemuxer.h" +#include "WebMDemuxer.h" + +using namespace mozilla; + +class FuzzRunner { + public: + explicit FuzzRunner(Benchmark* aBenchmark) : mBenchmark(aBenchmark) {} + + void Run() { + // Assert we're on the main thread, otherwise `done` must be synchronized. + MOZ_ASSERT(NS_IsMainThread()); + bool done = false; + + mBenchmark->Init(); + mBenchmark->Run()->Then( + // Non DocGroup-version of AbstractThread::MainThread() is fine for + // testing. + AbstractThread::MainThread(), __func__, + [&](uint32_t aDecodeFps) { done = true; }, [&]() { done = true; }); + + // Wait until benchmark completes. + SpinEventLoopUntil("FuzzRunner::Run"_ns, [&]() { return done; }); + return; + } + + private: + RefPtr mBenchmark; +}; + +#define MOZ_MEDIA_FUZZER(_name) \ + static int FuzzingRunMedia##_name(const uint8_t* data, size_t size) { \ + if (!size) { \ + return 0; \ + } \ + RefPtr resource = \ + new BufferMediaResource(data, size); \ + FuzzRunner runner(new Benchmark(new _name##Demuxer(resource))); \ + runner.Run(); \ + return 0; \ + } \ + MOZ_FUZZING_INTERFACE_RAW(nullptr, FuzzingRunMedia##_name, Media##_name); + +MOZ_MEDIA_FUZZER(ADTS); +MOZ_MEDIA_FUZZER(Flac); +MOZ_MEDIA_FUZZER(MP3); +MOZ_MEDIA_FUZZER(MP4); +MOZ_MEDIA_FUZZER(Ogg); +MOZ_MEDIA_FUZZER(WAV); +MOZ_MEDIA_FUZZER(WebM); diff --git a/dom/media/fuzz/moz.build b/dom/media/fuzz/moz.build new file mode 100644 index 0000000000..f672bbf93c --- /dev/null +++ b/dom/media/fuzz/moz.build @@ -0,0 +1,29 @@ +# -*- Mode: python; indent-tabs-mode: nil; tab-width: 40 -*- +# vim: set filetype=python: +# This Source Code Form is subject to the terms of the Mozilla Public +# License, v. 2.0. If a copy of the MPL was not distributed with this +# file, You can obtain one at http://mozilla.org/MPL/2.0/. + +Library("FuzzingMedia") + +SOURCES += [ + "FuzzMedia.cpp", +] + +include("/ipc/chromium/chromium-config.mozbuild") + +LOCAL_INCLUDES += [ + "/dom/media", + "/dom/media/encoder", + "/dom/media/gmp", + "/dom/media/hls", + "/dom/media/mp4", + "/dom/media/ogg", + "/dom/media/platforms", + "/dom/media/platforms/agnostic", +] + +FINAL_LIBRARY = "xul-gtest" + +# Add libFuzzer configuration directives +include("/tools/fuzzing/libfuzzer-config.mozbuild") -- cgit v1.2.3