/* * Copyright (c) 2021 The WebRTC project authors. All Rights Reserved. * * Use of this source code is governed by a BSD-style license * that can be found in the LICENSE file in the root of the source * tree. An additional intellectual property rights grant can be found * in the file PATENTS. All contributing project authors may * be found in the AUTHORS file in the root of the source tree. */ #include "api/array_view.h" #include "api/video/encoded_frame.h" #include "api/video/frame_buffer.h" #include "rtc_base/numerics/sequence_number_unwrapper.h" #include "test/fuzzers/fuzz_data_helper.h" #include "test/scoped_key_value_config.h" namespace webrtc { namespace { class FuzzyFrameObject : public EncodedFrame { public: int64_t ReceivedTime() const override { return 0; } int64_t RenderTime() const override { return 0; } }; constexpr int kFrameIdLength = 1 << 15; } // namespace void FuzzOneInput(const uint8_t* data, size_t size) { if (size > 10000) { return; } test::ScopedKeyValueConfig field_trials; FrameBuffer buffer(/*max_frame_slots=*/100, /*max_decode_history=*/1000, field_trials); test::FuzzDataHelper helper(rtc::MakeArrayView(data, size)); SeqNumUnwrapper unwrapper; while (helper.BytesLeft() > 0) { int action = helper.ReadOrDefaultValue(0) % 6; switch (action) { case 0: { buffer.LastContinuousFrameId(); break; } case 1: { buffer.LastContinuousTemporalUnitFrameId(); break; } case 2: { buffer.DecodableTemporalUnitsInfo(); break; } case 3: { buffer.ExtractNextDecodableTemporalUnit(); break; } case 4: { buffer.DropNextDecodableTemporalUnit(); break; } case 5: { auto frame = std::make_unique(); frame->SetTimestamp(helper.ReadOrDefaultValue(0)); int64_t wire_id = helper.ReadOrDefaultValue(0) & (kFrameIdLength - 1); frame->SetId(unwrapper.Unwrap(wire_id)); frame->is_last_spatial_layer = helper.ReadOrDefaultValue(false); frame->num_references = helper.ReadOrDefaultValue(0) % EncodedFrame::kMaxFrameReferences; for (uint8_t i = 0; i < frame->num_references; ++i) { frame->references[i] = helper.ReadOrDefaultValue(0); } buffer.InsertFrame(std::move(frame)); break; } } } } } // namespace webrtc