/* * Copyright (c) 2021 The WebRTC project authors. All Rights Reserved. * * Use of this source code is governed by a BSD-style license * that can be found in the LICENSE file in the root of the source * tree. An additional intellectual property rights grant can be found * in the file PATENTS. All contributing project authors may * be found in the AUTHORS file in the root of the source tree. */ #include #include #include "absl/strings/string_view.h" #include "pc/test/integration_test_helpers.h" namespace webrtc { class FuzzerTest : public PeerConnectionIntegrationBaseTest { public: FuzzerTest() : PeerConnectionIntegrationBaseTest(SdpSemantics::kUnifiedPlan) {} void RunNegotiateCycle(absl::string_view message) { CreatePeerConnectionWrappers(); // Note - we do not do test.ConnectFakeSignaling(); all signals // generated are discarded. auto srd_observer = rtc::make_ref_counted(); SdpParseError error; std::unique_ptr sdp( CreateSessionDescription("offer", std::string(message), &error)); caller()->pc()->SetRemoteDescription(std::move(sdp), srd_observer); // Wait a short time for observer to be called. Timeout is short // because the fuzzer should be trying many branches. EXPECT_TRUE_WAIT(srd_observer->called(), 100); // If set-remote-description was successful, try to answer. auto sld_observer = rtc::make_ref_counted(); if (srd_observer->error().ok()) { caller()->pc()->SetLocalDescription(sld_observer); EXPECT_TRUE_WAIT(sld_observer->called(), 100); } // If there is an EXPECT failure, die here. RTC_CHECK(!HasFailure()); } // This test isn't using the test definition macros, so we have to // define the TestBody() function, even though we don't need it. void TestBody() override {} }; void FuzzOneInput(const uint8_t* data, size_t size) { if (size > 16384) { return; } FuzzerTest test; test.RunNegotiateCycle( absl::string_view(reinterpret_cast(data), size)); } } // namespace webrtc