Index: media/filters/vp9_parser_fuzzertest.cc |
diff --git a/media/filters/vp9_parser_fuzzertest.cc b/media/filters/vp9_parser_fuzzertest.cc |
new file mode 100644 |
index 0000000000000000000000000000000000000000..9ea0164ff9b0b5391601749033ba246fee542cd5 |
--- /dev/null |
+++ b/media/filters/vp9_parser_fuzzertest.cc |
@@ -0,0 +1,34 @@ |
+// Copyright 2016 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#include <stddef.h> |
+#include <stdint.h> |
+ |
+#include "base/numerics/safe_conversions.h" |
+#include "media/filters/ivf_parser.h" |
+#include "media/filters/vp9_parser.h" |
+ |
+// Entry point for LibFuzzer. |
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { |
+ const uint8_t* ivf_payload = nullptr; |
+ media::IvfParser ivf_parser; |
+ media::IvfFileHeader ivf_file_header; |
+ media::IvfFrameHeader ivf_frame_header; |
+ |
+ if (!ivf_parser.Initialize(data, size, &ivf_file_header)) |
+ return 0; |
+ |
+ // Parse until the end of stream/unsupported stream/error in stream is found. |
+ while (ivf_parser.ParseNextFrame(&ivf_frame_header, &ivf_payload)) { |
+ media::Vp9Parser vp9_parser; |
+ media::Vp9FrameHeader vp9_frame_header; |
+ vp9_parser.SetStream(ivf_payload, ivf_frame_header.frame_size); |
+ while (vp9_parser.ParseNextFrame(&vp9_frame_header) == |
+ media::Vp9Parser::kOk) { |
+ // Repeat until all frames processed. |
+ } |
+ } |
+ |
+ return 0; |
+} |