OLD | NEW |
1 // Copyright 2016 The Chromium Authors. All rights reserved. | 1 // Copyright 2016 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include <stddef.h> | 5 #include <stddef.h> |
6 | 6 |
7 #include "base/numerics/safe_conversions.h" | 7 #include "base/numerics/safe_conversions.h" |
| 8 #include "base/optional.h" |
8 #include "media/filters/h264_parser.h" | 9 #include "media/filters/h264_parser.h" |
| 10 #include "ui/gfx/geometry/rect.h" |
| 11 #include "ui/gfx/geometry/size.h" |
| 12 |
| 13 static volatile size_t volatile_sink; |
9 | 14 |
10 // Entry point for LibFuzzer. | 15 // Entry point for LibFuzzer. |
11 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { | 16 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { |
12 if (!size) | 17 if (!size) |
13 return 0; | 18 return 0; |
14 | 19 |
15 media::H264Parser parser; | 20 media::H264Parser parser; |
16 parser.SetStream(data, base::checked_cast<off_t>(size)); | 21 parser.SetStream(data, base::checked_cast<off_t>(size)); |
17 | 22 |
18 // Parse until the end of stream/unsupported stream/error in stream is | 23 // Parse until the end of stream/unsupported stream/error in stream is |
19 // found. | 24 // found. |
20 while (true) { | 25 while (true) { |
21 media::H264NALU nalu; | 26 media::H264NALU nalu; |
22 media::H264Parser::Result res = parser.AdvanceToNextNALU(&nalu); | 27 media::H264Parser::Result res = parser.AdvanceToNextNALU(&nalu); |
23 if (res != media::H264Parser::kOk) | 28 if (res != media::H264Parser::kOk) |
24 break; | 29 break; |
25 | 30 |
26 switch (nalu.nal_unit_type) { | 31 switch (nalu.nal_unit_type) { |
27 case media::H264NALU::kIDRSlice: | 32 case media::H264NALU::kIDRSlice: |
28 case media::H264NALU::kNonIDRSlice: { | 33 case media::H264NALU::kNonIDRSlice: { |
29 media::H264SliceHeader shdr; | 34 media::H264SliceHeader shdr; |
30 res = parser.ParseSliceHeader(nalu, &shdr); | 35 res = parser.ParseSliceHeader(nalu, &shdr); |
31 break; | 36 break; |
32 } | 37 } |
33 | 38 |
34 case media::H264NALU::kSPS: { | 39 case media::H264NALU::kSPS: { |
35 int id; | 40 int id; |
36 res = parser.ParseSPS(&id); | 41 res = parser.ParseSPS(&id); |
| 42 if (res != media::H264Parser::kOk) |
| 43 break; |
| 44 const media::H264SPS* sps = parser.GetSPS(id); |
| 45 if (!sps) |
| 46 break; |
| 47 // Also test the SPS helper methods. We make sure that the results are |
| 48 // used so that the calls are not optimized away. |
| 49 base::Optional<gfx::Size> coded_size = sps->GetCodedSize(); |
| 50 volatile_sink = coded_size.value_or(gfx::Size()).ToString().length(); |
| 51 base::Optional<gfx::Rect> visible_rect = sps->GetVisibleRect(); |
| 52 volatile_sink = visible_rect.value_or(gfx::Rect()).ToString().length(); |
37 break; | 53 break; |
38 } | 54 } |
39 | 55 |
40 case media::H264NALU::kPPS: { | 56 case media::H264NALU::kPPS: { |
41 int id; | 57 int id; |
42 res = parser.ParsePPS(&id); | 58 res = parser.ParsePPS(&id); |
43 break; | 59 break; |
44 } | 60 } |
45 | 61 |
46 case media::H264NALU::kSEIMessage: { | 62 case media::H264NALU::kSEIMessage: { |
47 media::H264SEIMessage sei_msg; | 63 media::H264SEIMessage sei_msg; |
48 res = parser.ParseSEI(&sei_msg); | 64 res = parser.ParseSEI(&sei_msg); |
49 break; | 65 break; |
50 } | 66 } |
51 | 67 |
52 default: | 68 default: |
53 // Skip any other NALU. | 69 // Skip any other NALU. |
54 break; | 70 break; |
55 } | 71 } |
56 if (res != media::H264Parser::kOk) | 72 if (res != media::H264Parser::kOk) |
57 break; | 73 break; |
58 } | 74 } |
59 | 75 |
60 return 0; | 76 return 0; |
61 } | 77 } |
OLD | NEW |