Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 635187ea authored by Santiago Seifert's avatar Santiago Seifert Committed by Automerger Merge Worker
Browse files

Merge "Adding AIDL fuzzer for MediaExtractorService" am: 483e70dc

parents fbb39a4b 483e70dc
Loading
Loading
Loading
Loading
+22 −0
Original line number Original line Diff line number Diff line
@@ -89,3 +89,25 @@ prebuilt_etc {
        "code_coverage.policy",
        "code_coverage.policy",
    ],
    ],
}
}

cc_fuzz {
    name: "mediaextractor_service_fuzzer",
    shared_libs: [
        "libmedia",
        "libmediaextractorservice",
        "libmediautils",
        "liblog",
        "libavservices_minijail",
    ],
    defaults: [
        "service_fuzzer_defaults",
        "fuzzer_disable_leaks",
    ],
    srcs: ["fuzzers/MediaExtractorServiceFuzzer.cpp"],
    fuzz_config: {
        cc: [
            "android-media-playback+bugs@google.com",
        ],
        triage_assignee: "waghpawan@google.com",
    },
}
 No newline at end of file
+28 −0
Original line number Original line Diff line number Diff line
/*
 * Copyright (C) 2023 The Android Open Source Project
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
#include <fuzzbinder/libbinder_driver.h>

#include "MediaExtractorService.h"

using ::android::fuzzService;
using ::android::sp;
using ::android::MediaExtractorService;

extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
    auto service = sp<MediaExtractorService>::make();
    fuzzService(service, FuzzedDataProvider(data, size));
    return 0;
}