Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit dfe47c1c authored by Wonsik Kim's avatar Wonsik Kim
Browse files

codec2 hal: fuzzer 

Bug: 251850069
Test: adb shell /data/fuzz/arm64/libcodec2-aidl-fuzzer/vendor/libcodec2-aidl-fuzzer
Change-Id: I2698dfd3a691f070623c17a6b180cfb93dfb03ee
parent 27a3ad12

media/codec2/hal/aidl/Android.bp

+25 −0
Original line number Diff line number Diff line
@@ -150,3 +150,28 @@ cc_defaults { 
        "libcodec2_aidl_client",

    ],

}



cc_fuzz {

    name: "libcodec2-aidl-fuzzer",

    vendor: true,

    srcs: [

        "fuzzer.cpp",

    ],

    defaults: [

        "libcodec2-aidl-defaults",

        "service_fuzzer_defaults",

    ],

    shared_libs: [

        "libcodec2_vndk",



        "libcodec2_soft_avcdec",

        "libcodec2_soft_avcenc",

        "libcodec2_soft_aacdec",

        "libcodec2_soft_aacenc",

    ],

    fuzz_config: {

        cc: [

            "wonsik@google.com",

        ],

    },

}

media/codec2/hal/aidl/fuzzer.cpp

0 → 100644
+35 −0
Original line number Diff line number Diff line 
/*

 * Copyright (C) 2023 The Android Open Source Project

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 *

 *      http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 */

#include <fuzzbinder/libbinder_ndk_driver.h>

#include <fuzzer/FuzzedDataProvider.h>



#include <C2PlatformSupport.h>



#include <android/binder_interface_utils.h>

#include <codec2/aidl/ComponentStore.h>



using aidl::android::hardware::media::c2::utils::ComponentStore;

using android::fuzzService;

using ndk::SharedRefBase;



extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {

    std::shared_ptr<C2ComponentStore> store = ::android::GetCodec2PlatformComponentStore();

    std::shared_ptr<ComponentStore> binder = SharedRefBase::make<ComponentStore>(store);



    fuzzService(binder->asBinder().get(), FuzzedDataProvider(data, size));



    return 0;

}