Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e10b5e42 authored by Pawan Wagh's avatar Pawan Wagh
Browse files

Adding AIDL fuzzer for MediaExtractorService 

Test: m mediaextractor_service_fuzzer && adb sync data && adb shell /data/fuzz/x86_64/mediaextractor_service_fuzzer/mediaextractor_service_fuzzer
Bug: 232439428
Change-Id: I9ccae2bfeaaee9ec32416353930ef9f84e186943
parent 5c455623

services/mediaextractor/Android.bp

+22 −0
Original line number Diff line number Diff line
@@ -89,3 +89,25 @@ prebuilt_etc { 
        "code_coverage.policy",

    ],

}



cc_fuzz {

    name: "mediaextractor_service_fuzzer",

    shared_libs: [

        "libmedia",

        "libmediaextractorservice",

        "libmediautils",

        "liblog",

        "libavservices_minijail",

    ],

    defaults: [

        "service_fuzzer_defaults",

        "fuzzer_disable_leaks",

    ],

    srcs: ["fuzzers/MediaExtractorServiceFuzzer.cpp"],

    fuzz_config: {

        cc: [

            "android-media-playback+bugs@google.com",

        ],

        triage_assignee: "waghpawan@google.com",

    },

}
 
 No newline at end of file

services/mediaextractor/fuzzers/MediaExtractorServiceFuzzer.cpp

0 → 100644
+28 −0
Original line number Diff line number Diff line 
/*

 * Copyright (C) 2023 The Android Open Source Project

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 *

 *      http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 */

#include <fuzzbinder/libbinder_driver.h>



#include "MediaExtractorService.h"



using ::android::fuzzService;

using ::android::sp;

using ::android::MediaExtractorService;



extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {

    auto service = sp<MediaExtractorService>::make();

    fuzzService(service, FuzzedDataProvider(data, size));

    return 0;

}