Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 497cc645 authored by Zhaoming Yin's avatar Zhaoming Yin
Browse files

Add fuzzer for FormatConvert 

Bug: 146086281
Test: Follow go/android-fuzzing to build and test

Change-Id: Id94c57ba1b327cd4af2ae72fb0259953fa941d45
parent b524bbb9

automotive/evs/common/utils/default/Android.bp

+1 −0
Original line number Diff line number Diff line
@@ -15,6 +15,7 @@ 
//



cc_library_static {

    host_supported: true,

    name: "android.hardware.automotive.evs@common-default-lib",

    vendor_available: true,

    relative_install_path: "hw",

automotive/evs/common/utils/default/test/fuzz/Android.bp

0 → 100644
+99 −0
Original line number Diff line number Diff line 
//

// Copyright (C) 2019 The Android Open Source Project

//

// Licensed under the Apache License, Version 2.0 (the "License");

// you may not use this file except in compliance with the License.

// You may obtain a copy of the License at

//

//      http://www.apache.org/licenses/LICENSE-2.0

//

// Unless required by applicable law or agreed to in writing, software

// distributed under the License is distributed on an "AS IS" BASIS,

// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

// See the License for the specific language governing permissions and

// limitations under the License.

//



cc_fuzz {

    host_supported: true,

    name : "FormatConvertFuzzer_copyNV21toRGB32",

    srcs: [

        "FormatConvertFuzzer.cpp",

    ],

    static_libs: [

        "android.hardware.automotive.evs@common-default-lib"

    ],

    cflags: [

        "-DCOPY_NV21_TO_RGB32",

    ],

}



cc_fuzz {

    host_supported: true,

    name : "FormatConvertFuzzer_copyNV21toBGR32",

    srcs: [

        "FormatConvertFuzzer.cpp",

    ],

    static_libs: [

        "android.hardware.automotive.evs@common-default-lib"

    ],

    cflags: [

        "-DCOPY_NV21_TO_BGR32",

    ],

}



cc_fuzz {

    host_supported: true,

    name : "FormatConvertFuzzer_copyYV12toRGB32",

    srcs: [

        "FormatConvertFuzzer.cpp",

    ],

    static_libs: [

        "android.hardware.automotive.evs@common-default-lib"

    ],

    cflags: [

        "-DCOPY_YV12_TO_RGB32",

    ],

}



cc_fuzz {

    host_supported: true,

    name : "FormatConvertFuzzer_copyYV12toBGR32",

    srcs: [

        "FormatConvertFuzzer.cpp",

    ],

    static_libs: [

        "android.hardware.automotive.evs@common-default-lib"

    ],

    cflags: [

        "-DCOPY_YV12_TO_BGR32",

    ],

}



cc_fuzz {

    host_supported: true,

    name : "FormatConvertFuzzer_copyYUYVtoRGB32",

    srcs: [

        "FormatConvertFuzzer.cpp",

    ],

    static_libs: [

        "android.hardware.automotive.evs@common-default-lib"

    ],

    cflags: [

        "-DCOPY_YUYV_TO_RGB32",

    ],

}



cc_fuzz {

    host_supported: true,

    name : "FormatConvertFuzzer_copyYUYVtoBGR32",

    srcs: [

        "FormatConvertFuzzer.cpp",

    ],

    static_libs: [

        "android.hardware.automotive.evs@common-default-lib"

    ],

    cflags: [

        "-DCOPY_YUYV_TO_BGR32",

    ],

}

automotive/evs/common/utils/default/test/fuzz/FormatConvertFuzzer.cpp

0 → 100644
+57 −0
Original line number Diff line number Diff line 
/*

 * Copyright (C) 2019 The Android Open Source Project

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 *

 *      http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

 */



#include <cmath>

#include <cstdlib>

#include <cstring>

#include <ctime>

#include "FormatConvert.h"



extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, std::size_t size) {

    if (size < 256) {

        return 0;

    }



    std::srand(std::time(nullptr));  // use current time as seed for random generator

    int random_variable = std::rand() % 10;

    int width = (int)sqrt(size);

    int height = width * ((float)random_variable / 10.0);



    uint8_t* src = (uint8_t*)malloc(sizeof(uint8_t) * size);

    memcpy(src, data, sizeof(uint8_t) * (size));

    uint32_t* tgt = (uint32_t*)malloc(sizeof(uint32_t) * size);



#ifdef COPY_NV21_TO_RGB32

    android::hardware::automotive::evs::common::Utils::copyNV21toRGB32(width, height, src, tgt, 0);

#elif COPY_NV21_TO_BGR32

    android::hardware::automotive::evs::common::Utils::copyNV21toBGR32(width, height, src, tgt, 0);

#elif COPY_YV12_TO_RGB32

    android::hardware::automotive::evs::common::Utils::copyYV12toRGB32(width, height, src, tgt, 0);

#elif COPY_YV12_TO_BGR32

    android::hardware::automotive::evs::common::Utils::copyYV12toBGR32(width, height, src, tgt, 0);

#elif COPY_YUYV_TO_RGB32

    android::hardware::automotive::evs::common::Utils::copyYUYVtoRGB32(width, height, src, 0, tgt,

                                                                       0);

#elif COPY_YUYV_TO_BGR32

    android::hardware::automotive::evs::common::Utils::copyYUYVtoBGR32(width, height, src, 0, tgt,

                                                                       0);

#endif



    free(src);

    free(tgt);



    return 0;

}