/* Copyright 2019 Guido Vranken * * Permission is hereby granted, free of charge, to any person obtaining * a copy of this software and associated documentation files (the * "Software"), to deal in the Software without restriction, including * without limitation the rights to use, copy, modify, merge, publish, * distribute, sublicense, and/or sell copies of the Software, and to * permit persons to whom the Software is furnished to do so, subject * to the following conditions: * * The above copyright notice and this permission notice shall be * included in all copies or substantial portions of the Software. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE * SOFTWARE. */ #include #include #include #include #include #include "FLAC++/encoder.h" #include "fuzzer_common.h" #define SAMPLE_VALUE_LIMIT (1024*1024*10) static_assert(SAMPLE_VALUE_LIMIT <= std::numeric_limits::max(), "Invalid SAMPLE_VALUE_LIMIT"); static_assert(-SAMPLE_VALUE_LIMIT >= std::numeric_limits::min(), "Invalid SAMPLE_VALUE_LIMIT"); namespace FLAC { namespace Encoder { class FuzzerStream : public Stream { private: // fuzzing::datasource::Datasource& ds; public: FuzzerStream(fuzzing::datasource::Datasource&) : Stream() { } ::FLAC__StreamEncoderWriteStatus write_callback(const FLAC__byte buffer[], size_t bytes, uint32_t /* samples */, uint32_t /* current_frame */) override { fuzzing::memory::memory_test(buffer, bytes); #if 0 try { if ( ds.Get() == true ) { return FLAC__STREAM_ENCODER_WRITE_STATUS_FATAL_ERROR; } } catch ( ... ) { } #endif return FLAC__STREAM_ENCODER_WRITE_STATUS_OK; } }; } } extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { fuzzing::datasource::Datasource ds(data, size); FLAC::Encoder::FuzzerStream encoder(ds); bool use_ogg; const int channels = 2; encoder.set_channels(channels); encoder.set_bits_per_sample(16); try { use_ogg = ! ds.Get(); { const bool res = encoder.set_streamable_subset(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_ogg_serial_number(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_verify(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_compression_level(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_do_exhaustive_model_search(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_do_mid_side_stereo(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_loose_mid_side_stereo(ds.Get()); fuzzing::memory::memory_test(res); } { const auto s = ds.Get(); const bool res = encoder.set_apodization(s.data()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_max_lpc_order(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_qlp_coeff_precision(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_do_qlp_coeff_prec_search(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_do_escape_coding(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_min_residual_partition_order(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_max_residual_partition_order(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_rice_parameter_search_dist(ds.Get()); fuzzing::memory::memory_test(res); } { const bool res = encoder.set_total_samples_estimate(ds.Get()); fuzzing::memory::memory_test(res); } { ::FLAC__StreamEncoderInitStatus ret; if ( !use_ogg ) { ret = encoder.init(); } else { ret = encoder.init_ogg(); } if ( ret != FLAC__STREAM_ENCODER_INIT_STATUS_OK ) { goto end; } } while ( ds.Get() ) { { auto dat = ds.GetVector(); for (size_t i = 0; i < dat.size(); i++) { if ( SAMPLE_VALUE_LIMIT != 0 ) { if ( dat[i] < -SAMPLE_VALUE_LIMIT ) { dat[i] = -SAMPLE_VALUE_LIMIT; } else if ( dat[i] > SAMPLE_VALUE_LIMIT ) { dat[i] = SAMPLE_VALUE_LIMIT; } } } const uint32_t samples = dat.size() / 2; if ( samples > 0 ) { const int32_t* ptr = dat.data(); const bool res = encoder.process_interleaved(ptr, samples); fuzzing::memory::memory_test(res); } } } } catch ( ... ) { } end: { const bool res = encoder.finish(); fuzzing::memory::memory_test(res); } return 0; }