blob: b0af4aef13175c6205608cdca09dc43c0833f7fc (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
|
// Copyright 2019 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef MEDIA_GPU_VAAPI_VAAPI_JPEG_DECODER_H_
#define MEDIA_GPU_VAAPI_VAAPI_JPEG_DECODER_H_
#include <stdint.h>
#include <memory>
#include "base/macros.h"
#include "media/gpu/vaapi/vaapi_image_decoder.h"
namespace media {
namespace fuzzing {
class VaapiJpegDecoderWrapper;
} // namespace fuzzing
struct JpegFrameHeader;
struct JpegParseResult;
class ScopedVAImage;
// Returns the internal format required for a JPEG image given its parsed
// |frame_header|. If the image's subsampling format is not one of 4:2:0, 4:2:2,
// or 4:4:4, returns kInvalidVaRtFormat.
unsigned int VaSurfaceFormatForJpeg(const JpegFrameHeader& frame_header);
class VaapiJpegDecoder : public VaapiImageDecoder {
public:
VaapiJpegDecoder();
VaapiJpegDecoder(const VaapiJpegDecoder&) = delete;
VaapiJpegDecoder& operator=(const VaapiJpegDecoder&) = delete;
~VaapiJpegDecoder() override;
// VaapiImageDecoder implementation.
gpu::ImageDecodeAcceleratorType GetType() const override;
SkYUVColorSpace GetYUVColorSpace() const override;
// Get the decoded data from the last Decode() call as a ScopedVAImage. The
// VAImage's format will be either |preferred_image_fourcc| if the conversion
// from the internal format is supported or a fallback FOURCC (see
// VaapiWrapper::GetJpegDecodeSuitableImageFourCC() for details). Returns
// nullptr on failure and sets *|status| to the reason for failure.
std::unique_ptr<ScopedVAImage> GetImage(uint32_t preferred_image_fourcc,
VaapiImageDecodeStatus* status);
private:
friend class fuzzing::VaapiJpegDecoderWrapper;
// VaapiImageDecoder implementation.
VaapiImageDecodeStatus AllocateVASurfaceAndSubmitVABuffers(
base::span<const uint8_t> encoded_image) override;
// AllocateVASurfaceAndSubmitVABuffers() is implemented by calling the
// following methods. They are here so that a fuzzer can inject (almost)
// arbitrary data into libva by skipping the parsing and image support checks
// in AllocateVASurfaceAndSubmitVABuffers().
bool MaybeCreateSurface(unsigned int picture_va_rt_format,
const gfx::Size& new_coded_size,
const gfx::Size& new_visible_size);
bool SubmitBuffers(const JpegParseResult& parse_result);
};
} // namespace media
#endif // MEDIA_GPU_VAAPI_VAAPI_JPEG_DECODER_H_
|
