highperfocused/ffmpeg
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

tools/target_dec_fuzzer: Fuzz private options of AC3/E-AC3

Browse Source 
This should improve AC-3 coverage

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer 2019-12-29 17:09:44 +01:00
parent 48083f1890
commit 4b733a7f5f
1 changed files with 17 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
tools/target_dec_fuzzer.c
View File

@ -110,7 +110,7 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
const AVPacket *avpkt) = NULL; const AVPacket *avpkt) = NULL;
AVCodecParserContext *parser = NULL; AVCodecParserContext *parser = NULL;
uint64_t keyframes = 0; uint64_t keyframes = 0;
AVDictionary *opts = NULL;
if (!c) { if (!c) {
#ifdef FFMPEG_DECODER #ifdef FFMPEG_DECODER
@ -216,6 +216,19 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
ctx->idct_algo = bytestream2_get_byte(&gbc) % 25; ctx->idct_algo = bytestream2_get_byte(&gbc) % 25;
if (flags & 0x20) {
switch (ctx->codec_id) {
case AV_CODEC_ID_AC3:
case AV_CODEC_ID_EAC3:
av_dict_set_int(&opts, "cons_noisegen", bytestream2_get_byte(&gbc) & 1, 0);
av_dict_set_int(&opts, "heavy_compr", bytestream2_get_byte(&gbc) & 1, 0);
av_dict_set_int(&opts, "target_level", (int)(bytestream2_get_byte(&gbc) % 32) - 31, 0);
av_dict_set_int(&opts, "dmix_mode", (int)(bytestream2_get_byte(&gbc) % 4) - 1, 0);
break;
}
}
if (extradata_size < size) { if (extradata_size < size) {
ctx->extradata = av_mallocz(extradata_size + AV_INPUT_BUFFER_PADDING_SIZE); ctx->extradata = av_mallocz(extradata_size + AV_INPUT_BUFFER_PADDING_SIZE);
if (ctx->extradata) { if (ctx->extradata) {
@ -228,11 +241,12 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
ctx->width = ctx->height = 0; ctx->width = ctx->height = 0;
} }
int res = avcodec_open2(ctx, c, NULL); int res = avcodec_open2(ctx, c, &opts);
if (res < 0) { if (res < 0) {
avcodec_free_context(&ctx); avcodec_free_context(&ctx);
av_free(parser_avctx); av_free(parser_avctx);
av_parser_close(parser); av_parser_close(parser);
av_dict_free(&opts);
return 0; // Failure of avcodec_open2() does not imply that a issue was found return 0; // Failure of avcodec_open2() does not imply that a issue was found
} }
parser_avctx->codec_id = ctx->codec_id; parser_avctx->codec_id = ctx->codec_id;
@ -337,5 +351,6 @@ maximums_reached:
avcodec_free_context(&parser_avctx); avcodec_free_context(&parser_avctx);
av_parser_close(parser); av_parser_close(parser);
av_packet_unref(&parsepkt); av_packet_unref(&parsepkt);
av_dict_free(&opts);
return 0; return 0;
} }