1
    2
    3
    4
    5
    6
    7
    8
    9
   10
   11
   12
   13
   14
   15
   16
   17
   18
   19
   20
   21
   22
   23
   24
   25
   26
   27
   28
   29
   30
   31
   32
   33
   34
   35
   36
   37
   38
   39
   40
   41
   42
   43
   44
   45
   46

content / renderer / media / audio_decoder_fuzzer.cpp [blame]

// Copyright 2018 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "content/renderer/media/audio_decoder.h"

#include "base/at_exit.h"
#include "base/command_line.h"
#include "base/logging.h"
#include "content/public/test/blink_test_environment.h"
#include "media/base/media.h"
#include "third_party/blink/public/platform/web_audio_bus.h"

struct Environment {
  Environment() {
    base::CommandLine::Init(0, nullptr);
    blink_environment_.SetUp();

    // Suppress WARNING messages from the debug build.
    logging::SetMinLogLevel(logging::LOGGING_FATAL);

    // This is needed to suppress noisy log messages from ffmpeg.
    media::InitializeMediaLibrary();
  }

  content::BlinkTestEnvironment blink_environment_;
  base::AtExitManager at_exit;
};

Environment* env = new Environment();

extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
  // Larger inputs are likely to trigger timeouts and OOMs which would not be
  // considered as valid bugs.
  if (size > 8 * 1024)
    return 0;

  blink::WebAudioBus web_audio_bus;
  bool success = content::DecodeAudioFileData(
      &web_audio_bus, reinterpret_cast<const char*>(data), size);

  if (!success)
    return 0;

  return 0;
}