Rooba
/
oss-fuzz
mirror of https://github.com/google/oss-fuzz.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity

move the vorbis fuzzer scripts upstream (#1442)

This commit is contained in:
Paul Kehrer 2018-05-24 08:51:58 +08:00 committed by Abhishek Arya
parent 65ac8a3ba8
commit 1194bc1464
2 changed files with 1 additions and 69 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
projects/vorbis/build.sh
View File

@ -15,24 +15,4 @@
#
################################################################################
cd $SRC
mv people.xiph.org/*.ogg decode_corpus/
zip -r "$OUT/decode_fuzzer_seed_corpus.zip" decode_corpus/
cd $SRC/ogg
./autogen.sh
./configure --prefix="$WORK" --enable-static --disable-shared --disable-crc
make clean
make -j$(nproc)
make install
cd $SRC/vorbis
./autogen.sh
./configure --prefix="$WORK" --enable-static --disable-shared
make clean
make -j$(nproc)
make install
$CXX $CXXFLAGS $SRC/decode_fuzzer.cc -o $OUT/decode_fuzzer -L"$WORK/lib" -I"$WORK/include" -lFuzzingEngine -lvorbisfile -lvorbis -logg
. contrib/oss-fuzz/build.sh

48
projects/vorbis/decode_fuzzer.cc
View File

@ -1,48 +0,0 @@
#include <stdio.h>
#include <string.h>
#include <cstdint>
#include <vorbis/vorbisfile.h>
struct vorbis_data {
const uint8_t *current;
const uint8_t *data;
size_t size;
};
size_t read_func(void *ptr, size_t size1, size_t size2, void *datasource) {
vorbis_data* vd = (vorbis_data *)(datasource);
size_t len = size1 * size2;
if (vd->current + len > vd->data + vd->size) {
len = vd->data + vd->size - vd->current;
}
memcpy(ptr, vd->current, len);
vd->current += len;
return len;
}
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
ov_callbacks memory_callbacks = {0};
memory_callbacks.read_func = read_func;
vorbis_data data_st;
data_st.size = Size;
data_st.current = Data;
data_st.data = Data;
OggVorbis_File vf;
int result = ov_open_callbacks(&data_st, &vf, NULL, 0, memory_callbacks);
if (result < 0) {
return 0;
}
int current_section = 0;
int eof = 0;
char buf[4096];
int read_result;
while (!eof) {
read_result = ov_read(&vf, buf, sizeof(buf), 0, 2, 1, &current_section);
if (read_result != OV_HOLE && read_result <= 0) {
eof = 1;
}
}
ov_clear(&vf);
return 0;
}