mirror of https://github.com/google/oss-fuzz.git
49 lines
1.1 KiB
C++
49 lines
1.1 KiB
C++
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <cstdint>
|
|
#include <vorbis/vorbisfile.h>
|
|
|
|
struct vorbis_data {
|
|
const uint8_t *current;
|
|
const uint8_t *data;
|
|
size_t size;
|
|
};
|
|
|
|
size_t read_func(void *ptr, size_t size1, size_t size2, void *datasource) {
|
|
vorbis_data* vd = (vorbis_data *)(datasource);
|
|
size_t len = size1 * size2;
|
|
if (vd->current + len > vd->data + vd->size) {
|
|
len = vd->data + vd->size - vd->current;
|
|
}
|
|
memcpy(ptr, vd->current, len);
|
|
vd->current += len;
|
|
return len;
|
|
}
|
|
|
|
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
|
|
ov_callbacks memory_callbacks = {0};
|
|
memory_callbacks.read_func = read_func;
|
|
vorbis_data data_st;
|
|
data_st.size = Size;
|
|
data_st.current = Data;
|
|
data_st.data = Data;
|
|
OggVorbis_File vf;
|
|
int result = ov_open_callbacks(&data_st, &vf, NULL, 0, memory_callbacks);
|
|
if (result < 0) {
|
|
return 0;
|
|
}
|
|
int current_section = 0;
|
|
int eof = 0;
|
|
char buf[4096];
|
|
int read_result;
|
|
while (!eof) {
|
|
read_result = ov_read(&vf, buf, sizeof(buf), 0, 2, 1, ¤t_section);
|
|
if (read_result != OV_HOLE && read_result <= 0) {
|
|
eof = 1;
|
|
}
|
|
}
|
|
ov_clear(&vf);
|
|
return 0;
|
|
}
|