1 /*
2 * Copyright (C) 2019 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17 #include <fuzzer/FuzzedDataProvider.h>
18 #include <cmath>
19 #include <cstdlib>
20 #include <cstring>
21 #include <ctime>
22 #include "FormatConvert.h"
23
LLVMFuzzerTestOneInput(const uint8_t * data,std::size_t size)24 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, std::size_t size) {
25 // 1 random value (4bytes) + min imagesize = 16*2 times bytes per pixel (worse case 2)
26 if (size < (4 + 16 * 2 * 2)) {
27 return 0;
28 }
29 FuzzedDataProvider fdp(data, size);
30 std::size_t image_pixel_size = size - 4;
31 image_pixel_size = (image_pixel_size & INT_MAX) / 2;
32
33 // API have a requirement that width must be divied by 16 except yuyvtorgb
34 int min_height = 2;
35 int max_height = (image_pixel_size / 16) & ~(1); // must be even number
36 int height = fdp.ConsumeIntegralInRange<uint32_t>(min_height, max_height);
37 int width = (image_pixel_size / height) & ~(16); // must be divisible by 16
38
39 uint8_t* src = (uint8_t*)(data + 4);
40 uint32_t* tgt = (uint32_t*)malloc(sizeof(uint32_t) * image_pixel_size);
41
42 #ifdef COPY_NV21_TO_RGB32
43 android::hardware::automotive::evs::common::Utils::copyNV21toRGB32(width, height, src, tgt,
44 width);
45 #elif COPY_NV21_TO_BGR32
46 android::hardware::automotive::evs::common::Utils::copyNV21toBGR32(width, height, src, tgt,
47 width);
48 #elif COPY_YV12_TO_RGB32
49 android::hardware::automotive::evs::common::Utils::copyYV12toRGB32(width, height, src, tgt,
50 width);
51 #elif COPY_YV12_TO_BGR32
52 android::hardware::automotive::evs::common::Utils::copyYV12toBGR32(width, height, src, tgt,
53 width);
54 #elif COPY_YUYV_TO_RGB32
55 android::hardware::automotive::evs::common::Utils::copyYUYVtoRGB32(width, height, src, width,
56 tgt, width);
57 #elif COPY_YUYV_TO_BGR32
58 android::hardware::automotive::evs::common::Utils::copyYUYVtoBGR32(width, height, src, width,
59 tgt, width);
60 #endif
61
62 free(tgt);
63
64 return 0;
65 }
66