Index: webrtc/test/fuzzers/packet_buffer_fuzzer.cc |
diff --git a/webrtc/test/fuzzers/packet_buffer_fuzzer.cc b/webrtc/test/fuzzers/packet_buffer_fuzzer.cc |
new file mode 100644 |
index 0000000000000000000000000000000000000000..dc10c6fa301bd3312149810f6f7dbaf77bb196b9 |
--- /dev/null |
+++ b/webrtc/test/fuzzers/packet_buffer_fuzzer.cc |
@@ -0,0 +1,46 @@ |
+/* |
+ * Copyright (c) 2017 The WebRTC project authors. All Rights Reserved. |
+ * |
+ * Use of this source code is governed by a BSD-style license |
+ * that can be found in the LICENSE file in the root of the source |
+ * tree. An additional intellectual property rights grant can be found |
+ * in the file PATENTS. All contributing project authors may |
+ * be found in the AUTHORS file in the root of the source tree. |
+ */ |
+ |
+#include "webrtc/modules/video_coding/packet_buffer.h" |
+#include "webrtc/system_wrappers/include/clock.h" |
+ |
+namespace webrtc { |
+ |
+namespace { |
+class DummyCallback : public video_coding::OnReceivedFrameCallback { |
stefan-webrtc
2017/01/10 11:50:00
NullCallback is usually the naming convention
philipel
2017/01/10 12:03:36
Done.
|
+ void OnReceivedFrame(std::unique_ptr<video_coding::RtpFrameObject> frame) {} |
+}; |
+} // namespace |
+ |
+void FuzzOneInput(const uint8_t* data, size_t size) { |
+ // Two bytes for the sequence number, |
+ // one byte for isFirstPacket and markerBit. |
+ constexpr size_t kMinDataNeeded = 3; |
+ if (size < 200) { |
stefan-webrtc
2017/01/10 11:50:00
No need for this check, right?
philipel
2017/01/10 12:03:36
We need at least kMinDataNeeded bytes, but we want
stefan-webrtc
2017/01/10 12:11:08
The fuzzer will fairly quickly check with long seq
|
+ return; |
+ } |
+ |
+ VCMPacket packet; |
+ DummyCallback callback; |
+ SimulatedClock clock(0); |
+ rtc::scoped_refptr<video_coding::PacketBuffer> packet_buffer( |
+ video_coding::PacketBuffer::Create(&clock, 8, 1024, &callback)); |
+ |
+ size_t i = kMinDataNeeded; |
+ while (i < size) { |
+ memcpy(&packet.seqNum, &data[i - kMinDataNeeded], 2); |
+ packet.isFirstPacket = data[i] & 1; |
+ packet.markerBit = data[i] & 2; |
+ packet_buffer->InsertPacket(&packet); |
+ i += kMinDataNeeded; |
+ } |
+} |
+ |
+} // namespace webrtc |