reencoder.cc 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304
  1. /* Copyright 2019 Guido Vranken
  2. *
  3. * Permission is hereby granted, free of charge, to any person obtaining
  4. * a copy of this software and associated documentation files (the
  5. * "Software"), to deal in the Software without restriction, including
  6. * without limitation the rights to use, copy, modify, merge, publish,
  7. * distribute, sublicense, and/or sell copies of the Software, and to
  8. * permit persons to whom the Software is furnished to do so, subject
  9. * to the following conditions:
  10. *
  11. * The above copyright notice and this permission notice shall be
  12. * included in all copies or substantial portions of the Software.
  13. *
  14. * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  15. * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  16. * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  17. * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
  18. * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
  19. * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
  20. * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  21. * SOFTWARE.
  22. */
  23. #include <cstddef>
  24. #include <cstdint>
  25. #include <limits>
  26. #include <fuzzing/datasource/datasource.hpp>
  27. #include <fuzzing/memory.hpp>
  28. #include "FLAC++/encoder.h"
  29. #include "FLAC++/decoder.h"
  30. #include "FLAC++/metadata.h"
  31. #include "common.h"
  32. #define MAX_NUM_METADATA_BLOCKS 2048
  33. namespace FLAC {
  34. namespace Encoder {
  35. class FuzzerStream : public Stream {
  36. private:
  37. // fuzzing::datasource::Datasource& ds;
  38. public:
  39. FuzzerStream(fuzzing::datasource::Datasource&) :
  40. Stream() { }
  41. ::FLAC__StreamEncoderWriteStatus write_callback(const FLAC__byte buffer[], size_t bytes, uint32_t /* samples */, uint32_t /* current_frame */) override {
  42. fuzzing::memory::memory_test(buffer, bytes);
  43. return FLAC__STREAM_ENCODER_WRITE_STATUS_OK;
  44. }
  45. };
  46. }
  47. namespace Decoder {
  48. class FuzzerDecoder : public Stream {
  49. private:
  50. fuzzing::datasource::Datasource& ds;
  51. FLAC::Encoder::FuzzerStream& encoder;
  52. public:
  53. FuzzerDecoder(fuzzing::datasource::Datasource& dsrc, FLAC::Encoder::FuzzerStream& encoder_arg) :
  54. Stream(), ds(dsrc), encoder(encoder_arg) { }
  55. ::FLAC__StreamMetadata * metadata_blocks[MAX_NUM_METADATA_BLOCKS] = {0};
  56. int num_metadata_blocks = 0;
  57. void metadata_callback(const ::FLAC__StreamMetadata *metadata) override {
  58. if(num_metadata_blocks < MAX_NUM_METADATA_BLOCKS)
  59. if((metadata_blocks[num_metadata_blocks] = FLAC__metadata_object_clone(metadata)) != NULL)
  60. num_metadata_blocks++;
  61. }
  62. ::FLAC__StreamDecoderReadStatus read_callback(FLAC__byte buffer[], size_t *bytes) override {
  63. try {
  64. const size_t maxCopySize = *bytes;
  65. if ( maxCopySize > 0 ) {
  66. /* memset just to test if this overwrites anything, and triggers ASAN */
  67. memset(buffer, 0, maxCopySize);
  68. }
  69. const auto data = ds.GetData(0);
  70. const auto dataSize = data.size();
  71. const auto copySize = std::min(maxCopySize, dataSize);
  72. if ( copySize > 0 ) {
  73. memcpy(buffer, data.data(), copySize);
  74. }
  75. *bytes = copySize;
  76. return FLAC__STREAM_DECODER_READ_STATUS_CONTINUE;
  77. } catch ( ... ) {
  78. return FLAC__STREAM_DECODER_READ_STATUS_ABORT;
  79. }
  80. }
  81. ::FLAC__StreamDecoderWriteStatus write_callback(const ::FLAC__Frame *frame, const FLAC__int32 * const buffer[]) override {
  82. {
  83. fuzzing::memory::memory_test(&(frame->header), sizeof(frame->header));
  84. fuzzing::memory::memory_test(&(frame->footer), sizeof(frame->footer));
  85. }
  86. {
  87. const auto numChannels = get_channels();
  88. const size_t bytesPerChannel = frame->header.blocksize * sizeof(FLAC__int32);
  89. for (size_t i = 0; i < numChannels; i++) {
  90. fuzzing::memory::memory_test(buffer[i], bytesPerChannel);
  91. }
  92. }
  93. /* Data is checked, now pass it towards encoder */
  94. if(encoder.get_state() == FLAC__STREAM_ENCODER_OK) {
  95. if(encoder.get_channels() != get_channels())
  96. return FLAC__STREAM_DECODER_WRITE_STATUS_ABORT;
  97. if(encoder.get_bits_per_sample() != get_bits_per_sample())
  98. return FLAC__STREAM_DECODER_WRITE_STATUS_ABORT;
  99. encoder.process(buffer, frame->header.blocksize);
  100. return FLAC__STREAM_DECODER_WRITE_STATUS_CONTINUE;
  101. }
  102. else
  103. return FLAC__STREAM_DECODER_WRITE_STATUS_ABORT;
  104. }
  105. void error_callback(::FLAC__StreamDecoderErrorStatus status) override {
  106. fuzzing::memory::memory_test(status);
  107. }
  108. };
  109. }
  110. }
  111. extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  112. fuzzing::datasource::Datasource ds(data, size);
  113. FLAC::Encoder::FuzzerStream encoder(ds);
  114. FLAC::Decoder::FuzzerDecoder decoder(ds, encoder);
  115. try {
  116. const int channels = ds.Get<uint8_t>();
  117. const int bps = ds.Get<uint8_t>();
  118. encoder.set_channels(channels);
  119. encoder.set_bits_per_sample(bps);
  120. {
  121. const bool res = encoder.set_streamable_subset(ds.Get<bool>());
  122. fuzzing::memory::memory_test(res);
  123. }
  124. {
  125. const bool res = encoder.set_ogg_serial_number(ds.Get<long>());
  126. fuzzing::memory::memory_test(res);
  127. }
  128. {
  129. const bool res = encoder.set_verify(ds.Get<bool>());
  130. fuzzing::memory::memory_test(res);
  131. }
  132. {
  133. const bool res = encoder.set_compression_level(ds.Get<uint8_t>());
  134. fuzzing::memory::memory_test(res);
  135. }
  136. {
  137. const bool res = encoder.set_do_mid_side_stereo(ds.Get<bool>());
  138. fuzzing::memory::memory_test(res);
  139. }
  140. {
  141. const bool res = encoder.set_loose_mid_side_stereo(ds.Get<bool>());
  142. fuzzing::memory::memory_test(res);
  143. }
  144. {
  145. const bool res = encoder.set_max_lpc_order(ds.Get<uint8_t>());
  146. fuzzing::memory::memory_test(res);
  147. }
  148. {
  149. const bool res = encoder.set_qlp_coeff_precision(ds.Get<uint32_t>());
  150. fuzzing::memory::memory_test(res);
  151. }
  152. {
  153. const bool res = encoder.set_do_escape_coding(ds.Get<bool>());
  154. fuzzing::memory::memory_test(res);
  155. }
  156. {
  157. const bool res = encoder.set_min_residual_partition_order(ds.Get<uint32_t>());
  158. fuzzing::memory::memory_test(res);
  159. }
  160. {
  161. const bool res = encoder.set_max_residual_partition_order(ds.Get<uint32_t>());
  162. fuzzing::memory::memory_test(res);
  163. }
  164. {
  165. const bool res = encoder.set_total_samples_estimate(ds.Get<uint64_t>());
  166. fuzzing::memory::memory_test(res);
  167. }
  168. {
  169. const bool res = encoder.set_blocksize(ds.Get<uint16_t>());
  170. fuzzing::memory::memory_test(res);
  171. }
  172. {
  173. const bool res = encoder.set_limit_min_bitrate(ds.Get<bool>());
  174. fuzzing::memory::memory_test(res);
  175. }
  176. {
  177. const bool res = encoder.set_sample_rate(ds.Get<uint32_t>());
  178. fuzzing::memory::memory_test(res);
  179. }
  180. decoder.set_metadata_respond_all();
  181. {
  182. ::FLAC__StreamDecoderInitStatus ret;
  183. if ( ds.Get<bool>() ) {
  184. ret = decoder.init();
  185. } else {
  186. ret = decoder.init_ogg();
  187. }
  188. if ( ret != FLAC__STREAM_DECODER_INIT_STATUS_OK ) {
  189. goto end;
  190. }
  191. decoder.process_until_end_of_metadata();
  192. if(decoder.num_metadata_blocks > 0)
  193. encoder.set_metadata(decoder.metadata_blocks, decoder.num_metadata_blocks);
  194. }
  195. {
  196. ::FLAC__StreamEncoderInitStatus ret;
  197. if ( ds.Get<bool>() ) {
  198. ret = encoder.init();
  199. } else {
  200. ret = encoder.init_ogg();
  201. }
  202. if ( ret != FLAC__STREAM_ENCODER_INIT_STATUS_OK ) {
  203. goto end;
  204. }
  205. }
  206. /* These sets must fail, because encoder is already initialized */
  207. {
  208. bool res = false;
  209. res = res || encoder.set_streamable_subset(true);
  210. res = res || encoder.set_ogg_serial_number(0);
  211. res = res || encoder.set_verify(true);
  212. res = res || encoder.set_compression_level(0);
  213. res = res || encoder.set_do_exhaustive_model_search(true);
  214. res = res || encoder.set_do_mid_side_stereo(true);
  215. res = res || encoder.set_loose_mid_side_stereo(true);
  216. res = res || encoder.set_apodization("test");
  217. res = res || encoder.set_max_lpc_order(0);
  218. res = res || encoder.set_qlp_coeff_precision(0);
  219. res = res || encoder.set_do_qlp_coeff_prec_search(true);
  220. res = res || encoder.set_do_escape_coding(true);
  221. res = res || encoder.set_min_residual_partition_order(0);
  222. res = res || encoder.set_max_residual_partition_order(0);
  223. res = res || encoder.set_rice_parameter_search_dist(0);
  224. res = res || encoder.set_total_samples_estimate(0);
  225. res = res || encoder.set_channels(channels);
  226. res = res || encoder.set_bits_per_sample(16);
  227. res = res || encoder.set_limit_min_bitrate(true);
  228. res = res || encoder.set_blocksize(3021);
  229. res = res || encoder.set_sample_rate(44100);
  230. fuzzing::memory::memory_test(res);
  231. if(res)
  232. abort();
  233. }
  234. {
  235. /* XORing values as otherwise compiler will optimize, apparently */
  236. bool res = false;
  237. res = res != encoder.get_streamable_subset();
  238. res = res != encoder.get_verify();
  239. res = res != encoder.get_do_exhaustive_model_search();
  240. res = res != encoder.get_do_mid_side_stereo();
  241. res = res != encoder.get_loose_mid_side_stereo();
  242. res = res != encoder.get_max_lpc_order();
  243. res = res != encoder.get_qlp_coeff_precision();
  244. res = res != encoder.get_do_qlp_coeff_prec_search();
  245. res = res != encoder.get_do_escape_coding();
  246. res = res != encoder.get_min_residual_partition_order();
  247. res = res != encoder.get_max_residual_partition_order();
  248. res = res != encoder.get_rice_parameter_search_dist();
  249. res = res != encoder.get_total_samples_estimate();
  250. res = res != encoder.get_channels();
  251. res = res != encoder.get_bits_per_sample();
  252. res = res != encoder.get_limit_min_bitrate();
  253. res = res != encoder.get_blocksize();
  254. res = res != encoder.get_sample_rate();
  255. fuzzing::memory::memory_test(res);
  256. }
  257. decoder.process_until_end_of_stream();
  258. } catch ( ... ) { }
  259. end:
  260. {
  261. const bool res = encoder.finish();
  262. fuzzing::memory::memory_test(res);
  263. }
  264. {
  265. const bool res = decoder.finish();
  266. fuzzing::memory::memory_test(res);
  267. }
  268. for(int i = 0; i < decoder.num_metadata_blocks; i++)
  269. FLAC__metadata_object_delete(decoder.metadata_blocks[i]);
  270. return 0;
  271. }