From patchwork Wed Aug 7 15:51:12 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Michael Niedermayer X-Patchwork-Id: 50926 Delivered-To: ffmpegpatchwork2@gmail.com Received: by 2002:a59:d7b2:0:b0:489:2eb3:e4c4 with SMTP id dc18csp479817vqb; Wed, 7 Aug 2024 09:01:07 -0700 (PDT) X-Forwarded-Encrypted: i=2; AJvYcCU+e90zcqfRHhagBQL6NJ9BcJ3Qs6agiV96Jxy7kPmEJ2U4OY8ODve/5oKOebf88uwAFLAETp1DsboGagPWiM6yuGZmfheW26CrvQ== X-Google-Smtp-Source: AGHT+IEB2upBEhc75QkGv9IksI5pw6CSycIAhqBl1yHPQHZqdv6Ga2J2WNDlBERj6/yVGeZqexdq X-Received: by 2002:a17:907:7fa2:b0:a7a:be06:d8f1 with SMTP id a640c23a62f3a-a80791a645cmr217290766b.25.1723046467489; Wed, 07 Aug 2024 09:01:07 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1723046467; cv=none; d=google.com; s=arc-20160816; b=c7yw0ljNoP7HfZELsSju4OmUN9aMiC1JDWoovP+oFwVF5mTYqx+7rRA3Tl1N5Povzd DkNT7tZn+yjScvHkd8AQW/dX3vctYeXAIqBIU3OwBalbi56n6OY8+v3+lcDhg0ZSwsGq qybUvFT43ExTYRzedKkBIvGO1YgZHPUo5EcVaKqGwfg1bqh5V/mapihk2ACmVOQe1+hw fwR7l3uJgwcgH0ITnBBuOqdv4lbqGJoreh/PiCfZLQ6ZYbzhvGLPkRuRI1rvEHZY0llw P0cUPY+9cn/5SrsWOCJHGLHpbplraQm4Q1l8EA5ggrs+0PW9FEK3znKu+C2octFE/iU/ Q/dA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=sender:errors-to:content-transfer-encoding:reply-to:list-subscribe :list-help:list-post:list-archive:list-unsubscribe:list-id :precedence:subject:mime-version:message-id:date:to:from :dkim-signature:delivered-to; bh=seqA3j5zJ19W9yfMQhrAnxVwTbncYcgEhUM3wV00WEI=; fh=e5zN9xSzcxLA6bGo3lF+CqTbY/oLwzApV03EO/RBfgQ=; b=RKtWMz+aq9eqBJO5BEBLV1MzOGe3s69I1VnzeK6vvAVdpbxJ2AroWVLnKW1vbhmFrx aNpNQ4To4wVX3ezuLRFDe7Cpm4QSlIb/Kx91xGvA5wBpqhyE3c2ImoofcXgMqBWB6n0l x6/W0gOgtILTnzp9VHiHQPwumpO+MveGZZefBuPuKi9hdoTQOsOEMS0uD3Z0sATWv08S o0STkvvJ4WBP9EKf1KS9UDkkZhzjv7+TPeNPnOnOLzT9sqIQGMvCPqS2W/pAfYg0VU/z cRwq7yI65Jq+BAngffjbJd8H3l86yI/2ZAsa2HZ3L5o+iPG1Ug63tc7Szdm+vNZgk+1y KRDQ==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@niedermayer.cc header.s=gm1 header.b="na5oK/oG"; spf=pass (google.com: domain of ffmpeg-devel-bounces@ffmpeg.org designates 79.124.17.100 as permitted sender) smtp.mailfrom=ffmpeg-devel-bounces@ffmpeg.org Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org. [79.124.17.100]) by mx.google.com with ESMTP id a640c23a62f3a-a7dc9d6ee54si702820566b.315.2024.08.07.09.01.06; Wed, 07 Aug 2024 09:01:07 -0700 (PDT) Received-SPF: pass (google.com: domain of ffmpeg-devel-bounces@ffmpeg.org designates 79.124.17.100 as permitted sender) client-ip=79.124.17.100; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@niedermayer.cc header.s=gm1 header.b="na5oK/oG"; spf=pass (google.com: domain of ffmpeg-devel-bounces@ffmpeg.org designates 79.124.17.100 as permitted sender) smtp.mailfrom=ffmpeg-devel-bounces@ffmpeg.org Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 98AF568DB18; Wed, 7 Aug 2024 18:51:22 +0300 (EEST) X-Original-To: ffmpeg-devel@ffmpeg.org Delivered-To: ffmpeg-devel@ffmpeg.org Received: from relay7-d.mail.gandi.net (relay7-d.mail.gandi.net [217.70.183.200]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 3E82268DADD for ; Wed, 7 Aug 2024 18:51:15 +0300 (EEST) Received: by mail.gandi.net (Postfix) with ESMTPSA id 82B9020008 for ; Wed, 7 Aug 2024 15:51:14 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=niedermayer.cc; s=gm1; t=1723045874; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=WC0ov5+gP92oxxUZqaK0DWzZJG5qtqEiaV9684s4+cU=; b=na5oK/oGY/A5P8wELlk0mkaQRzXP9FUkef2EJeSXlyoCqBzfP08y7GzWLQn4yp0rS7Ws8s Prbtsf3ccHVKXK5gFS+WNquB51wPXbpiW6VB6MM11WB8FCJufj4CHBR/DQqG2MVtLZnAqR e8mGndy3TZdkw0gXqVkc6hJPCwZkuhTvRjSH2PZ2PXF5Hz8///fYszQEyivu5HXI8PsD+b szmyZAS6dhNJHGmrsZjjm5rue7Q2hRYDENp3H0DEBWZNxtAonV2OiXVVI9XRt8jr9+TTjf 6ps2dh6hrhBOcTtFgQcQ3D/78UNXTiNMbL2c8E6C8ziKCALRuoXd34Tjm1fmCQ== From: Michael Niedermayer To: FFmpeg development discussions and patches Date: Wed, 7 Aug 2024 17:51:12 +0200 Message-ID: <20240807155112.1576147-1-michael@niedermayer.cc> X-Mailer: git-send-email 2.45.2 MIME-Version: 1.0 X-GND-Sasl: michael@niedermayer.cc Subject: [FFmpeg-devel] [PATCH v2] add tools/target_swr_fuzzer X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" X-TUID: gEcbQjlZjy8+ Signed-off-by: Michael Niedermayer --- Makefile | 2 + tools/Makefile | 3 + tools/target_swr_fuzzer.c | 150 ++++++++++++++++++++++++++++++++++++++ 3 files changed, 155 insertions(+) create mode 100644 tools/target_swr_fuzzer.c diff --git a/Makefile b/Makefile index 4c3af09fec4..b350d7748f5 100644 --- a/Makefile +++ b/Makefile @@ -70,6 +70,8 @@ tools/target_io_dem_fuzzer$(EXESUF): tools/target_io_dem_fuzzer.o $(FF_DEP_LIBS) tools/target_sws_fuzzer$(EXESUF): tools/target_sws_fuzzer.o $(FF_DEP_LIBS) $(LD) $(LDFLAGS) $(LDEXEFLAGS) $(LD_O) $^ $(ELIBS) $(FF_EXTRALIBS) $(LIBFUZZER_PATH) +tools/target_swr_fuzzer$(EXESUF): tools/target_swr_fuzzer.o $(FF_DEP_LIBS) + $(LD) $(LDFLAGS) $(LDEXEFLAGS) $(LD_O) $^ $(ELIBS) $(FF_EXTRALIBS) $(LIBFUZZER_PATH) tools/enum_options$(EXESUF): ELIBS = $(FF_EXTRALIBS) tools/enum_options$(EXESUF): $(FF_DEP_LIBS) diff --git a/tools/Makefile b/tools/Makefile index 2a11fa0ae62..7ae6e3cb75d 100644 --- a/tools/Makefile +++ b/tools/Makefile @@ -23,6 +23,9 @@ tools/target_io_dem_fuzzer.o: tools/target_dem_fuzzer.c tools/target_sws_fuzzer.o: tools/target_sws_fuzzer.c $(COMPILE_C) +tools/target_swr_fuzzer.o: tools/target_swr_fuzzer.c + $(COMPILE_C) + tools/enc_recon_frame_test$(EXESUF): tools/decode_simple.o tools/venc_data_dump$(EXESUF): tools/decode_simple.o tools/scale_slice_test$(EXESUF): tools/decode_simple.o diff --git a/tools/target_swr_fuzzer.c b/tools/target_swr_fuzzer.c new file mode 100644 index 00000000000..b8af0bad78c --- /dev/null +++ b/tools/target_swr_fuzzer.c @@ -0,0 +1,150 @@ +/* + * Copyright (c) 2024 Michael Niedermayer + * + * This file is part of FFmpeg. + * + * FFmpeg is free software; you can redistribute it and/or + * modify it under the terms of the GNU Lesser General Public + * License as published by the Free Software Foundation; either + * version 2.1 of the License, or (at your option) any later version. + * + * FFmpeg is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + * Lesser General Public License for more details. + * + * You should have received a copy of the GNU Lesser General Public + * License along with FFmpeg; if not, write to the Free Software + * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA + */ + +#include "config.h" +#include "libavutil/avassert.h" +#include "libavutil/avstring.h" +#include "libavutil/cpu.h" +#include "libavutil/imgutils.h" +#include "libavutil/intreadwrite.h" +#include "libavutil/mem.h" +#include "libavutil/opt.h" + +#include "libavcodec/bytestream.h" + +#include "libswresample/swresample.h" + +#define SWR_CH_MAX 32 + +int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size); + +static const enum AVSampleFormat formats[] = { + AV_SAMPLE_FMT_U8, + AV_SAMPLE_FMT_U8P, + AV_SAMPLE_FMT_S16, + AV_SAMPLE_FMT_S16P, + AV_SAMPLE_FMT_S32, + AV_SAMPLE_FMT_S32P, + AV_SAMPLE_FMT_FLT, + AV_SAMPLE_FMT_FLTP, + AV_SAMPLE_FMT_DBL, + AV_SAMPLE_FMT_DBLP, +}; + +static const AVChannelLayout layouts[]={ + AV_CHANNEL_LAYOUT_MONO , + AV_CHANNEL_LAYOUT_STEREO , + AV_CHANNEL_LAYOUT_2_1 , + AV_CHANNEL_LAYOUT_SURROUND , + AV_CHANNEL_LAYOUT_4POINT0 , + AV_CHANNEL_LAYOUT_2_2 , + AV_CHANNEL_LAYOUT_QUAD , + AV_CHANNEL_LAYOUT_5POINT0 , + AV_CHANNEL_LAYOUT_5POINT1 , + AV_CHANNEL_LAYOUT_5POINT0_BACK , + AV_CHANNEL_LAYOUT_5POINT1_BACK , + AV_CHANNEL_LAYOUT_7POINT0 , + AV_CHANNEL_LAYOUT_7POINT1 , + AV_CHANNEL_LAYOUT_7POINT1_WIDE , + AV_CHANNEL_LAYOUT_22POINT2 , + AV_CHANNEL_LAYOUT_5POINT1POINT2_BACK , +}; + +int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { + const uint8_t *end = data + size; + struct SwrContext * swr= NULL; + AVChannelLayout in_ch_layout = { 0 }, out_ch_layout = { 0 }; + enum AVSampleFormat in_sample_fmt = AV_SAMPLE_FMT_S16P; + enum AVSampleFormat out_sample_fmt = AV_SAMPLE_FMT_S16P; + int in_sample_rate = 44100; + int out_sample_rate = 44100; + int in_ch_count, out_ch_count; + char in_layout_string[256]; + char out_layout_string[256]; + uint8_t * ain[SWR_CH_MAX]; + uint8_t *aout[SWR_CH_MAX]; + uint8_t *out_data; + int in_sample_nb; + int out_sample_nb = size; + int count; + + if (size > 128) { + GetByteContext gbc; + int64_t flags64; + + size -= 128; + bytestream2_init(&gbc, data + size, 128); + in_sample_rate = bytestream2_get_le16(&gbc) + 1; + out_sample_rate = bytestream2_get_le16(&gbc) + 1; + in_sample_fmt = formats[bytestream2_get_byte(&gbc) % FF_ARRAY_ELEMS(formats)]; + out_sample_fmt = formats[bytestream2_get_byte(&gbc) % FF_ARRAY_ELEMS(formats)]; + av_channel_layout_copy(& in_ch_layout, &layouts[bytestream2_get_byte(&gbc) % FF_ARRAY_ELEMS(layouts)]); + av_channel_layout_copy(&out_ch_layout, &layouts[bytestream2_get_byte(&gbc) % FF_ARRAY_ELEMS(layouts)]); + + out_sample_nb = bytestream2_get_le32(&gbc); + + flags64 = bytestream2_get_le64(&gbc); + if (flags64 & 0x10) + av_force_cpu_flags(0); + } else { + av_channel_layout_copy(& in_ch_layout, &layouts[0]); + av_channel_layout_copy(&out_ch_layout, &layouts[0]); + } + + in_ch_count= in_ch_layout.nb_channels; + out_ch_count= out_ch_layout.nb_channels; + av_channel_layout_describe(& in_ch_layout, in_layout_string, sizeof( in_layout_string)); + av_channel_layout_describe(&out_ch_layout, out_layout_string, sizeof(out_layout_string)); + + fprintf(stderr, "%s %d %s -> %s %d %s\n", + av_get_sample_fmt_name( in_sample_fmt), in_sample_rate, in_layout_string, + av_get_sample_fmt_name(out_sample_fmt), out_sample_rate, out_layout_string); + + if (swr_alloc_set_opts2(&swr, &out_ch_layout, out_sample_fmt, out_sample_rate, + &in_ch_layout, in_sample_fmt, in_sample_rate, + 0, 0) < 0) { + fprintf(stderr, "Failed swr_alloc_set_opts2()\n"); + goto end; + } + + if(swr_init(swr) < 0) { + fprintf(stderr, "Failed swr_init()\n"); + goto end; + } + + in_sample_nb = size / (in_ch_count * av_get_bytes_per_sample(in_sample_fmt)); + out_sample_nb = out_sample_nb % (av_rescale(in_sample_nb, 2*out_sample_rate, in_sample_rate) + 1); + + out_data = av_malloc(out_sample_nb * out_ch_count * av_get_bytes_per_sample(out_sample_fmt)); + if (!out_data) + goto end; + + av_samples_fill_arrays(ain , NULL, data, in_ch_count, in_sample_nb, in_sample_fmt, 1); + av_samples_fill_arrays(aout, NULL, out_data, out_ch_count, out_sample_nb, out_sample_fmt, 1); + + count = swr_convert(swr, aout, out_sample_nb, (const uint8_t **)ain, in_sample_nb); + + av_freep(&out_data); + +end: + swr_free(&swr); + + return 0; +}