/* * Copyright (c) 2017 The WebRTC project authors. All Rights Reserved. * * Use of this source code is governed by a BSD-style license * that can be found in the LICENSE file in the root of the source * tree. An additional intellectual property rights grant can be found * in the file PATENTS. All contributing project authors may * be found in the AUTHORS file in the root of the source tree. */ #include "modules/video_coding/packet_buffer.h" #include "system_wrappers/include/clock.h" #include "test/fuzzers/fuzz_data_helper.h" namespace webrtc { namespace { class NullCallback : public video_coding::OnReceivedFrameCallback { void OnReceivedFrame(std::unique_ptr frame) {} }; } // namespace void FuzzOneInput(const uint8_t* data, size_t size) { VCMPacket packet; NullCallback callback; SimulatedClock clock(0); rtc::scoped_refptr packet_buffer( video_coding::PacketBuffer::Create(&clock, 8, 1024, &callback)); test::FuzzDataHelper helper(rtc::ArrayView(data, size)); while (helper.BytesLeft()) { // The RTPVideoHeader is a complex type, so overwriting it with random data // will put it in an invalid state. Therefore we save/restore it. uint8_t video_header_backup[sizeof(packet.video_header)]; memcpy(&video_header_backup, &packet.video_header, sizeof(packet.video_header)); helper.CopyTo(&packet); memcpy(&packet.video_header, &video_header_backup, sizeof(packet.video_header)); // The packet buffer owns the payload of the packet. uint8_t payload_size; helper.CopyTo(&payload_size); packet.sizeBytes = payload_size; packet.dataPtr = new uint8_t[payload_size]; packet_buffer->InsertPacket(&packet); } } } // namespace webrtc