36a321d2e3
This changes the corpus semantics, but libfuzzer should be smart enough to figure it out, and if not then we can add a seed_corpus to help. BUG=webrtc:4771 NOTRY=true Review-Url: https://codereview.webrtc.org/2072473002 Cr-Commit-Position: refs/heads/master@{#13384}
50 lines
1.9 KiB
C++
50 lines
1.9 KiB
C++
/*
|
|
* Copyright (c) 2016 The WebRTC project authors. All Rights Reserved.
|
|
*
|
|
* Use of this source code is governed by a BSD-style license
|
|
* that can be found in the LICENSE file in the root of the source
|
|
* tree. An additional intellectual property rights grant can be found
|
|
* in the file PATENTS. All contributing project authors may
|
|
* be found in the AUTHORS file in the root of the source tree.
|
|
*/
|
|
|
|
#include <bitset>
|
|
|
|
#include "webrtc/modules/rtp_rtcp/include/rtp_rtcp_defines.h"
|
|
#include "webrtc/modules/rtp_rtcp/source/rtp_packet_received.h"
|
|
#include "webrtc/modules/rtp_rtcp/source/rtp_utility.h"
|
|
|
|
namespace webrtc {
|
|
// We decide which header extensions to register by reading one byte
|
|
// from the beginning of |data| and interpreting it as a bitmask over
|
|
// the RTPExtensionType enum. This assert ensures one byte is enough.
|
|
static_assert(kRtpExtensionNumberOfExtensions <= 8,
|
|
"Insufficient bits read to configure all header extensions. Add "
|
|
"an extra byte and update the switches.");
|
|
|
|
void FuzzOneInput(const uint8_t* data, size_t size) {
|
|
if (size <= 1)
|
|
return;
|
|
|
|
// Don't use the configuration byte as part of the packet.
|
|
std::bitset<8> extensionMask(data[0]);
|
|
data++;
|
|
size--;
|
|
|
|
RtpPacketReceived::ExtensionManager extensions;
|
|
for (int i = 0; i < kRtpExtensionNumberOfExtensions; i++) {
|
|
RTPExtensionType extension_type = static_cast<RTPExtensionType>(i);
|
|
if (extensionMask[i] && extension_type != kRtpExtensionNone) {
|
|
// Extensions are registered with an ID, which you signal to the
|
|
// peer so they know what to expect. This code only cares about
|
|
// parsing so the value of the ID isn't relevant; we use i.
|
|
extensions.Register(extension_type, i);
|
|
}
|
|
}
|
|
|
|
RTPHeader rtp_header;
|
|
RtpUtility::RtpHeaderParser rtp_parser(data, size);
|
|
rtp_parser.Parse(&rtp_header, &extensions);
|
|
}
|
|
} // namespace webrtc
|