FFmpeg

Commit Graph

Author	SHA1	Message	Date
James Almer	40dfb4328d	tools/target_dem_fuzzer: use avio_context_free() to free the fuzzer's AVIOContext The doxy for avio_alloc_context() states it must be used for this. Signed-off-by: James Almer <jamrial@gmail.com>	4 years ago
Michael Niedermayer	8fbcc546b8	tools/target_dem_fuzzer: Consider it an EIO when reading position wraps around 64bit Fixes: signed integer overflow: 9223372036854775807 + 564 cannot be represented in type 'long' Fixes: 26494/clusterfuzz-testcase-minimized-ffmpeg_dem_VOC_fuzzer-576754158849228 Fixes: 26549/clusterfuzz-testcase-minimized-ffmpeg_dem_AVS_fuzzer-4844306424397824 FIxes: 26875/clusterfuzz-testcase-minimized-ffmpeg_dem_C93_fuzzer-5996226782429184 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	4 years ago
Michael Niedermayer	6e64d89410	tools/target_dem_fuzzer: Limit max blocks With a IO block size of 1 byte potentially megabytes are quite slow to read, thus limit the number Fixes: 26511/clusterfuzz-testcase-minimized-ffmpeg_dem_NUV_fuzzer-5679249073373184 Fixes: 26517/clusterfuzz-testcase-minimized-ffmpeg_dem_XMV_fuzzer-6316634501021696 Fixes: 26518/clusterfuzz-testcase-minimized-ffmpeg_dem_WSVQA_fuzzer-485568285324083 Fixes: 26525/clusterfuzz-testcase-minimized-ffmpeg_dem_MSNWC_TCP_fuzzer-5121987011411968 Fixes: 26538/clusterfuzz-testcase-minimized-ffmpeg_dem_DHAV_fuzzer-5441800598454272 Fixes: OOM Fixes: Timeout Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	4 years ago
James Almer	a8a1a58af3	tools/target_dem_fuzzer: switch to the iterate API Signed-off-by: James Almer <jamrial@gmail.com>	4 years ago
Michael Niedermayer	af701196ec	tools/target_dem_fuzzer: Set format independent of c Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	4 years ago
Michael Niedermayer	d40679d89c	Add support for building fuzzer tools for an individual demuxer Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	4 years ago
Michael Niedermayer	e3af2a0756	tools:target_dem_fuzzer: Split into a fuzzer fuzzing at the protocol level and one fuzzing a fixed demuxer input This should improve coverage and should improve the efficiency of seed files Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	4 years ago
Michael Niedermayer	d3747f4431	tools/target_dem_fuzzer: Use file extensions listed in input formats This should make it easier for the fuzzer to fuzz formats being detected only by file extension and thus increase coverage Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	5 years ago
Michael Niedermayer	3e651eeac4	tools/target_dem_fuzzer: Implement AVSEEK_SIZE Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	5 years ago
Michael Niedermayer	ed4c6ce750	tools/target_dem_fuzzer: ignore avformat_find_stream_info() failure Such a failure should not be fatal and its worth testing this path too Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	6 years ago
Michael Niedermayer	710b7ec071	tools: Add fuzzer for demuxers This is based on target_dec_fuzzer Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>	6 years ago

11 Commits (b52e0d9504d1b45bc64489262facc8e48adb9bc2)