wrapper/libavc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add README.md for fuzzer am: c7a2050496 am: 3664ee9300

Browse source 
am: de18e01aa4

Change-Id: I5d8b3310634432aae83758e094b9e490755976ac
This commit is contained in:
Harish Mahendrakar 2019-08-20 20:36:03 -07:00 • committed by android-build-merger
commit 65b9ba9878
2 changed files with 69 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

69
fuzzer/README.md Normal file
View file

@ -0,0 +1,69 @@
# Fuzzer for libavc decoder
This describes steps to build avc_dec_fuzzer binary.
## Linux x86/x64
### Requirements
- cmake (3.5 or above)
- make
- clang (6.0 or above)
needs to support -fsanitize=fuzzer, -fsanitize=fuzzer-no-link
### Steps to build
Clone libavc repository
```
$ git clone https://android.googlesource.com/platform/external/libavc
```
Create a directory inside libavc and change directory
```
$ cd libavc
$ mkdir build
$ cd build
```
Build libavc using cmake
```
$ CC=clang CXX=clang++ cmake ../ \
-DSANITIZE=fuzzer-no-link,address,signed-integer-overflow
$ make
```
Build the fuzzer
```
$ clang++ -std=c++11 -fsanitize=fuzzer,address -I. -I../ -I../common \
-I../decoder -Wl,--start-group ../fuzzer/avc_dec_fuzzer.cpp \
-o ./avc_dec_fuzzer ./libavcdec.a -Wl,--end-group
```
### Steps to run
Create a directory CORPUS_DIR and copy some elementary h264 files to that folder
To run the fuzzer
```
$ ./avc_dec_fuzzer CORPUS_DIR
```
## Android
### Steps to build
Build the fuzzer
```
$ SANITIZE_TARGET=address SANITIZE_HOST=address mmma -j$(nproc) \
external/libavc/fuzzer
```
### Steps to run
Create a directory CORPUS_DIR and copy some elementary h264 files to that folder
Push this directory to device.
To run on device
```
$ adb sync data
$ adb shell /data/fuzz/avc_dec_fuzzer CORPUS_DIR
```
To run on host
```
$ $ANDROID_HOST_OUT/fuzz/avc_dec_fuzzer CORPUS_DIR
```
## References:
* http://llvm.org/docs/LibFuzzer.html
* https://github.com/google/oss-fuzz

43
fuzzer/avc_dec_fuzzer.cpp
View file

@ -17,49 +17,6 @@
*****************************************************************************
* Originally developed and contributed by Ittiam Systems Pvt. Ltd, Bangalore
*/
/*
* Fuzzer for libavc decoder
* ==========================
* Requirements
* --------------
* Requires Clang 6.0 or above (needs to support -fsanitize=fuzzer,
* -fsanitize=fuzzer-no-link)
*
* Steps to build
* --------------
* Clone libavc repository
$git clone https://android.googlesource.com/platform/external/libavc
* Create a directory inside libavc and change directory
$cd libavc
$mkdir avc_dec_fuzzer
$cd avc_dec_fuzzer/
* Build libavc using cmake.
$CC=clang CXX=clang++ cmake ../ \
-DSANITIZE=fuzzer-no-link,address,signed-integer-overflow
* Build libavcdec
$make -j32
* Build avc fuzzer
$ clang++ -std=c++11 -fsanitize=fuzzer,address -I. -I../ \
-I../common -I../decoder -Wl,--start-group \
../fuzzer/avc_dec_fuzzer.cpp -o ./avc_dec_fuzzer \
./libavcdec.a -Wl,--end-group
* create a corpus directory and copy some elementary avc files there.
* Empty corpus directoy also is acceptable, though not recommended
$mkdir CORPUS && cp some-files CORPUS
* Run fuzzing:
$./avc_dec_fuzzer CORPUS
* References:
* http://llvm.org/docs/LibFuzzer.html
* https://github.com/google/oss-fuzz
*/
#include <malloc.h>
#include <stddef.h>