Bug 1465407 - Add media fuzzing targets. r=jya

Depends on D35776

Differential Revision: https://phabricator.services.mozilla.com/D35777

--HG--
extra : moz-landing-system : lando

Author: choller

dom/media/flac/moz.build

@@ -22,3 +22,6 @@ FINAL_LIBRARY = 'xul'
 
 if CONFIG['CC_TYPE'] in ('clang', 'gcc'):
     CXXFLAGS += ['-Wno-error=shadow']
+
+# Add libFuzzer configuration directives
+include('/tools/fuzzing/libfuzzer-config.mozbuild')

dom/media/fuzz/FuzzMedia.cpp

@@ -0,0 +1,62 @@
+/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+#include "ADTSDemuxer.h"
+#include "Benchmark.h"
+#include "BufferMediaResource.h"
+#include "FlacDemuxer.h"
+#include "FuzzingInterface.h"
+#include "mozilla/AbstractThread.h"
+#include "MP3Demuxer.h"
+#include "MP4Demuxer.h"
+#include "OggDemuxer.h"
+#include "systemservices/MediaUtils.h"
+#include "WaveDemuxer.h"
+#include "WebMDemuxer.h"
+
+using namespace mozilla;
+
+class FuzzRunner {
+ public:
+  explicit FuzzRunner(Benchmark* aBenchmark) : mBenchmark(aBenchmark) {}
+
+  void Run() {
+    mBenchmark->Init();
+    media::Await(
+        GetMediaThreadPool(MediaThreadType::PLAYBACK), mBenchmark->Run(),
+        [&](uint32_t aDecodeFps) {}, [&](const MediaResult& aError) {});
+    return;
+  }
+
+ private:
+  RefPtr<Benchmark> mBenchmark;
+};
+
+static int FuzzingInitMedia(int* argc, char*** argv) {
+  /* Generic no-op initialization used for all targets */
+  return 0;
+}
+
+#define MOZ_MEDIA_FUZZER(_name)                                         \
+  static int FuzzingRunMedia##_name(const uint8_t* data, size_t size) { \
+    if (!size) {                                                        \
+        return 0;                                                       \
+    }                                                                   \
+    RefPtr<BufferMediaResource> resource =                              \
+        new BufferMediaResource(data, size);                            \
+    FuzzRunner runner(new Benchmark(new _name##Demuxer(resource)));     \
+    runner.Run();                                                       \
+    return 0;                                                           \
+  }                                                                     \
+  MOZ_FUZZING_INTERFACE_RAW(FuzzingInitMedia, FuzzingRunMedia##_name,   \
+                            Media##_name);
+
+MOZ_MEDIA_FUZZER(ADTS);
+MOZ_MEDIA_FUZZER(Flac);
+MOZ_MEDIA_FUZZER(MP3);
+MOZ_MEDIA_FUZZER(MP4);
+MOZ_MEDIA_FUZZER(Ogg);
+MOZ_MEDIA_FUZZER(WAV);
+MOZ_MEDIA_FUZZER(WebM);

dom/media/fuzz/moz.build

@@ -0,0 +1,29 @@
+# -*- Mode: python; indent-tabs-mode: nil; tab-width: 40 -*-
+# vim: set filetype=python:
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+Library('FuzzingMedia')
+
+SOURCES += [
+    'FuzzMedia.cpp',
+]
+
+include('/ipc/chromium/chromium-config.mozbuild')
+
+LOCAL_INCLUDES += [
+    '/dom/media',
+    '/dom/media/encoder',
+    '/dom/media/gmp',
+    '/dom/media/hls',
+    '/dom/media/mp4',
+    '/dom/media/ogg',
+    '/dom/media/platforms',
+    '/dom/media/platforms/agnostic',
+]
+
+FINAL_LIBRARY = 'xul-gtest'
+
+# Add libFuzzer configuration directives
+include('/tools/fuzzing/libfuzzer-config.mozbuild')

dom/media/hls/moz.build

@@ -22,3 +22,6 @@ FINAL_LIBRARY = 'xul'
 
 if CONFIG['CC_TYPE'] in ('clang', 'gcc'):
     CXXFLAGS += ['-Wno-error=shadow']
+
+# Add libFuzzer configuration directives
+include('/tools/fuzzing/libfuzzer-config.mozbuild')

dom/media/moz.build

@@ -69,6 +69,14 @@ TEST_DIRS += [
     'gtest',
 ]
 
+# Add libFuzzer configuration directives
+include('/tools/fuzzing/libfuzzer-config.mozbuild')
+
+if CONFIG['FUZZING_INTERFACES']:
+    TEST_DIRS += [
+        'fuzz'
+    ]
+
 MOCHITEST_MANIFESTS += [
     'test/mochitest.ini',
     'tests/mochitest/identity/mochitest.ini',

dom/media/mp3/moz.build

@@ -17,3 +17,6 @@ UNIFIED_SOURCES += [
 ]
 
 FINAL_LIBRARY = 'xul'
+
+# Add libFuzzer configuration directives
+include('/tools/fuzzing/libfuzzer-config.mozbuild')

dom/media/mp4/moz.build

@@ -40,3 +40,6 @@ FINAL_LIBRARY = 'xul'
 CXXFLAGS += [
     '-Wno-sign-compare',
 ]
+
+# Add libFuzzer configuration directives
+include('/tools/fuzzing/libfuzzer-config.mozbuild')

dom/media/ogg/moz.build

@@ -23,3 +23,6 @@ UNIFIED_SOURCES += [
 ]
 
 FINAL_LIBRARY = 'xul'
+
+# Add libFuzzer configuration directives
+include('/tools/fuzzing/libfuzzer-config.mozbuild')

dom/media/platforms/moz.build

@@ -127,3 +127,6 @@ FINAL_LIBRARY = 'xul'
 
 if CONFIG['CC_TYPE'] in ('clang', 'gcc'):
     CXXFLAGS += ['-Wno-error=shadow']
+
+# Add libFuzzer configuration directives
+include('/tools/fuzzing/libfuzzer-config.mozbuild')

dom/media/platforms/omx/moz.build

@@ -34,3 +34,6 @@ if CONFIG['CC_TYPE'] in ('clang', 'gcc'):
 # Avoid warnings from third-party code that we can not modify.
 if CONFIG['CC_TYPE'] == 'clang-cl':
     CXXFLAGS += ['-Wno-invalid-source-encoding']
+
+# Add libFuzzer configuration directives
+include('/tools/fuzzing/libfuzzer-config.mozbuild')