6 Commits

Author	SHA1	Message	Date
Vincent Rabaud	4f200de591	Switch public fuzz tests to fuzztest. ... Change-Id: I75afb65058690585bbf2671c27d6a99a87bcaab7	2024-06-05 14:08:27 +02:00
James Zern	0081693d61	enc_dec_fuzzer: use WebPDecode() ... rather than WebPDecodeRGBA(). This allows finer grained error detection and avoids an abort() when running under the nallocfuzz engine. Change-Id: I8ff37f2fe7e1c8b39bd4a8bfe7b26ac41149ba42	2023-07-18 16:24:11 -07:00
James Zern	0fcb311cfc	enc_dec_fuzzer: fix WebPEncode/pic.error_code check ... pic.error_code may be set to VP8_ENC_ERROR_BAD_WRITE if the writer fails due to a memory allocation failure. Found by Nallocfuzz (https://github.com/catenacyber/nallocfuzz). Change-Id: I912c9e5f9a37b78832c52d9ab6f0710967fbadac	2023-07-18 16:24:09 -07:00
James Zern	cc3577e9b9	fuzzer/*: use src/ based include paths ... this synchronizes the code with chrome, where this format allows the code to pass buildtools/checkdeps/checkdeps.py Bug: 1141126 Change-Id: I25361b1a43cd95730814302f02aa16af8fdb5fd2	2021-01-29 20:04:08 -08:00
James Zern	83604bf3ac	{animencoder,enc_dec}_fuzzer: convert some abort()s to returns ... with functions that can legitimately fail when under memory pressure the fuzzer should exit gracefully rather than abort(). + add some more error detail to output Bug: chromium:1140448 Change-Id: I1a8582a939e0a5b2b8631c95c0464658c99063e2	2020-10-21 10:48:05 -07:00
James Zern	bd94090a11	import fuzzers from oss-fuzz/chromium ... + a simple makefile + README these were mostly equivalent, chromium added support for WEBP_REDUCE_CSP. the file names were normalized as follows: fuzz_advanced_api.{c,cc} -> advanced_api_fuzzer.c fuzz_animation_api.{c,cc} -> animation_api_fuzzer.c fuzz_webp_animencoder.cc -> animencoder_fuzzer.cc fuzz_demux_api.{c,cc} -> demux_api_fuzzer.c fuzz_webp_enc_dec.cc -> enc_dec_fuzzer.cc fuzz.h -> fuzz_utils.h fuzz_simple_api.{c,cc} -> simple_api_fuzzer.c Bug: webp:409 Change-Id: Ib997f0c92f25f8a1f91da83790298cd848b61a5d	2020-10-13 18:31:08 -07:00