Coverage Report

Created: 2026-01-17 06:25

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/libhevc/fuzzer/hevc_enc_fuzzer.cpp
Line
Count
Source
1
/******************************************************************************
2
 *
3
 * Copyright (C) 2020 The Android Open Source Project
4
 *
5
 * Licensed under the Apache License, Version 2.0 (the "License");
6
 * you may not use this file except in compliance with the License.
7
 * You may obtain a copy of the License at:
8
 *
9
 * http://www.apache.org/licenses/LICENSE-2.0
10
 *
11
 * Unless required by applicable law or agreed to in writing, software
12
 * distributed under the License is distributed on an "AS IS" BASIS,
13
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14
 * See the License for the specific language governing permissions and
15
 * limitations under the License.
16
 *
17
 *****************************************************************************
18
 * Originally developed and contributed by Ittiam Systems Pvt. Ltd, Bangalore
19
 */
20
#include <algorithm>
21
#include <memory>
22
#include <string.h>
23
24
#include "ihevc_typedefs.h"
25
#include "itt_video_api.h"
26
#include "ihevce_api.h"
27
#include "ihevce_plugin.h"
28
#include "ihevce_profile.h"
29
30
#define NELEMENTS(x) (sizeof(x) / sizeof(x[0]))
31
constexpr size_t kRcType[] = {2, 3, 5};
32
constexpr IHEVCE_QUALITY_CONFIG_T kQuality[] = {
33
    IHEVCE_QUALITY_P0, IHEVCE_QUALITY_P2, IHEVCE_QUALITY_P3, IHEVCE_QUALITY_P4,
34
    IHEVCE_QUALITY_P5, IHEVCE_QUALITY_P6, IHEVCE_QUALITY_P7};
35
36
constexpr size_t kRcTypeNum = NELEMENTS(kRcType);
37
constexpr size_t kQualityNum = NELEMENTS(kQuality);
38
constexpr size_t kMaxQP = 51;
39
constexpr size_t kMaxGopPeriod = 16;
40
constexpr size_t kMaxWidth = 10240;
41
constexpr size_t kMaxHeight = 10240;
42
constexpr size_t kMaxBitrate = 500000000;
43
44
enum {
45
    IDX_WD_BYTE_1,
46
    IDX_WD_BYTE_2,
47
    IDX_HT_BYTE_1,
48
    IDX_HT_BYTE_2,
49
    IDX_MAX_INTRA_TX_DEPTH,
50
    IDX_MAX_INTER_TX_DEPTH,
51
    IDX_CU_RC,
52
    IDX_RC_MODE,
53
    IDX_FRAME_QP,
54
    IDX_PRESET,
55
    IDX_BITRATE_BYTE_1,
56
    IDX_BITRATE_BYTE_2,
57
    IDX_ENABLE_ENTROPY_SYNC,
58
    IDX_DEBLOCKING_TYPE,
59
    IDX_USE_SC_MTX,
60
    IDX_MAX_TEMPORAL_LAYERS,
61
    IDX_MAX_CLOSED_GOP,
62
    IDX_MIN_CLOSED_GOP,
63
    IDX_MAX_I_OPEN_GOP,
64
    IDX_MAX_CRA_OPEN_GOP,
65
    IDX_ENABLE_SPS_AT_CDR,
66
    IDX_ENABLE_VUI,
67
    IDX_ENABLE_SEI,
68
    IDX_ARCH_TYPE,
69
    IDX_ENABLE_FORCE_IDR,
70
    IDX_ENABLE_DYNAMIC_BITRATE,
71
    IDX_FORCE_IDR_INTERVAL,
72
    IDX_DYNAMIC_BITRATE_INTERVAL,
73
    IDX_LAST
74
};
75
76
class Codec {
77
   public:
78
343
    Codec() = default;
79
877
    ~Codec() { deInitEncoder(); }
80
    bool initEncoder(const uint8_t *data);
81
    void deInitEncoder();
82
    void encodeFrames(const uint8_t *data, size_t size);
83
84
   private:
85
    bool mIsForceIdrEnabled = false;
86
    bool mIsDynamicBitrateChangeEnabled = false;
87
    size_t mWidth = 352;
88
    size_t mHeight = 288;
89
    size_t mForceIdrInterval = 0;        // in number of frames
90
    size_t mDynamicBitrateInterval = 0;  // in number of frames
91
    uint64_t mBitrate = 5000000;
92
    void *mCodecCtx = nullptr;
93
    ihevce_static_cfg_params_t mEncParams = {};
94
};
95
96
343
bool Codec::initEncoder(const uint8_t *data) {
97
    // default configuration
98
343
    if (IHEVCE_EOK != ihevce_set_def_params(&mEncParams)) {
99
0
        return false;
100
0
    }
101
343
    mWidth = ((data[IDX_WD_BYTE_1] << 8) | data[IDX_WD_BYTE_2]) % kMaxWidth;
102
343
    mHeight = ((data[IDX_HT_BYTE_1] << 8) | data[IDX_HT_BYTE_2]) % kMaxHeight;
103
104
    // update configuration
105
343
    mEncParams.s_src_prms.i4_width = mWidth;
106
343
    mEncParams.s_src_prms.i4_height = mHeight;
107
108
343
    mEncParams.s_config_prms.i4_max_tr_tree_depth_I = (data[IDX_MAX_INTRA_TX_DEPTH] % 3) + 1;
109
343
    mEncParams.s_config_prms.i4_max_tr_tree_depth_nI = (data[IDX_MAX_INTER_TX_DEPTH] & 0x03) + 1;
110
343
    mEncParams.s_config_prms.i4_cu_level_rc = data[IDX_CU_RC] & 0x01;
111
343
    mEncParams.s_config_prms.i4_rate_control_mode = kRcType[data[IDX_RC_MODE] % kRcTypeNum];
112
113
343
    mEncParams.s_tgt_lyr_prms.as_tgt_params[0].ai4_frame_qp[0] = (data[IDX_FRAME_QP] % kMaxQP) + 1;
114
343
    mEncParams.s_tgt_lyr_prms.as_tgt_params[0].i4_quality_preset =
115
343
        kQuality[data[IDX_PRESET] % kQualityNum];
116
343
    mEncParams.s_tgt_lyr_prms.as_tgt_params[0].ai4_tgt_bitrate[0] =
117
343
        (((data[IDX_BITRATE_BYTE_1] << 8) | data[IDX_BITRATE_BYTE_2]) * 1000) % kMaxBitrate;
118
343
    mEncParams.s_tgt_lyr_prms.as_tgt_params[0].ai4_peak_bitrate[0] =
119
343
        ((((data[IDX_BITRATE_BYTE_1] << 8) | data[IDX_BITRATE_BYTE_2]) * 1000) % kMaxBitrate) << 1;
120
343
    mEncParams.s_coding_tools_prms.i4_enable_entropy_sync = data[IDX_ENABLE_ENTROPY_SYNC] & 0x01;
121
343
    mEncParams.s_coding_tools_prms.i4_deblocking_type = data[IDX_DEBLOCKING_TYPE] & 0x01;
122
343
    mEncParams.s_coding_tools_prms.i4_use_default_sc_mtx = data[IDX_USE_SC_MTX] & 0x01;
123
343
    mEncParams.s_coding_tools_prms.i4_max_temporal_layers = data[IDX_MAX_TEMPORAL_LAYERS] & 0x02;
124
343
    mEncParams.s_coding_tools_prms.i4_max_closed_gop_period =
125
343
        data[IDX_MAX_CLOSED_GOP] % kMaxGopPeriod;
126
343
    mEncParams.s_coding_tools_prms.i4_min_closed_gop_period =
127
343
        data[IDX_MIN_CLOSED_GOP] % kMaxGopPeriod;
128
343
    mEncParams.s_coding_tools_prms.i4_max_i_open_gop_period =
129
343
        data[IDX_MAX_I_OPEN_GOP] % kMaxGopPeriod;
130
343
    mEncParams.s_coding_tools_prms.i4_max_cra_open_gop_period =
131
343
        data[IDX_MAX_CRA_OPEN_GOP] % kMaxGopPeriod;
132
133
343
    mEncParams.s_out_strm_prms.i4_sps_at_cdr_enable = data[IDX_ENABLE_SPS_AT_CDR] & 0x01;
134
343
    mEncParams.s_out_strm_prms.i4_vui_enable = data[IDX_ENABLE_VUI] & 0x01;
135
343
    mEncParams.s_out_strm_prms.i4_sei_enable_flag = data[IDX_ENABLE_SEI] & 0x01;
136
137
343
    mEncParams.e_arch_type = ((data[IDX_ARCH_TYPE] & 0x03) == 0x00) ? ARCH_ARM_NONEON : ARCH_NA;
138
343
    mIsForceIdrEnabled = data[IDX_ENABLE_FORCE_IDR] & 0x01;
139
343
    mIsDynamicBitrateChangeEnabled = data[IDX_ENABLE_DYNAMIC_BITRATE] & 0x01;
140
343
    mForceIdrInterval = data[IDX_FORCE_IDR_INTERVAL] & 0x07;
141
343
    mDynamicBitrateInterval = data[IDX_DYNAMIC_BITRATE_INTERVAL] & 0x07;
142
143
343
    if (IHEVCE_EOK != ihevce_init(&mEncParams, &mCodecCtx)) {
144
2
        return false;
145
2
    }
146
341
    return true;
147
343
}
148
149
341
void Codec::encodeFrames(const uint8_t *data, size_t size) {
150
341
    size_t frameSize = (mWidth * mHeight * 3) / 2;
151
152
341
    ihevce_out_buf_t sHeaderOp{};
153
341
    ihevce_encode_header(mCodecCtx, &sHeaderOp);
154
341
    size_t frameNumber = 0;
155
341
    uint8_t *tmpData = new uint8_t[frameSize];
156
9.27k
    while (size > 0) {
157
8.93k
        ihevce_inp_buf_t sEncodeIp{};
158
8.93k
        ihevce_out_buf_t sEncodeOp{};
159
8.93k
        size_t bytesConsumed = std::min(size, frameSize);
160
8.93k
        if (bytesConsumed < frameSize) {
161
341
            memset(&tmpData[bytesConsumed], data[0], frameSize - bytesConsumed);
162
341
        }
163
8.93k
        memcpy(tmpData, data, bytesConsumed);
164
8.93k
        int32_t yStride = mWidth;
165
8.93k
        int32_t uStride = mWidth >> 1;
166
8.93k
        int32_t vStride = mWidth >> 1;
167
168
8.93k
        sEncodeIp.apv_inp_planes[0] = tmpData;
169
8.93k
        sEncodeIp.apv_inp_planes[1] = tmpData + (mWidth * mHeight);
170
8.93k
        sEncodeIp.apv_inp_planes[2] = tmpData + ((mWidth * mHeight) * 5) / 4;
171
172
8.93k
        sEncodeIp.ai4_inp_strd[0] = yStride;
173
8.93k
        sEncodeIp.ai4_inp_strd[1] = uStride;
174
8.93k
        sEncodeIp.ai4_inp_strd[2] = vStride;
175
176
8.93k
        sEncodeIp.ai4_inp_size[0] = yStride * mHeight;
177
8.93k
        sEncodeIp.ai4_inp_size[1] = uStride * mHeight >> 1;
178
8.93k
        sEncodeIp.ai4_inp_size[2] = vStride * mHeight >> 1;
179
180
8.93k
        sEncodeIp.i4_force_idr_flag = 0;
181
8.93k
        sEncodeIp.i4_curr_bitrate = mBitrate;
182
8.93k
        sEncodeIp.i4_curr_peak_bitrate = mBitrate << 1;
183
8.93k
        sEncodeIp.u8_pts = 0;
184
8.93k
        if (mIsForceIdrEnabled) {
185
2.80k
            if (frameNumber == mForceIdrInterval) {
186
86
                sEncodeIp.i4_force_idr_flag = 1;
187
86
            }
188
2.80k
        }
189
8.93k
        if (mIsDynamicBitrateChangeEnabled) {
190
3.31k
            if (frameNumber == mDynamicBitrateInterval) {
191
71
                mBitrate = mBitrate << 1;
192
71
            }
193
3.31k
        }
194
8.93k
        ihevce_encode(mCodecCtx, &sEncodeIp, &sEncodeOp);
195
8.93k
        ++frameNumber;
196
8.93k
        data += bytesConsumed;
197
8.93k
        size -= bytesConsumed;
198
8.93k
    }
199
341
    delete[] tmpData;
200
341
}
201
202
343
void Codec::deInitEncoder() {
203
343
    if (mCodecCtx) {
204
341
        ihevce_close(mCodecCtx);
205
341
        mCodecCtx = nullptr;
206
341
    }
207
343
    return;
208
343
}
209
210
343
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
211
343
    if (size < IDX_LAST) {
212
0
        return 0;
213
0
    }
214
343
    Codec *codec = new Codec();
215
343
    if (codec->initEncoder(data)) {
216
341
        data += IDX_LAST;
217
341
        size -= IDX_LAST;
218
341
        codec->encodeFrames(data, size);
219
341
    }
220
343
    delete codec;
221
343
    return 0;
222
343
}