Coverage Report

Created: 2026-08-13 06:54

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/vorbis/contrib/oss-fuzz/decode_fuzzer.cc
Line
Count
Source
1
#include <stdio.h>
2
#include <string.h>
3
#include <cstdint>
4
#include <vorbis/vorbisfile.h>
5
6
struct vorbis_data {
7
  const uint8_t *current;
8
  const uint8_t *data;
9
  size_t size;
10
};
11
12
19.3k
size_t read_func(void *ptr, size_t size1, size_t size2, void *datasource) {
13
19.3k
  vorbis_data* vd = (vorbis_data *)(datasource);
14
19.3k
  size_t len = size1 * size2;
15
19.3k
  if (vd->current + len > vd->data + vd->size) {
16
7.30k
      len = vd->data + vd->size - vd->current;
17
7.30k
  }
18
19.3k
  memcpy(ptr, vd->current, len);
19
19.3k
  vd->current += len;
20
19.3k
  return len;
21
19.3k
}
22
23
24
4.85k
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *Data, size_t Size) {
25
4.85k
  ov_callbacks memory_callbacks = {0};
26
4.85k
  memory_callbacks.read_func = read_func;
27
4.85k
  vorbis_data data_st;
28
4.85k
  data_st.size = Size;
29
4.85k
  data_st.current = Data;
30
4.85k
  data_st.data = Data;
31
4.85k
  OggVorbis_File vf;
32
4.85k
  int result = ov_open_callbacks(&data_st, &vf, NULL, 0, memory_callbacks);
33
4.85k
  if (result < 0) {
34
2.60k
    return 0;
35
2.60k
  }
36
2.24k
  int current_section = 0;
37
2.24k
  int eof = 0;
38
2.24k
  char buf[4096];
39
2.24k
  int read_result;
40
580k
  while (!eof) {
41
577k
    read_result = ov_read(&vf, buf, sizeof(buf), 0, 2, 1, &current_section);
42
577k
    if (read_result != OV_HOLE && read_result <= 0) {
43
2.24k
      eof = 1;
44
2.24k
    }
45
577k
  }
46
2.24k
  ov_clear(&vf);
47
2.24k
  return 0;
48
4.85k
}