mpv/fuzzers/fuzzer_set_property.c

/*
 * This file is part of mpv.
 *
 * mpv is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * mpv is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with mpv.  If not, see <http://www.gnu.org/licenses/>.
 */

#include <libmpv/client.h>

#include "common.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
{
    size_t value_len;
    switch (MPV_FORMAT)
    {
    case MPV_FORMAT_STRING:
        value_len = strnlen(data, size);
        if (!value_len || value_len == size)
            return 0;
        value_len += 1;
        break;
    case MPV_FORMAT_FLAG:
        value_len = sizeof(int);
        break;
    case MPV_FORMAT_INT64:
        value_len = sizeof(int64_t);
        break;
    case MPV_FORMAT_DOUBLE:
        value_len = sizeof(double);
        break;
    default:
        exit(1);
        break;
    }

    // at least two bytes for the name
    if (size < value_len + 2)
        return 0;

    const char *name = (const char *)data + value_len;
    size_t name_len = strnlen(name, size - value_len);
    if (!name_len || name_len != size - value_len - 1)
        return 0;

    mpv_handle *ctx = mpv_create();
    if (!ctx)
        exit(1);

    check_error(mpv_set_option_string(ctx, "msg-level", "all=trace"));
    check_error(mpv_set_option_string(ctx, "network-timeout", "1"));

#if MPV_RUN
    check_error(mpv_set_option_string(ctx, "vo", "null"));
    check_error(mpv_set_option_string(ctx, "ao", "null"));

    check_error(mpv_initialize(ctx));
#endif

    int ret;
    if (MPV_FORMAT == MPV_FORMAT_STRING) {
        ret = mpv_set_property_string(ctx, name, (void *)data);
    } else {
        ret = mpv_set_property(ctx, name, MPV_FORMAT, (void *)data);
    }

    if (ret != MPV_ERROR_SUCCESS)
        goto done;

#if MPV_RUN
    check_error(mpv_set_option_string(ctx, "ao-null-untimed", "yes"));
    check_error(mpv_set_option_string(ctx, "loop-file", "no"));
    check_error(mpv_set_option_string(ctx, "loop-playlist", "no"));
    check_error(mpv_set_option_string(ctx, "pause", "no"));
    check_error(mpv_set_option_string(ctx, "untimed", "yes"));
    check_error(mpv_set_option_string(ctx, "sstep", "0"));

    mpv_node node = {
        .format = MPV_FORMAT_NODE_ARRAY,
        .u.list = &(mpv_node_list) {
            .num = 1,
            .values = &(mpv_node) {
                .format = MPV_FORMAT_STRING,
                .u.string = "av://lavfi:sine=d=0.1",
            },
        },
    };
    check_error(mpv_set_option(ctx, "audio-files", MPV_FORMAT_NODE, &node));

    node.u.list->num = 0;
    check_error(mpv_set_option(ctx, "cover-art-files", MPV_FORMAT_NODE, &node));
    check_error(mpv_set_option(ctx, "external-files", MPV_FORMAT_NODE, &node));
    check_error(mpv_set_option(ctx, "sub-files", MPV_FORMAT_NODE, &node));

    const char *cmd[] = {"loadfile", "av://lavfi:yuvtestsrc=d=0.1", NULL};
    check_error(mpv_command(ctx, cmd));

    bool loaded = false;
    while (1) {
        mpv_event *event = mpv_wait_event(ctx, -1);
        if (event->event_id == MPV_EVENT_START_FILE)
            loaded = true;
        if (loaded && event->event_id == MPV_EVENT_IDLE)
            break;
    }
#endif

done:
    mpv_terminate_destroy(ctx);

    return 0;
}