1
0
mirror of https://github.com/mpv-player/mpv synced 2025-02-17 21:27:08 +00:00
mpv/fuzzers/fuzzer_set_property.c
Kacper Michajłow ed77616f29 fuzzer: stop player after 5 seconds of playback
Timeouts can happen with various conditions, big, slow to decode files
is one of them. Most of the time those timeouts are not really important
to "fix". While they may show some issues like we currently have with
audio EOF #14427 for ao-null-untimed. Most of the reports are completely
not important and we should focus on other topics.

Ignore the timeouts during file playback, note that this will still
report any timeouts that happen in other conditions.

5 seconds of playback should cover most of interesting mpv code, even
for strange samples.

This will likely be reverted at some point in the future, but let first
stabilize the OSS-Fuzz, without dozens of bogus timeouts.
2024-07-17 22:17:52 +02:00

116 lines
3.4 KiB
C

/*
* This file is part of mpv.
*
* mpv is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* mpv is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with mpv. If not, see <http://www.gnu.org/licenses/>.
*/
#include <libmpv/client.h>
#include "common.h"
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
{
size_t value_len;
switch (MPV_FORMAT)
{
case MPV_FORMAT_STRING:
value_len = strnlen(data, size);
if (!value_len || value_len == size)
return 0;
value_len += 1;
break;
case MPV_FORMAT_FLAG:
value_len = sizeof(int);
break;
case MPV_FORMAT_INT64:
value_len = sizeof(int64_t);
break;
case MPV_FORMAT_DOUBLE:
value_len = sizeof(double);
break;
default:
exit(1);
break;
}
// at least two bytes for the name
if (size < value_len + 2)
return 0;
const char *name = (const char *)data + value_len;
size_t name_len = strnlen(name, size - value_len);
if (!name_len || name_len != size - value_len - 1)
return 0;
mpv_handle *ctx = mpv_create();
if (!ctx)
exit(1);
check_error(mpv_set_option_string(ctx, "msg-level", "all=trace"));
check_error(mpv_set_option_string(ctx, "network-timeout", "1"));
#if MPV_RUN
check_error(mpv_set_option_string(ctx, "vo", "null"));
check_error(mpv_set_option_string(ctx, "ao", "null"));
check_error(mpv_initialize(ctx));
#endif
int ret;
if (MPV_FORMAT == MPV_FORMAT_STRING) {
ret = mpv_set_property_string(ctx, name, (void *)data);
} else {
ret = mpv_set_property(ctx, name, MPV_FORMAT, (void *)data);
}
if (ret != MPV_ERROR_SUCCESS)
goto done;
#if MPV_RUN
check_error(mpv_set_option_string(ctx, "ao-null-untimed", "yes"));
check_error(mpv_set_option_string(ctx, "loop-file", "no"));
check_error(mpv_set_option_string(ctx, "loop-playlist", "no"));
check_error(mpv_set_option_string(ctx, "pause", "no"));
check_error(mpv_set_option_string(ctx, "untimed", "yes"));
check_error(mpv_set_option_string(ctx, "sstep", "0"));
mpv_node node = {
.format = MPV_FORMAT_NODE_ARRAY,
.u.list = &(mpv_node_list) {
.num = 1,
.values = &(mpv_node) {
.format = MPV_FORMAT_STRING,
.u.string = "av://lavfi:sine=d=0.1",
},
},
};
check_error(mpv_set_option(ctx, "audio-files", MPV_FORMAT_NODE, &node));
node.u.list->num = 0;
check_error(mpv_set_option(ctx, "cover-art-files", MPV_FORMAT_NODE, &node));
check_error(mpv_set_option(ctx, "external-files", MPV_FORMAT_NODE, &node));
check_error(mpv_set_option(ctx, "sub-files", MPV_FORMAT_NODE, &node));
const char *cmd[] = {"loadfile", "av://lavfi:yuvtestsrc=d=0.1", NULL};
check_error(mpv_command(ctx, cmd));
player_loop(ctx);
#endif
done:
mpv_terminate_destroy(ctx);
return 0;
}