a separate fuzzer for each codec

worker/fuzzer/include/RTC/Codecs/FuzzerH264.hpp

@@ -0,0 +1,20 @@
+#ifndef MS_FUZZER_RTC_CODECS_H264_HPP
+#define MS_FUZZER_RTC_CODECS_H264_HPP
+
+#include "common.hpp"
+
+namespace Fuzzer
+{
+	namespace RTC
+	{
+		namespace Codecs
+		{
+			namespace H264
+			{
+				void Fuzz(const uint8_t* data, size_t len);
+			}
+		} // namespace Codecs
+	}   // namespace RTC
+} // namespace Fuzzer
+
+#endif

worker/fuzzer/include/RTC/Codecs/FuzzerH264_SVC.hpp

@@ -0,0 +1,20 @@
+#ifndef MS_FUZZER_RTC_CODECS_H264_SVC_HPP
+#define MS_FUZZER_RTC_CODECS_H264_SVC_HPP
+
+#include "common.hpp"
+
+namespace Fuzzer
+{
+	namespace RTC
+	{
+		namespace Codecs
+		{
+			namespace H264_SVC
+			{
+				void Fuzz(const uint8_t* data, size_t len);
+			}
+		} // namespace Codecs
+	}   // namespace RTC
+} // namespace Fuzzer
+
+#endif

worker/fuzzer/include/RTC/Codecs/FuzzerOpus.hpp

@@ -0,0 +1,20 @@
+#ifndef MS_FUZZER_RTC_CODECS_OPUS_HPP
+#define MS_FUZZER_RTC_CODECS_OPUS_HPP
+
+#include "common.hpp"
+
+namespace Fuzzer
+{
+	namespace RTC
+	{
+		namespace Codecs
+		{
+			namespace Opus
+			{
+				void Fuzz(const uint8_t* data, size_t len);
+			}
+		} // namespace Codecs
+	}   // namespace RTC
+} // namespace Fuzzer
+
+#endif

worker/fuzzer/include/RTC/Codecs/FuzzerCodecs.hpp → worker/fuzzer/include/RTC/Codecs/FuzzerVP8.hpp

@@ -1,5 +1,5 @@
-#ifndef MS_FUZZER_RTC_CODECS_HPP
-#define MS_FUZZER_RTC_CODECS_HPP
+#ifndef MS_FUZZER_RTC_CODECS_VP8_HPP
+#define MS_FUZZER_RTC_CODECS_VP8_HPP
 
 #include "common.hpp"
 
@@ -9,7 +9,10 @@ namespace Fuzzer
 	{
 		namespace Codecs
 		{
-			void Fuzz(const uint8_t* data, size_t len);
+			namespace VP8
+			{
+				void Fuzz(const uint8_t* data, size_t len);
+			}
 		} // namespace Codecs
 	}   // namespace RTC
 } // namespace Fuzzer

worker/fuzzer/include/RTC/Codecs/FuzzerVP9.hpp

@@ -0,0 +1,20 @@
+#ifndef MS_FUZZER_RTC_CODECS_VP9_HPP
+#define MS_FUZZER_RTC_CODECS_VP9_HPP
+
+#include "common.hpp"
+
+namespace Fuzzer
+{
+	namespace RTC
+	{
+		namespace Codecs
+		{
+			namespace VP9
+			{
+				void Fuzz(const uint8_t* data, size_t len);
+			}
+		} // namespace Codecs
+	}   // namespace RTC
+} // namespace Fuzzer
+
+#endif

worker/fuzzer/reports/crash-7e7caf72377ad55d353719f28febb5238eadfc9e

@@ -0,0 +1 @@
+88t

worker/fuzzer/src/RTC/Codecs/FuzzerH264.cpp

@@ -0,0 +1,14 @@
+#include "RTC/Codecs/FuzzerH264.hpp"
+#include "RTC/Codecs/H264.hpp"
+
+void Fuzzer::RTC::Codecs::H264::Fuzz(const uint8_t* data, size_t len)
+{
+	::RTC::Codecs::H264::PayloadDescriptor* descriptor = ::RTC::Codecs::H264::Parse(data, len);
+
+	if (!descriptor)
+	{
+		return;
+	}
+
+	delete descriptor;
+}

worker/fuzzer/src/RTC/Codecs/FuzzerH264_SVC.cpp

@@ -0,0 +1,14 @@
+#include "RTC/Codecs/FuzzerH264_SVC.hpp"
+#include "RTC/Codecs/H264_SVC.hpp"
+
+void Fuzzer::RTC::Codecs::H264_SVC::Fuzz(const uint8_t* data, size_t len)
+{
+	::RTC::Codecs::H264_SVC::PayloadDescriptor* descriptor = ::RTC::Codecs::H264_SVC::Parse(data, len);
+
+	if (!descriptor)
+	{
+		return;
+	}
+
+	delete descriptor;
+}

worker/fuzzer/src/RTC/Codecs/FuzzerOpus.cpp

@@ -0,0 +1,14 @@
+#include "RTC/Codecs/FuzzerOpus.hpp"
+#include "RTC/Codecs/Opus.hpp"
+
+void Fuzzer::RTC::Codecs::Opus::Fuzz(const uint8_t* data, size_t len)
+{
+	::RTC::Codecs::Opus::PayloadDescriptor* descriptor = ::RTC::Codecs::Opus::Parse(data, len);
+
+	if (!descriptor)
+	{
+		return;
+	}
+
+	delete descriptor;
+}

worker/fuzzer/src/RTC/Codecs/FuzzerVP8.cpp

@@ -0,0 +1,14 @@
+#include "RTC/Codecs/FuzzerVP8.hpp"
+#include "RTC/Codecs/VP8.hpp"
+
+void Fuzzer::RTC::Codecs::VP8::Fuzz(const uint8_t* data, size_t len)
+{
+	::RTC::Codecs::VP8::PayloadDescriptor* descriptor = ::RTC::Codecs::VP8::Parse(data, len);
+
+	if (!descriptor)
+	{
+		return;
+	}
+
+	delete descriptor;
+}

worker/fuzzer/src/RTC/Codecs/FuzzerVP9.cpp

@@ -0,0 +1,14 @@
+#include "RTC/Codecs/FuzzerVP9.hpp"
+#include "RTC/Codecs/VP9.hpp"
+
+void Fuzzer::RTC::Codecs::VP9::Fuzz(const uint8_t* data, size_t len)
+{
+	::RTC::Codecs::VP9::PayloadDescriptor* descriptor = ::RTC::Codecs::VP9::Parse(data, len);
+
+	if (!descriptor)
+	{
+		return;
+	}
+
+	delete descriptor;
+}

worker/fuzzer/src/fuzzer.cpp

@@ -9,7 +9,11 @@
 #include "LogLevel.hpp"
 #include "Settings.hpp"
 #include "Utils.hpp"
-#include "RTC/Codecs/FuzzerCodecs.hpp"
+#include "RTC/Codecs/FuzzerH264.hpp"
+#include "RTC/Codecs/FuzzerH264_SVC.hpp"
+#include "RTC/Codecs/FuzzerOpus.hpp"
+#include "RTC/Codecs/FuzzerVP8.hpp"
+#include "RTC/Codecs/FuzzerVP9.hpp"
 #include "RTC/DtlsTransport.hpp"
 #include "RTC/FuzzerDtlsTransport.hpp"
 #include "RTC/FuzzerRtpPacket.hpp"
@@ -66,7 +70,11 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t len)
 
 	if (fuzzCodecs)
 	{
-		Fuzzer::RTC::Codecs::Fuzz(data, len);
+		Fuzzer::RTC::Codecs::Opus::Fuzz(data, len);
+		Fuzzer::RTC::Codecs::VP8::Fuzz(data, len);
+		Fuzzer::RTC::Codecs::VP9::Fuzz(data, len);
+		Fuzzer::RTC::Codecs::H264::Fuzz(data, len);
+		Fuzzer::RTC::Codecs::H264_SVC::Fuzz(data, len);
 	}
 
 	if (fuzzUtils)
@@ -137,7 +145,7 @@ int Init()
 
 		fuzzUtils = true;
 	}
-	if (!fuzzStun && !fuzzDtls && !fuzzRtcp && !fuzzRtp && !fuzzUtils)
+	if (!fuzzStun && !fuzzDtls && !fuzzRtp && !fuzzRtcp && !fuzzCodecs && !fuzzUtils)
 	{
 		std::cout << "[fuzzer] all fuzzers enabled" << std::endl;
 

worker/meson.build

@@ -438,7 +438,11 @@ executable(
     'fuzzer/src/RTC/FuzzerSeqManager.cpp',
     'fuzzer/src/RTC/FuzzerStunPacket.cpp',
     'fuzzer/src/RTC/FuzzerTrendCalculator.cpp',
-    'fuzzer/src/RTC/Codecs/FuzzerCodecs.cpp',
+    'fuzzer/src/RTC/Codecs/FuzzerOpus.cpp',
+    'fuzzer/src/RTC/Codecs/FuzzerVP8.cpp',
+    'fuzzer/src/RTC/Codecs/FuzzerVP9.cpp',
+    'fuzzer/src/RTC/Codecs/FuzzerH264.cpp',
+    'fuzzer/src/RTC/Codecs/FuzzerH264_SVC.cpp',
     'fuzzer/src/RTC/RTCP/FuzzerBye.cpp',
     'fuzzer/src/RTC/RTCP/FuzzerFeedbackPs.cpp',
     'fuzzer/src/RTC/RTCP/FuzzerFeedbackPsAfb.cpp',