Function LLVMFuzzerTestOneInput

apps/fuzzers/Fuzzer/fuzz_wss.cpp:26–69

}

extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
{
    if (size < 1)
        return 0;

    // Force a valid WSS header with a chosen delta-pack mode so the BIS delta
    // decompressor is actually exercised -- real seeds are uncompressed (deltaPack
    // 0), so plain mutation almost never sets it. data[0] picks 0/4/8; the rest is
    // the (attacker-controlled) WAVEFORMATEX + delta-packed audio payload.
    static const unsigned char dpModes[] = {0, 4, 8};
    std::vector<unsigned char> wss;
    wss.reserve(size + 8);
    wss.push_back('W');
    wss.push_back('S');
    wss.push_back('S');
    wss.push_back('0');
    wss.push_back(dpModes[data[0] % 3]);
    wss.push_back(0); // resvd
    wss.push_back(0);
    wss.push_back(0);
    wss.insert(wss.end(), data + 1, data + size);

    try
    {
        WaveStream* ws = SoundLoadMemory(wss.data(), wss.size(), ".wss");
        if (ws)
        {
            WAVEFORMATEX fmt;
            ws->GetFormat(fmt);
            int total = ws->GetUncompressedSize();
            int cap = (total < 0) ? 0 : std::min(total, 16 << 20); // bound the decoded read
            std::vector<char> buf(4096);
            for (int off = 0; off < cap; off += static_cast<int>(buf.size()))
            {
                ws->GetData(buf.data(), off, std::min(static_cast<int>(buf.size()), cap - off));
            }
            delete ws;
        }
    }
    catch (...)
    {
    }
    return 0;
}