[FFmpeg-devel] Fuzzer fixes

[FFmpeg-devel] Fuzzer fixes

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 662 bytes --]

Hi

If someone has spare time, there are some public open issues on:
https://issues.oss-fuzz.com/issues?q=status:open%20componentid:1638179%20title:ffmpeg

check if they have pending fixes on the ML first and if so help review
if no pending fix, please submit a fix.
(its easy to check as fixes should refer to the testcase filename)

If people help, i would have more time and can do other work (like release) sooner

thx

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Complexity theory is the science of finding the exact solution to an
approximation. Benchmarking OTOH is finding an approximation of the exact

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] Fuzzer fixes

[Tristan Matthews via ffmpeg-devel]

On Wednesday, May 28th, 2025 at 11:17 AM, Michael Niedermayer <michael@niedermayer.cc> wrote:

> Hi
> 
> If someone has spare time, there are some public open issues on:
> https://issues.oss-fuzz.com/issues?q=status:open componentid:1638179 title:ffmpeg
> 
> check if they have pending fixes on the ML first and if so help review
> if no pending fix, please submit a fix.
> (its easy to check as fixes should refer to the testcase filename)
> 
> If people help, i would have more time and can do other work (like release) sooner
> 
> thx
> 
> --
> Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB
> 
> Complexity theory is the science of finding the exact solution to an
> approximation. Benchmarking OTOH is finding an approximation of the exact
> _______________________________________________
> ffmpeg-devel mailing list
> ffmpeg-devel@ffmpeg.org
> https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
> 
> To unsubscribe, visit link above, or email
> ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

In case it saves someone time, seems like the latest HEAD of freetype isn't building properly in this context so I had to use this patch to build the fuzzer:


diff --git a/projects/ffmpeg/Dockerfile b/projects/ffmpeg/Dockerfile
index ea4a43f1c..d5129396c 100644
--- a/projects/ffmpeg/Dockerfile
+++ b/projects/ffmpeg/Dockerfile
@@ -27,7 +27,7 @@ RUN git clone https://git.ffmpeg.org/ffmpeg.git ffmpeg
 RUN curl -O https://www.alsa-project.org/files/pub/lib/alsa-lib-1.2.12.tar.bz2
 RUN git clone --depth 1 https://github.com/mstorsjo/fdk-aac.git
 RUN git clone --depth 1 https://gitlab.freedesktop.org/fontconfig/fontconfig.git
-RUN git clone --depth 1 https://gitlab.freedesktop.org/freetype/freetype.git
+RUN git clone --depth 1 --branch VER-2-13-3 https://gitlab.freedesktop.org/freetype/freetype.git
 RUN git clone --depth 1 https://github.com/fribidi/fribidi
 RUN git clone --depth 1 https://github.com/harfbuzz/harfbuzz
 RUN git clone --depth 1 https://github.com/libass/libass 
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".

Re: [FFmpeg-devel] Fuzzer fixes

[Michael Niedermayer]

[-- Attachment #1.1: Type: text/plain, Size: 1771 bytes --]

On Wed, May 28, 2025 at 09:59:30PM +0000, Tristan Matthews via ffmpeg-devel wrote:
> On Wednesday, May 28th, 2025 at 11:17 AM, Michael Niedermayer <michael@niedermayer.cc> wrote:
> 
> > Hi
> > 
> > If someone has spare time, there are some public open issues on:
> > https://issues.oss-fuzz.com/issues?q=status:open componentid:1638179 title:ffmpeg
> > 
> > check if they have pending fixes on the ML first and if so help review
> > if no pending fix, please submit a fix.
> > (its easy to check as fixes should refer to the testcase filename)
> > 
> > If people help, i would have more time and can do other work (like release) sooner
> > 
> > thx
> > 
> > --
> > Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB
> > 
> > Complexity theory is the science of finding the exact solution to an
> > approximation. Benchmarking OTOH is finding an approximation of the exact
> > _______________________________________________
> > ffmpeg-devel mailing list
> > ffmpeg-devel@ffmpeg.org
> > https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
> > 
> > To unsubscribe, visit link above, or email
> > ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".
> 
> In case it saves someone time, seems like the latest HEAD of freetype isn't building properly in this context so I had to use this patch to build the fuzzer:

or skip docker and just run the fuzzer in your local checkout than none of
this affects you

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

Rewriting code that is poorly written but fully understood is good.
Rewriting code that one doesnt understand is a sign that one is less smart
than the original author, trying to rewrite it will not make it better.

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 251 bytes --]

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".