From a9a0bf29de3605113d418cded13e99eac8b18647 Mon Sep 17 00:00:00 2001
From: Jacob Gelman <3182119+ladvoc@users.noreply.github.com>
Date: Mon, 31 Aug 2026 16:55:39 -0700
Subject: [PATCH 1/2] Add fuzz test for packet deserialization

---
 datatrack/packet_fuzz_test.go | 77 +++++++++++++++++++++++++++++++++++
 1 file changed, 77 insertions(+)
 create mode 100644 datatrack/packet_fuzz_test.go

diff --git a/datatrack/packet_fuzz_test.go b/datatrack/packet_fuzz_test.go
new file mode 100644
index 000000000..db35a1799
--- /dev/null
+++ b/datatrack/packet_fuzz_test.go
@@ -0,0 +1,77 @@
+// Copyright 2026 LiveKit, Inc.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package datatrack_test
+
+import (
+	"testing"
+	"time"
+
+	"github.com/stretchr/testify/require"
+
+	"github.com/livekit/protocol/datatrack"
+	"github.com/livekit/protocol/datatrack/datatracktest"
+)
+
+// Mutation-based fuzzing for packet deserialization.
+//
+// Run with:
+//
+//	go test -fuzz FuzzPacketUnmarshal ./datatrack
+//
+// A plain `go test` only exercises the seed corpus below.
+func FuzzPacketUnmarshal(f *testing.F) {
+	// Fixed vectors from packet_test.go: no extensions, participant SID
+	// extension, and extension with padding.
+	f.Add([]byte{
+		0x18, 0x00, 0x0d, 0x05, 0x1a, 0x0a, 0x27, 0x0f,
+		0xde, 0xad, 0xbe, 0xef, 0xff, 0xfe, 0xfd, 0xfc,
+		0xfb, 0xfa,
+	})
+	f.Add([]byte{
+		0x14, 0x00, 0x0d, 0x05, 0x1a, 0x0a, 0x27, 0x0f,
+		0xde, 0xad, 0xbe, 0xef, 0x00, 0x04, 0x01, 0x10,
+		0x74, 0x65, 0x73, 0x74, 0x5f, 0x70, 0x61, 0x72,
+		0x74, 0x69, 0x63, 0x69, 0x70, 0x61, 0x6e, 0x74,
+		0xff, 0xfe, 0xfd, 0xfc,
+	})
+	f.Add([]byte{
+		0x14, 0x00, 0x0d, 0x05, 0x1a, 0x0a, 0x27, 0x0f,
+		0xde, 0xad, 0xbe, 0xef, 0x00, 0x03, 0x01, 0x0b,
+		0x70, 0x61, 0x72, 0x74, 0x69, 0x63, 0x69, 0x70,
+		0x61, 0x6e, 0x74, 0x00, 0xff, 0xfe, 0xfd, 0xfc,
+	})
+
+	// Generated multi-packet frames with the participant SID extension.
+	for _, raw := range datatracktest.GenerateRawDataPackets(1, 1, 1, 4, 600, 10*time.Millisecond) {
+		f.Add(raw)
+	}
+
+	f.Fuzz(func(t *testing.T, data []byte) {
+		var p datatrack.Packet
+		if err := p.Unmarshal(data); err != nil {
+			// Malformed input must be rejected with an error, never a panic.
+			return
+		}
+
+		// Round-trip stability: a packet that parsed must marshal, and the
+		// re-parsed result must be structurally identical.
+		buf, err := p.Marshal()
+		require.NoError(t, err)
+
+		var p2 datatrack.Packet
+		require.NoError(t, p2.Unmarshal(buf))
+		require.Equal(t, p, p2)
+	})
+}

From 78764e9b676dcb8eaf96367d593355e4e288a500 Mon Sep 17 00:00:00 2001
From: Jacob Gelman <3182119+ladvoc@users.noreply.github.com>
Date: Tue, 1 Sep 2026 12:27:27 -0700
Subject: [PATCH 2/2] Changeset

---
 .changeset/breezy-bats-cry.md | 6 ++++++
 1 file changed, 6 insertions(+)
 create mode 100644 .changeset/breezy-bats-cry.md

diff --git a/.changeset/breezy-bats-cry.md b/.changeset/breezy-bats-cry.md
new file mode 100644
index 000000000..fcc864482
--- /dev/null
+++ b/.changeset/breezy-bats-cry.md
@@ -0,0 +1,6 @@
+---
+"github.com/livekit/protocol": patch
+"@livekit/protocol": patch
+---
+
+Add fuzz test for data track packet deserialization