From da4bd1099d3566bc7f68a036eef091b07a8d873a Mon Sep 17 00:00:00 2001
From: kcwu <kcwu@chromium.org>
Date: Thu, 22 Sep 2016 10:30:18 -0700
Subject: Add fuzzer for icc codec

Review-Url: https://codereview.chromium.org/2362623002
---
 testing/libfuzzer/BUILD.gn                | 15 +++++++++++++++
 testing/libfuzzer/pdf_codec_icc_fuzzer.cc | 25 +++++++++++++++++++++++++
 2 files changed, 40 insertions(+)
 create mode 100644 testing/libfuzzer/pdf_codec_icc_fuzzer.cc

diff --git a/testing/libfuzzer/BUILD.gn b/testing/libfuzzer/BUILD.gn
index 6ffa6665e7..a872901e77 100644
--- a/testing/libfuzzer/BUILD.gn
+++ b/testing/libfuzzer/BUILD.gn
@@ -169,6 +169,21 @@ source_set("pdf_codec_fax_fuzzer") {
   ]
 }
 
+source_set("pdf_codec_icc_fuzzer") {
+  testonly = true
+  sources = [
+    "pdf_codec_icc_fuzzer.cc",
+  ]
+  deps = [
+    "//third_party/pdfium:pdfium",
+  ]
+  configs -= [ "//build/config/compiler:chromium_code" ]
+  configs += [
+    "//build/config/compiler:no_chromium_code",
+    ":libfuzzer_config",
+  ]
+}
+
 source_set("pdf_jpx_fuzzer") {
   testonly = true
   sources = [
diff --git a/testing/libfuzzer/pdf_codec_icc_fuzzer.cc b/testing/libfuzzer/pdf_codec_icc_fuzzer.cc
new file mode 100644
index 0000000000..d7bfdba0cf
--- /dev/null
+++ b/testing/libfuzzer/pdf_codec_icc_fuzzer.cc
@@ -0,0 +1,25 @@
+// Copyright 2016 The PDFium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include <cstdint>
+
+#include "core/fxcodec/codec/ccodec_iccmodule.h"
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
+  CCodec_IccModule icc_module;
+  uint32_t nComponent = 0;
+  void* transform = icc_module.CreateTransform_sRGB(data, size, nComponent);
+
+  if (transform) {
+    FX_FLOAT src[4];
+    FX_FLOAT dst[4];
+    for (int i = 0; i < 4; i++)
+      src[i] = 0.5f;
+    icc_module.SetComponents(nComponent);
+    icc_module.Translate(transform, src, dst);
+    icc_module.DestroyTransform(transform);
+  }
+
+  return 0;
+}
-- 
cgit v1.2.3