From fa4d93a08d5cd4f349c480b194a3e795273b27ed Mon Sep 17 00:00:00 2001 From: Lei Zhang Date: Fri, 25 May 2018 21:47:19 +0000 Subject: Move fuzzers to testing/fuzzers. Move them out of testing/libfuzzer, to make it possible to pull libfuzzer into that directory. Leave testing/libfuzzer/BUILD.gn there for now as a transitional build file. BUG=pdfium:1088 Change-Id: I4126d89dd3e075ac63477a4860e029c135866dbe Reviewed-on: https://pdfium-review.googlesource.com/32896 Commit-Queue: Lei Zhang Reviewed-by: dsinclair --- testing/fuzzers/pdf_jpx_fuzzer.cc | 57 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 57 insertions(+) create mode 100644 testing/fuzzers/pdf_jpx_fuzzer.cc (limited to 'testing/fuzzers/pdf_jpx_fuzzer.cc') diff --git a/testing/fuzzers/pdf_jpx_fuzzer.cc b/testing/fuzzers/pdf_jpx_fuzzer.cc new file mode 100644 index 0000000000..da65bc2d9a --- /dev/null +++ b/testing/fuzzers/pdf_jpx_fuzzer.cc @@ -0,0 +1,57 @@ +// Copyright 2016 The PDFium Authors. All rights reserved. +// Use of this source code is governed by a BSD-style license that can be +// found in the LICENSE file. + +#include +#include +#include + +#include "core/fxcodec/codec/ccodec_jpxmodule.h" +#include "core/fxcodec/codec/cjpx_decoder.h" +#include "core/fxcrt/fx_safe_types.h" +#include "core/fxge/dib/cfx_dibitmap.h" +#include "core/fxge/fx_dib.h" + +CCodec_JpxModule g_module; + +extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { + std::unique_ptr decoder = + g_module.CreateDecoder(data, size, nullptr); + if (!decoder) + return 0; + + uint32_t width; + uint32_t height; + uint32_t components; + g_module.GetImageInfo(decoder.get(), &width, &height, &components); + + static constexpr uint32_t kMemLimit = 1024 * 1024 * 1024; // 1 GB. + FX_SAFE_UINT32 mem = width; + mem *= height; + mem *= components; + if (!mem.IsValid() || mem.ValueOrDie() > kMemLimit) + return 0; + + FXDIB_Format format; + if (components == 1) { + format = FXDIB_8bppRgb; + } else if (components <= 3) { + format = FXDIB_Rgb; + } else if (components == 4) { + format = FXDIB_Rgb32; + } else { + width = (width * components + 2) / 3; + format = FXDIB_Rgb; + } + auto bitmap = pdfium::MakeRetain(); + if (!bitmap->Create(width, height, format)) + return 0; + + std::vector output_offsets(components); + for (uint32_t i = 0; i < components; ++i) + output_offsets[i] = i; + + g_module.Decode(decoder.get(), bitmap->GetBuffer(), bitmap->GetPitch(), + output_offsets); + return 0; +} -- cgit v1.2.3