summaryrefslogtreecommitdiff
path: root/testing/libfuzzer/pdf_codec_fax_fuzzer.cc
blob: 60e2c9ff19037ea903cfdb9202decc05ae079e98 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
// Copyright 2016 The PDFium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include <cstdint>
#include <memory>

#include "core/fxcodec/codec/ccodec_faxmodule.h"
#include "core/fxcodec/codec/ccodec_scanlinedecoder.h"

static int GetInteger(const uint8_t* data) {
  return data[0] | data[1] << 8 | data[2] << 16 | data[3] << 24;
}

extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
  const int kParameterSize = 21;
  if (size < kParameterSize)
    return 0;

  int width = GetInteger(data);
  int height = GetInteger(data + 4);
  int K = GetInteger(data + 8);
  int Columns = GetInteger(data + 12);
  int Rows = GetInteger(data + 16);
  FX_BOOL EndOfLine = (data[20] & 0x01) == 0;
  FX_BOOL ByteAlign = (data[20] & 0x02) == 0;
  FX_BOOL BlackIs1 = (data[20] & 0x04) == 0;
  data += kParameterSize;
  size -= kParameterSize;

  CCodec_FaxModule fax_module;
  std::unique_ptr<CCodec_ScanlineDecoder> decoder;
  decoder.reset(fax_module.CreateDecoder(data, size, width, height, K,
                                         EndOfLine, ByteAlign, BlackIs1,
                                         Columns, Rows));

  if (decoder) {
    int line = 0;
    while (decoder->GetScanline(line))
      line++;
  }

  return 0;
}