hmz007
36ed224bac
Signed-off-by: hmz007 <hmz007@gmail.com> Change-Id: Ib87fdbe7a0be7dc961af3500fe9ea4589a127f9f
47 lines
1.4 KiB
C++
47 lines
1.4 KiB
C++
// Copyright 2016 The PDFium Authors
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
#include <cstdint>
|
|
#include <memory>
|
|
|
|
#include "core/fxcodec/fax/faxmodule.h"
|
|
#include "core/fxcodec/scanlinedecoder.h"
|
|
#include "testing/fuzzers/pdfium_fuzzer_util.h"
|
|
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
|
|
static constexpr size_t kParameterSize = 21;
|
|
if (size < kParameterSize)
|
|
return 0;
|
|
|
|
// Limit data size to prevent fuzzer timeout.
|
|
static constexpr size_t kMaxDataSize = 256 * 1024;
|
|
if (size > kParameterSize + kMaxDataSize)
|
|
return 0;
|
|
|
|
int width = GetInteger(data);
|
|
int height = GetInteger(data + 4);
|
|
int K = GetInteger(data + 8);
|
|
int Columns = GetInteger(data + 12);
|
|
int Rows = GetInteger(data + 16);
|
|
bool EndOfLine = !(data[20] & 0x01);
|
|
bool ByteAlign = !(data[20] & 0x02);
|
|
// This controls if fxcodec::FaxDecoder::InvertBuffer() gets called.
|
|
// The method is not interesting, and calling it doubles the runtime.
|
|
const bool kBlackIs1 = false;
|
|
data += kParameterSize;
|
|
size -= kParameterSize;
|
|
|
|
std::unique_ptr<ScanlineDecoder> decoder =
|
|
FaxModule::CreateDecoder({data, size}, width, height, K, EndOfLine,
|
|
ByteAlign, kBlackIs1, Columns, Rows);
|
|
|
|
if (decoder) {
|
|
int line = 0;
|
|
while (!decoder->GetScanline(line).empty())
|
|
line++;
|
|
}
|
|
|
|
return 0;
|
|
}
|