blob: 4086b3b683e4833025d11ee666d7ac6be80fabc6 [file] [log] [blame]
/*
* Copyright 2018 Google, LLC
*
* Use of this source code is governed by a BSD-style license that can be
* found in the LICENSE file.
*/
#include "SkBitmap.h"
#include "SkCodec.h"
#include "SkData.h"
bool FuzzIncrementalImageDecode(sk_sp<SkData> bytes) {
auto codec = SkCodec::MakeFromData(bytes);
if (!codec) {
return false;
}
SkBitmap bm;
if (!bm.tryAllocPixels(codec->getInfo())) {
// May fail in memory-constrained fuzzing environments
return false;
}
auto result = codec->startIncrementalDecode(bm.info(), bm.getPixels(), bm.rowBytes());
if (result != SkCodec::kSuccess) {
return false;
}
// Deliberately uninitialized to verify that incrementalDecode initializes it when it
// returns kIncompleteInput or kErrorInInput.
int rowsDecoded;
result = codec->incrementalDecode(&rowsDecoded);
switch (result) {
case SkCodec::kIncompleteInput:
case SkCodec::kErrorInInput:
if (rowsDecoded < bm.height()) {
void* dst = SkTAddOffset<void>(bm.getPixels(), rowsDecoded * bm.rowBytes());
sk_bzero(dst, (bm.height() - rowsDecoded) * bm.rowBytes());
}
return true; // decoded a partial image
case SkCodec::kSuccess:
return true;
default:
return false;
}
}
#if defined(IS_FUZZING_WITH_LIBFUZZER)
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
auto bytes = SkData::MakeWithoutCopy(data, size);
FuzzIncrementalImageDecode(bytes);
return 0;
}
#endif