|  | /* | 
|  | * Copyright 2017 Google Inc. | 
|  | * | 
|  | * Use of this source code is governed by a BSD-style license that can be | 
|  | * found in the LICENSE file. | 
|  | */ | 
|  |  | 
|  | #include "fuzz/Fuzz.h" | 
|  | #include "fuzz/FuzzCommon.h" | 
|  | #include "include/core/SkBitmap.h" | 
|  | #include "include/core/SkBlurTypes.h" | 
|  | #include "include/core/SkCanvas.h" | 
|  | #include "include/core/SkColorFilter.h" | 
|  | #include "include/core/SkFontMgr.h" | 
|  | #include "include/core/SkImageFilter.h" | 
|  | #include "include/core/SkMaskFilter.h" | 
|  | #include "include/core/SkPathEffect.h" | 
|  | #include "include/core/SkPictureRecorder.h" | 
|  | #include "include/core/SkPoint3.h" | 
|  | #include "include/core/SkRSXform.h" | 
|  | #include "include/core/SkRegion.h" | 
|  | #include "include/core/SkSurface.h" | 
|  | #include "include/core/SkTextBlob.h" | 
|  | #include "include/core/SkTypeface.h" | 
|  | #include "include/core/SkVertices.h" | 
|  | #include "include/docs/SkPDFDocument.h" | 
|  | #include "include/docs/SkPDFJpegHelpers.h" | 
|  | #include "include/effects/Sk1DPathEffect.h" | 
|  | #include "include/effects/Sk2DPathEffect.h" | 
|  | #include "include/effects/SkCornerPathEffect.h" | 
|  | #include "include/effects/SkDashPathEffect.h" | 
|  | #include "include/effects/SkDiscretePathEffect.h" | 
|  | #include "include/effects/SkGradientShader.h" | 
|  | #include "include/effects/SkHighContrastFilter.h" | 
|  | #include "include/effects/SkImageFilters.h" | 
|  | #include "include/effects/SkLumaColorFilter.h" | 
|  | #include "include/effects/SkPerlinNoiseShader.h" | 
|  | #include "include/gpu/ganesh/SkSurfaceGanesh.h" | 
|  | #include "include/private/base/SkTo.h" | 
|  | #include "include/svg/SkSVGCanvas.h" | 
|  | #include "include/utils/SkNullCanvas.h" | 
|  | #include "src/base/SkUTF.h" | 
|  | #include "src/core/SkFontPriv.h" | 
|  | #include "src/core/SkOSFile.h" | 
|  | #include "src/core/SkPaintPriv.h" | 
|  | #include "src/core/SkPicturePriv.h" | 
|  | #include "src/core/SkReadBuffer.h" | 
|  | #include "src/utils/SkJSONWriter.h" | 
|  | #include "tools/UrlDataManager.h" | 
|  | #include "tools/debugger/DebugCanvas.h" | 
|  | #include "tools/flags/CommandLineFlags.h" | 
|  | #include "tools/fonts/FontToolUtils.h" | 
|  |  | 
|  | #if defined(SK_GANESH) | 
|  | #include "include/gpu/ganesh/GrDirectContext.h" | 
|  | #include "src/gpu/ganesh/GrDirectContextPriv.h" | 
|  | #include "tools/ganesh/GrContextFactory.h" | 
|  | #endif | 
|  |  | 
|  | #ifdef SK_GL | 
|  | #include "include/gpu/ganesh/gl/GrGLFunctions.h" | 
|  | #include "src/gpu/ganesh/gl/GrGLGpu.h" | 
|  | #include "src/gpu/ganesh/gl/GrGLUtil.h" | 
|  | #endif | 
|  |  | 
|  | #include <iostream> | 
|  | #include <utility> | 
|  |  | 
|  | using namespace skia_private; | 
|  |  | 
|  | static DEFINE_bool2(gpuInfo, g, false, "Display GPU information on relevant targets."); | 
|  |  | 
|  | // TODO: | 
|  | //   SkTextBlob with Unicode | 
|  | //   SkImage: more types | 
|  |  | 
|  | // be careful: `foo(make_fuzz_t<T>(f), make_fuzz_t<U>(f))` is undefined. | 
|  | // In fact, all make_fuzz_foo() functions have this potential problem. | 
|  | // Use sequence points! | 
|  | template <typename T> | 
|  | inline T make_fuzz_t(Fuzz* fuzz) { | 
|  | T t; | 
|  | fuzz->next(&t); | 
|  | return t; | 
|  | } | 
|  |  | 
|  | static sk_sp<SkImage> make_fuzz_image(Fuzz*); | 
|  |  | 
|  | static sk_sp<SkPicture> make_fuzz_picture(Fuzz*, int depth); | 
|  |  | 
|  | static sk_sp<SkColorFilter> make_fuzz_colorfilter(Fuzz* fuzz, int depth) { | 
|  | if (depth <= 0) { | 
|  | return nullptr; | 
|  | } | 
|  | int colorFilterType; | 
|  | fuzz->nextRange(&colorFilterType, 0, 8); | 
|  | switch (colorFilterType) { | 
|  | case 0: | 
|  | return nullptr; | 
|  | case 1: { | 
|  | SkColor color; | 
|  | SkBlendMode mode; | 
|  | fuzz->next(&color); | 
|  | fuzz->nextEnum(&mode, SkBlendMode::kLastMode); | 
|  | return SkColorFilters::Blend(color, mode); | 
|  | } | 
|  | case 2: { | 
|  | sk_sp<SkColorFilter> outer = make_fuzz_colorfilter(fuzz, depth - 1); | 
|  | if (!outer) { | 
|  | return nullptr; | 
|  | } | 
|  | sk_sp<SkColorFilter> inner = make_fuzz_colorfilter(fuzz, depth - 1); | 
|  | // makeComposed should be able to handle nullptr. | 
|  | return outer->makeComposed(std::move(inner)); | 
|  | } | 
|  | case 3: { | 
|  | float array[20]; | 
|  | fuzz->nextN(array, std::size(array)); | 
|  | return SkColorFilters::Matrix(array); | 
|  | } | 
|  | case 4: { | 
|  | SkColor mul, add; | 
|  | fuzz->next(&mul, &add); | 
|  | return SkColorFilters::Lighting(mul, add); | 
|  | } | 
|  | case 5: { | 
|  | bool grayscale; | 
|  | int invertStyle; | 
|  | float contrast; | 
|  | fuzz->next(&grayscale); | 
|  | fuzz->nextRange(&invertStyle, 0, 2); | 
|  | fuzz->nextRange(&contrast, -1.0f, 1.0f); | 
|  | return SkHighContrastFilter::Make(SkHighContrastConfig( | 
|  | grayscale, SkHighContrastConfig::InvertStyle(invertStyle), contrast)); | 
|  | } | 
|  | case 6: | 
|  | return SkLumaColorFilter::Make(); | 
|  | case 7: { | 
|  | uint8_t table[256]; | 
|  | fuzz->nextN(table, std::size(table)); | 
|  | return SkColorFilters::Table(table); | 
|  | } | 
|  | case 8: { | 
|  | uint8_t tableA[256]; | 
|  | uint8_t tableR[256]; | 
|  | uint8_t tableG[256]; | 
|  | uint8_t tableB[256]; | 
|  | fuzz->nextN(tableA, std::size(tableA)); | 
|  | fuzz->nextN(tableR, std::size(tableR)); | 
|  | fuzz->nextN(tableG, std::size(tableG)); | 
|  | fuzz->nextN(tableB, std::size(tableB)); | 
|  | return SkColorFilters::TableARGB(tableA, tableR, tableG, tableB); | 
|  | } | 
|  | default: | 
|  | SkASSERT(false); | 
|  | break; | 
|  | } | 
|  | return nullptr; | 
|  | } | 
|  |  | 
|  | static void fuzz_gradient_stops(Fuzz* fuzz, SkScalar* pos, int colorCount) { | 
|  | SkScalar totalPos = 0; | 
|  | for (int i = 0; i < colorCount; ++i) { | 
|  | fuzz->nextRange(&pos[i], 1.0f, 1024.0f); | 
|  | totalPos += pos[i]; | 
|  | } | 
|  | totalPos = 1.0f / totalPos; | 
|  | for (int i = 0; i < colorCount; ++i) { | 
|  | pos[i] *= totalPos; | 
|  | } | 
|  | // SkASSERT(fabs(pos[colorCount - 1] - 1.0f) < 0.00001f); | 
|  | pos[colorCount - 1] = 1.0f; | 
|  | } | 
|  |  | 
|  | static sk_sp<SkShader> make_fuzz_shader(Fuzz* fuzz, int depth) { | 
|  | sk_sp<SkShader> shader1(nullptr), shader2(nullptr); | 
|  | sk_sp<SkColorFilter> colorFilter(nullptr); | 
|  | SkBitmap bitmap; | 
|  | sk_sp<SkImage> img; | 
|  | SkTileMode tmX, tmY; | 
|  | bool useMatrix; | 
|  | SkColor color; | 
|  | SkMatrix matrix; | 
|  | SkBlendMode blendMode; | 
|  | int shaderType; | 
|  | if (depth <= 0) { | 
|  | return nullptr; | 
|  | } | 
|  | fuzz->nextRange(&shaderType, 0, 14); | 
|  | switch (shaderType) { | 
|  | case 0: | 
|  | return nullptr; | 
|  | case 1: | 
|  | return SkShaders::Empty(); | 
|  | case 2: | 
|  | fuzz->next(&color); | 
|  | return SkShaders::Color(color); | 
|  | case 3: | 
|  | img = make_fuzz_image(fuzz); | 
|  | fuzz->nextEnum(&tmX, SkTileMode::kLastTileMode); | 
|  | fuzz->nextEnum(&tmY, SkTileMode::kLastTileMode); | 
|  | fuzz->next(&useMatrix); | 
|  | if (useMatrix) { | 
|  | FuzzNiceMatrix(fuzz, &matrix); | 
|  | } | 
|  | return img->makeShader(tmX, tmY, SkSamplingOptions(), useMatrix ? &matrix : nullptr); | 
|  | case 5: | 
|  | shader1 = make_fuzz_shader(fuzz, depth - 1);  // limit recursion. | 
|  | FuzzNiceMatrix(fuzz, &matrix); | 
|  | return shader1 ? shader1->makeWithLocalMatrix(matrix) : nullptr; | 
|  | case 6: | 
|  | shader1 = make_fuzz_shader(fuzz, depth - 1);  // limit recursion. | 
|  | colorFilter = make_fuzz_colorfilter(fuzz, depth - 1); | 
|  | return shader1 ? shader1->makeWithColorFilter(std::move(colorFilter)) : nullptr; | 
|  | case 7: | 
|  | shader1 = make_fuzz_shader(fuzz, depth - 1);  // limit recursion. | 
|  | shader2 = make_fuzz_shader(fuzz, depth - 1); | 
|  | fuzz->nextEnum(&blendMode, SkBlendMode::kLastMode); | 
|  | return SkShaders::Blend(blendMode, std::move(shader1), std::move(shader2)); | 
|  | case 8: { | 
|  | auto pic = make_fuzz_picture(fuzz, depth - 1); | 
|  | bool useTile; | 
|  | SkRect tile; | 
|  | fuzz->nextEnum(&tmX, SkTileMode::kLastTileMode); | 
|  | fuzz->nextEnum(&tmY, SkTileMode::kLastTileMode); | 
|  | fuzz->next(&useMatrix, &useTile); | 
|  | if (useMatrix) { | 
|  | FuzzNiceMatrix(fuzz, &matrix); | 
|  | } | 
|  | if (useTile) { | 
|  | fuzz->next(&tile); | 
|  | } | 
|  | return pic->makeShader(tmX, tmY, SkFilterMode::kNearest, | 
|  | useMatrix ? &matrix : nullptr, useTile ? &tile : nullptr); | 
|  | } | 
|  | // EFFECTS: | 
|  | case 9: | 
|  | // Deprecated SkGaussianEdgeShader | 
|  | return nullptr; | 
|  | case 10: { | 
|  | constexpr int kMaxColors = 12; | 
|  | SkPoint pts[2]; | 
|  | SkColor colors[kMaxColors]; | 
|  | SkScalar pos[kMaxColors]; | 
|  | int colorCount; | 
|  | bool usePos; | 
|  | fuzz->nextN(pts, 2); | 
|  | fuzz->nextRange(&colorCount, 2, kMaxColors); | 
|  | fuzz->nextN(colors, colorCount); | 
|  | fuzz->nextEnum(&tmX, SkTileMode::kLastTileMode); | 
|  | fuzz->next(&useMatrix, &usePos); | 
|  | if (useMatrix) { | 
|  | FuzzNiceMatrix(fuzz, &matrix); | 
|  | } | 
|  | if (usePos) { | 
|  | fuzz_gradient_stops(fuzz, pos, colorCount); | 
|  | } | 
|  | return SkGradientShader::MakeLinear(pts, colors, usePos ? pos : nullptr, colorCount, | 
|  | tmX, 0, useMatrix ? &matrix : nullptr); | 
|  | } | 
|  | case 11: { | 
|  | constexpr int kMaxColors = 12; | 
|  | SkPoint center; | 
|  | SkScalar radius; | 
|  | int colorCount; | 
|  | bool usePos; | 
|  | SkColor colors[kMaxColors]; | 
|  | SkScalar pos[kMaxColors]; | 
|  | fuzz->nextEnum(&tmX, SkTileMode::kLastTileMode); | 
|  | fuzz->next(&useMatrix, &usePos, ¢er, &radius); | 
|  | fuzz->nextRange(&colorCount, 2, kMaxColors); | 
|  | fuzz->nextN(colors, colorCount); | 
|  | if (useMatrix) { | 
|  | FuzzNiceMatrix(fuzz, &matrix); | 
|  | } | 
|  | if (usePos) { | 
|  | fuzz_gradient_stops(fuzz, pos, colorCount); | 
|  | } | 
|  | return SkGradientShader::MakeRadial(center, radius, colors, usePos ? pos : nullptr, | 
|  | colorCount, tmX, 0, useMatrix ? &matrix : nullptr); | 
|  | } | 
|  | case 12: { | 
|  | constexpr int kMaxColors = 12; | 
|  | SkPoint start, end; | 
|  | SkScalar startRadius, endRadius; | 
|  | int colorCount; | 
|  | bool usePos; | 
|  | SkColor colors[kMaxColors]; | 
|  | SkScalar pos[kMaxColors]; | 
|  | fuzz->nextEnum(&tmX, SkTileMode::kLastTileMode); | 
|  | fuzz->next(&useMatrix, &usePos, &startRadius, &endRadius, &start, &end); | 
|  | fuzz->nextRange(&colorCount, 2, kMaxColors); | 
|  | fuzz->nextN(colors, colorCount); | 
|  | if (useMatrix) { | 
|  | FuzzNiceMatrix(fuzz, &matrix); | 
|  | } | 
|  | if (usePos) { | 
|  | fuzz_gradient_stops(fuzz, pos, colorCount); | 
|  | } | 
|  | return SkGradientShader::MakeTwoPointConical(start, startRadius, end, endRadius, colors, | 
|  | usePos ? pos : nullptr, colorCount, tmX, 0, | 
|  | useMatrix ? &matrix : nullptr); | 
|  | } | 
|  | case 13: { | 
|  | constexpr int kMaxColors = 12; | 
|  | SkScalar cx, cy; | 
|  | int colorCount; | 
|  | bool usePos; | 
|  | SkColor colors[kMaxColors]; | 
|  | SkScalar pos[kMaxColors]; | 
|  | fuzz->next(&cx, &cy, &useMatrix, &usePos); | 
|  | fuzz->nextRange(&colorCount, 2, kMaxColors); | 
|  | fuzz->nextN(colors, colorCount); | 
|  | if (useMatrix) { | 
|  | FuzzNiceMatrix(fuzz, &matrix); | 
|  | } | 
|  | if (usePos) { | 
|  | fuzz_gradient_stops(fuzz, pos, colorCount); | 
|  | } | 
|  | return SkGradientShader::MakeSweep(cx, cy, colors, usePos ? pos : nullptr, colorCount, | 
|  | 0, useMatrix ? &matrix : nullptr); | 
|  | } | 
|  | case 14: { | 
|  | SkScalar baseFrequencyX, baseFrequencyY, seed; | 
|  | int numOctaves; | 
|  | SkISize tileSize; | 
|  | bool useTileSize, turbulence; | 
|  | fuzz->next(&baseFrequencyX, &baseFrequencyY, &seed, &useTileSize, &turbulence); | 
|  | if (useTileSize) { | 
|  | fuzz->next(&tileSize); | 
|  | } | 
|  | fuzz->nextRange(&numOctaves, 2, 7); | 
|  | if (turbulence) { | 
|  | return SkShaders::MakeTurbulence(baseFrequencyX, | 
|  | baseFrequencyY, | 
|  | numOctaves, | 
|  | seed, | 
|  | useTileSize ? &tileSize : nullptr); | 
|  | } else { | 
|  | return SkShaders::MakeFractalNoise(baseFrequencyX, | 
|  | baseFrequencyY, | 
|  | numOctaves, | 
|  | seed, | 
|  | useTileSize ? &tileSize : nullptr); | 
|  | } | 
|  | } | 
|  | default: | 
|  | SkASSERT(false); | 
|  | break; | 
|  | } | 
|  | return nullptr; | 
|  | } | 
|  |  | 
|  | static sk_sp<SkPathEffect> make_fuzz_patheffect(Fuzz* fuzz, int depth) { | 
|  | if (depth <= 0) { | 
|  | return nullptr; | 
|  | } | 
|  | uint8_t pathEffectType; | 
|  | fuzz->nextRange(&pathEffectType, 0, 8); | 
|  | switch (pathEffectType) { | 
|  | case 0: { | 
|  | return nullptr; | 
|  | } | 
|  | case 1: { | 
|  | sk_sp<SkPathEffect> first = make_fuzz_patheffect(fuzz, depth - 1); | 
|  | sk_sp<SkPathEffect> second = make_fuzz_patheffect(fuzz, depth - 1); | 
|  | return SkPathEffect::MakeSum(std::move(first), std::move(second)); | 
|  | } | 
|  | case 2: { | 
|  | sk_sp<SkPathEffect> first = make_fuzz_patheffect(fuzz, depth - 1); | 
|  | sk_sp<SkPathEffect> second = make_fuzz_patheffect(fuzz, depth - 1); | 
|  | return SkPathEffect::MakeCompose(std::move(first), std::move(second)); | 
|  | } | 
|  | case 3: { | 
|  | SkPath path = FuzzNicePath(fuzz, 20); | 
|  | SkScalar advance, phase; | 
|  | fuzz->next(&advance, &phase); | 
|  | SkPath1DPathEffect::Style style; | 
|  | fuzz->nextEnum(&style, SkPath1DPathEffect::kLastEnum_Style); | 
|  | return SkPath1DPathEffect::Make(path, advance, phase, style); | 
|  | } | 
|  | case 4: { | 
|  | SkScalar width; | 
|  | SkMatrix matrix; | 
|  | fuzz->next(&width); | 
|  | FuzzNiceMatrix(fuzz, &matrix); | 
|  | return SkLine2DPathEffect::Make(width, matrix); | 
|  | } | 
|  | case 5: { | 
|  | SkPath path = FuzzNicePath(fuzz, 20); | 
|  | SkMatrix matrix; | 
|  | FuzzNiceMatrix(fuzz, &matrix); | 
|  | return SkPath2DPathEffect::Make(matrix, path); | 
|  | } | 
|  | case 6: { | 
|  | SkScalar radius; | 
|  | fuzz->next(&radius); | 
|  | return SkCornerPathEffect::Make(radius); | 
|  | } | 
|  | case 7: { | 
|  | SkScalar phase; | 
|  | fuzz->next(&phase); | 
|  | SkScalar intervals[20]; | 
|  | int count; | 
|  | fuzz->nextRange(&count, 0, (int)std::size(intervals)); | 
|  | fuzz->nextN(intervals, count); | 
|  | return SkDashPathEffect::Make({intervals, count}, phase); | 
|  | } | 
|  | case 8: { | 
|  | SkScalar segLength, dev; | 
|  | uint32_t seed; | 
|  | fuzz->next(&segLength, &dev, &seed); | 
|  | return SkDiscretePathEffect::Make(segLength, dev, seed); | 
|  | } | 
|  | default: | 
|  | SkASSERT(false); | 
|  | return nullptr; | 
|  | } | 
|  | } | 
|  |  | 
|  | static sk_sp<SkMaskFilter> make_fuzz_maskfilter(Fuzz* fuzz) { | 
|  | int maskfilterType; | 
|  | fuzz->nextRange(&maskfilterType, 0, 1); | 
|  | switch (maskfilterType) { | 
|  | case 0: | 
|  | return nullptr; | 
|  | case 1: { | 
|  | SkBlurStyle blurStyle; | 
|  | fuzz->nextEnum(&blurStyle, kLastEnum_SkBlurStyle); | 
|  | SkScalar sigma; | 
|  | fuzz->next(&sigma); | 
|  | bool respectCTM; | 
|  | fuzz->next(&respectCTM); | 
|  | return SkMaskFilter::MakeBlur(blurStyle, sigma, respectCTM); | 
|  | } | 
|  | default: | 
|  | SkASSERT(false); | 
|  | return nullptr; | 
|  | } | 
|  | } | 
|  |  | 
|  | static sk_sp<SkTypeface> make_fuzz_typeface(Fuzz* fuzz) { | 
|  | if (make_fuzz_t<bool>(fuzz)) { | 
|  | return nullptr; | 
|  | } | 
|  | sk_sp<SkFontMgr> mgr = ToolUtils::TestFontMgr(); | 
|  | int familyCount = mgr->countFamilies(); | 
|  | int i, j; | 
|  | fuzz->nextRange(&i, 0, familyCount - 1); | 
|  | sk_sp<SkFontStyleSet> family(mgr->createStyleSet(i)); | 
|  | int styleCount = family->count(); | 
|  | fuzz->nextRange(&j, 0, styleCount - 1); | 
|  | return sk_sp<SkTypeface>(family->createTypeface(j)); | 
|  | } | 
|  |  | 
|  | static sk_sp<SkImageFilter> make_fuzz_imageFilter(Fuzz* fuzz, int depth); | 
|  |  | 
|  | static sk_sp<SkImageFilter> make_fuzz_lighting_imagefilter(Fuzz* fuzz, int depth) { | 
|  | if (depth <= 0) { | 
|  | return nullptr; | 
|  | } | 
|  | uint8_t imageFilterType; | 
|  | fuzz->nextRange(&imageFilterType, 1, 6); | 
|  | SkPoint3 p, q; | 
|  | SkColor lightColor; | 
|  | SkScalar surfaceScale, k, specularExponent, cutoffAngle, shininess; | 
|  | sk_sp<SkImageFilter> input; | 
|  | SkIRect cropRect; | 
|  | bool useCropRect; | 
|  | fuzz->next(&useCropRect); | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | switch (imageFilterType) { | 
|  | case 1: | 
|  | fuzz->next(&p, &lightColor, &surfaceScale, &k); | 
|  | input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::DistantLitDiffuse(p, lightColor, surfaceScale, k, | 
|  | std::move(input), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | case 2: | 
|  | fuzz->next(&p, &lightColor, &surfaceScale, &k); | 
|  | input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::PointLitDiffuse(p, lightColor, surfaceScale, k, | 
|  | std::move(input), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | case 3: | 
|  | fuzz->next(&p, &q, &specularExponent, &cutoffAngle, &lightColor, &surfaceScale, &k); | 
|  | input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::SpotLitDiffuse( | 
|  | p, q, specularExponent, cutoffAngle, lightColor, surfaceScale, k, | 
|  | std::move(input), useCropRect ? &cropRect : nullptr); | 
|  | case 4: | 
|  | fuzz->next(&p, &lightColor, &surfaceScale, &k, &shininess); | 
|  | input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::DistantLitSpecular(p, lightColor, surfaceScale, k, | 
|  | shininess, std::move(input), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | case 5: | 
|  | fuzz->next(&p, &lightColor, &surfaceScale, &k, &shininess); | 
|  | input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::PointLitSpecular(p, lightColor, surfaceScale, k, | 
|  | shininess, std::move(input), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | case 6: | 
|  | fuzz->next(&p, &q, &specularExponent, &cutoffAngle, &lightColor, &surfaceScale, &k, | 
|  | &shininess); | 
|  | input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::SpotLitSpecular( | 
|  | p, q, specularExponent, cutoffAngle, lightColor, surfaceScale, k, shininess, | 
|  | std::move(input), useCropRect ? &cropRect : nullptr); | 
|  | default: | 
|  | SkASSERT(false); | 
|  | return nullptr; | 
|  | } | 
|  | } | 
|  |  | 
|  | static void fuzz_paint(Fuzz* fuzz, SkPaint* paint, int depth); | 
|  |  | 
|  | static SkSamplingOptions next_sampling(Fuzz* fuzz) { | 
|  | if (fuzz->nextBool()) { | 
|  | float B, C; | 
|  | fuzz->next(&B, &C); | 
|  | return SkSamplingOptions({B, C}); | 
|  | } else { | 
|  | SkFilterMode fm; | 
|  | SkMipmapMode mm; | 
|  | fuzz->nextEnum(&fm, SkFilterMode::kLast); | 
|  | fuzz->nextEnum(&mm, SkMipmapMode::kLast); | 
|  | return SkSamplingOptions(fm, mm); | 
|  | } | 
|  | } | 
|  |  | 
|  | static sk_sp<SkImageFilter> make_fuzz_imageFilter(Fuzz* fuzz, int depth) { | 
|  | if (depth <= 0) { | 
|  | return nullptr; | 
|  | } | 
|  | uint8_t imageFilterType; | 
|  | fuzz->nextRange(&imageFilterType, 0, 22); | 
|  | switch (imageFilterType) { | 
|  | case 0: | 
|  | return nullptr; | 
|  | case 1: { | 
|  | SkScalar sigmaX, sigmaY; | 
|  | sk_sp<SkImageFilter> input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | bool useCropRect; | 
|  | fuzz->next(&sigmaX, &sigmaY, &useCropRect); | 
|  | SkIRect cropRect; | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | return SkImageFilters::Blur(sigmaX, sigmaY, std::move(input), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | case 2: { | 
|  | SkMatrix matrix; | 
|  | FuzzNiceMatrix(fuzz, &matrix); | 
|  | const auto sampling = next_sampling(fuzz); | 
|  | sk_sp<SkImageFilter> input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::MatrixTransform(matrix, sampling, std::move(input)); | 
|  | } | 
|  | case 3: { | 
|  | float k1, k2, k3, k4; | 
|  | bool enforcePMColor; | 
|  | bool useCropRect; | 
|  | fuzz->next(&k1, &k2, &k3, &k4, &enforcePMColor, &useCropRect); | 
|  | sk_sp<SkImageFilter> background = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | sk_sp<SkImageFilter> foreground = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | SkIRect cropRect; | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | return SkImageFilters::Arithmetic(k1, k2, k3, k4, enforcePMColor, | 
|  | std::move(background), std::move(foreground), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | case 4: { | 
|  | sk_sp<SkColorFilter> cf = make_fuzz_colorfilter(fuzz, depth - 1); | 
|  | sk_sp<SkImageFilter> input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | bool useCropRect; | 
|  | SkIRect cropRect; | 
|  | fuzz->next(&useCropRect); | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | return SkImageFilters::ColorFilter(std::move(cf), std::move(input), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | case 5: { | 
|  | sk_sp<SkImageFilter> ifo = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | sk_sp<SkImageFilter> ifi = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::Compose(std::move(ifo), std::move(ifi)); | 
|  | } | 
|  | case 6: { | 
|  | SkColorChannel xChannelSelector, yChannelSelector; | 
|  | fuzz->nextEnum(&xChannelSelector, SkColorChannel::kLastEnum); | 
|  | fuzz->nextEnum(&yChannelSelector, SkColorChannel::kLastEnum); | 
|  | SkScalar scale; | 
|  | bool useCropRect; | 
|  | fuzz->next(&scale, &useCropRect); | 
|  | SkIRect cropRect; | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | sk_sp<SkImageFilter> displacement = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | sk_sp<SkImageFilter> color = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::DisplacementMap(xChannelSelector, yChannelSelector, scale, | 
|  | std::move(displacement), std::move(color), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | case 7: { | 
|  | SkScalar dx, dy, sigmaX, sigmaY; | 
|  | SkColor color; | 
|  | bool shadowOnly, useCropRect; | 
|  | fuzz->next(&dx, &dy, &sigmaX, &sigmaY, &color, &shadowOnly, &useCropRect); | 
|  | SkIRect cropRect; | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | sk_sp<SkImageFilter> input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | if (shadowOnly) { | 
|  | return SkImageFilters::DropShadowOnly(dx, dy, sigmaX, sigmaY, color, | 
|  | std::move(input), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | } else { | 
|  | return SkImageFilters::DropShadow(dx, dy, sigmaX, sigmaY, color, std::move(input), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | } | 
|  | case 8: | 
|  | return SkImageFilters::Image(make_fuzz_image(fuzz), SkCubicResampler::Mitchell()); | 
|  | case 9: { | 
|  | sk_sp<SkImage> image = make_fuzz_image(fuzz); | 
|  | SkRect srcRect, dstRect; | 
|  | fuzz->next(&srcRect, &dstRect); | 
|  | return SkImageFilters::Image(std::move(image), srcRect, dstRect, next_sampling(fuzz)); | 
|  | } | 
|  | case 10: | 
|  | return make_fuzz_lighting_imagefilter(fuzz, depth - 1); | 
|  | case 11: { | 
|  | SkRect lensBounds; | 
|  | SkScalar zoomAmount; | 
|  | SkScalar inset; | 
|  | bool useCropRect; | 
|  | SkIRect cropRect; | 
|  | fuzz->next(&lensBounds, &zoomAmount, &inset, &useCropRect); | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | sk_sp<SkImageFilter> input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | const auto sampling = next_sampling(fuzz); | 
|  | return SkImageFilters::Magnifier(lensBounds, zoomAmount, inset, sampling, | 
|  | std::move(input), useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | case 12: { | 
|  | constexpr int kMaxKernelSize = 5; | 
|  | int32_t n, m; | 
|  | fuzz->nextRange(&n, 1, kMaxKernelSize); | 
|  | fuzz->nextRange(&m, 1, kMaxKernelSize); | 
|  | SkScalar kernel[kMaxKernelSize * kMaxKernelSize]; | 
|  | fuzz->nextN(kernel, n * m); | 
|  | int32_t offsetX, offsetY; | 
|  | fuzz->nextRange(&offsetX, 0, n - 1); | 
|  | fuzz->nextRange(&offsetY, 0, m - 1); | 
|  | SkScalar gain, bias; | 
|  | bool convolveAlpha, useCropRect; | 
|  | fuzz->next(&gain, &bias, &convolveAlpha, &useCropRect); | 
|  | SkTileMode tileMode; | 
|  | fuzz->nextEnum(&tileMode, SkTileMode::kLastTileMode); | 
|  | SkIRect cropRect; | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | sk_sp<SkImageFilter> input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::MatrixConvolution( | 
|  | SkISize{n, m}, kernel, gain, bias, SkIPoint{offsetX, offsetY}, tileMode, | 
|  | convolveAlpha, std::move(input), useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | case 13: { | 
|  | sk_sp<SkImageFilter> first = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | sk_sp<SkImageFilter> second = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | bool useCropRect; | 
|  | fuzz->next(&useCropRect); | 
|  | SkIRect cropRect; | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | return SkImageFilters::Merge(std::move(first), std::move(second), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | case 14: { | 
|  | constexpr int kMaxCount = 4; | 
|  | sk_sp<SkImageFilter> ifs[kMaxCount]; | 
|  | int count; | 
|  | fuzz->nextRange(&count, 1, kMaxCount); | 
|  | for (int i = 0; i < count; ++i) { | 
|  | ifs[i] = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | } | 
|  | bool useCropRect; | 
|  | fuzz->next(&useCropRect); | 
|  | SkIRect cropRect; | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | return SkImageFilters::Merge(ifs, count, useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | case 15: { | 
|  | int rx, ry; | 
|  | fuzz->next(&rx, &ry); | 
|  | bool useCropRect; | 
|  | fuzz->next(&useCropRect); | 
|  | SkIRect cropRect; | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | sk_sp<SkImageFilter> input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::Dilate(rx, ry, std::move(input), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | case 16: { | 
|  | int rx, ry; | 
|  | fuzz->next(&rx, &ry); | 
|  | bool useCropRect; | 
|  | fuzz->next(&useCropRect); | 
|  | SkIRect cropRect; | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | sk_sp<SkImageFilter> input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::Erode(rx, ry, std::move(input), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | case 17: { | 
|  | SkScalar dx, dy; | 
|  | fuzz->next(&dx, &dy); | 
|  | bool useCropRect; | 
|  | fuzz->next(&useCropRect); | 
|  | SkIRect cropRect; | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | sk_sp<SkImageFilter> input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::Offset(dx, dy, std::move(input), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | case 18: { | 
|  | sk_sp<SkPicture> picture = make_fuzz_picture(fuzz, depth - 1); | 
|  | return SkImageFilters::Picture(std::move(picture)); | 
|  | } | 
|  | case 19: { | 
|  | SkRect cropRect; | 
|  | fuzz->next(&cropRect); | 
|  | sk_sp<SkPicture> picture = make_fuzz_picture(fuzz, depth - 1); | 
|  | return SkImageFilters::Picture(std::move(picture), cropRect); | 
|  | } | 
|  | case 20: { | 
|  | SkRect src, dst; | 
|  | fuzz->next(&src, &dst); | 
|  | sk_sp<SkImageFilter> input = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::Tile(src, dst, std::move(input)); | 
|  | } | 
|  | case 21: { | 
|  | SkBlendMode blendMode; | 
|  | bool useCropRect; | 
|  | fuzz->next(&useCropRect); | 
|  | fuzz->nextEnum(&blendMode, SkBlendMode::kLastMode); | 
|  | SkIRect cropRect; | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | sk_sp<SkImageFilter> bg = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | sk_sp<SkImageFilter> fg = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | return SkImageFilters::Blend(blendMode, std::move(bg), std::move(fg), | 
|  | useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | case 22: { | 
|  | sk_sp<SkShader> shader = make_fuzz_shader(fuzz, depth - 1); | 
|  | bool useCropRect; | 
|  | fuzz->next(&useCropRect); | 
|  | SkIRect cropRect; | 
|  | if (useCropRect) { | 
|  | fuzz->next(&cropRect); | 
|  | } | 
|  | return SkImageFilters::Shader(std::move(shader), useCropRect ? &cropRect : nullptr); | 
|  | } | 
|  | default: | 
|  | SkASSERT(false); | 
|  | return nullptr; | 
|  | } | 
|  | } | 
|  |  | 
|  | static sk_sp<SkImage> make_fuzz_image(Fuzz* fuzz) { | 
|  | int w, h; | 
|  | fuzz->nextRange(&w, 1, 1024); | 
|  | fuzz->nextRange(&h, 1, 1024); | 
|  | AutoTMalloc<SkPMColor> data(w * h); | 
|  | SkPixmap pixmap(SkImageInfo::MakeN32Premul(w, h), data.get(), w * sizeof(SkPMColor)); | 
|  | int n = w * h; | 
|  | for (int i = 0; i < n; ++i) { | 
|  | SkColor c; | 
|  | fuzz->next(&c); | 
|  | data[i] = SkPreMultiplyColor(c); | 
|  | } | 
|  | (void)data.release(); | 
|  | return SkImages::RasterFromPixmap( | 
|  | pixmap, [](const void* p, void*) { sk_free(const_cast<void*>(p)); }, nullptr); | 
|  | } | 
|  |  | 
|  | template <typename T> | 
|  | static T make_fuzz_enum_range(Fuzz* fuzz, T maxv) { | 
|  | T value; | 
|  | fuzz->nextEnum(&value, maxv); | 
|  | return value; | 
|  | } | 
|  |  | 
|  | static void fuzz_paint(Fuzz* fuzz, SkPaint* paint, int depth) { | 
|  | if (!fuzz || !paint || depth <= 0) { | 
|  | return; | 
|  | } | 
|  |  | 
|  | paint->setAntiAlias(    make_fuzz_t<bool>(fuzz)); | 
|  | paint->setDither(       make_fuzz_t<bool>(fuzz)); | 
|  | paint->setColor(        make_fuzz_t<SkColor>(fuzz)); | 
|  | paint->setBlendMode(    make_fuzz_enum_range<SkBlendMode>(fuzz, SkBlendMode::kLastMode)); | 
|  | paint->setStyle(        make_fuzz_enum_range<SkPaint::Style>(fuzz, | 
|  | SkPaint::Style::kStrokeAndFill_Style)); | 
|  | paint->setShader(       make_fuzz_shader(fuzz, depth - 1)); | 
|  | paint->setPathEffect(   make_fuzz_patheffect(fuzz, depth - 1)); | 
|  | paint->setMaskFilter(   make_fuzz_maskfilter(fuzz)); | 
|  | paint->setImageFilter(  make_fuzz_imageFilter(fuzz, depth - 1)); | 
|  | paint->setColorFilter(  make_fuzz_colorfilter(fuzz, depth - 1)); | 
|  |  | 
|  | if (paint->getStyle() != SkPaint::kFill_Style) { | 
|  | paint->setStrokeWidth(make_fuzz_t<SkScalar>(fuzz)); | 
|  | paint->setStrokeMiter(make_fuzz_t<SkScalar>(fuzz)); | 
|  | paint->setStrokeCap(  make_fuzz_enum_range<SkPaint::Cap>(fuzz, SkPaint::kLast_Cap)); | 
|  | paint->setStrokeJoin( make_fuzz_enum_range<SkPaint::Join>(fuzz, SkPaint::kLast_Join)); | 
|  | } | 
|  | } | 
|  |  | 
|  | static SkFont fuzz_font(Fuzz* fuzz) { | 
|  | SkFont font; | 
|  | font.setTypeface(           make_fuzz_typeface(fuzz)); | 
|  | font.setSize(               make_fuzz_t<SkScalar>(fuzz)); | 
|  | font.setScaleX(             make_fuzz_t<SkScalar>(fuzz)); | 
|  | font.setSkewX(              make_fuzz_t<SkScalar>(fuzz)); | 
|  | font.setLinearMetrics(      make_fuzz_t<bool>(fuzz)); | 
|  | font.setSubpixel(           make_fuzz_t<bool>(fuzz)); | 
|  | font.setEmbeddedBitmaps(    make_fuzz_t<bool>(fuzz)); | 
|  | font.setForceAutoHinting(   make_fuzz_t<bool>(fuzz)); | 
|  | font.setEmbolden(           make_fuzz_t<bool>(fuzz)); | 
|  | font.setHinting(            make_fuzz_enum_range<SkFontHinting>(fuzz, SkFontHinting::kFull)); | 
|  | font.setEdging(             make_fuzz_enum_range<SkFont::Edging>(fuzz, | 
|  | SkFont::Edging::kSubpixelAntiAlias)); | 
|  | return font; | 
|  | } | 
|  |  | 
|  | static SkTextEncoding fuzz_paint_text_encoding(Fuzz* fuzz) { | 
|  | return make_fuzz_enum_range<SkTextEncoding>(fuzz, SkTextEncoding::kUTF32); | 
|  | } | 
|  |  | 
|  | constexpr int kMaxGlyphCount = 30; | 
|  |  | 
|  | static SkTDArray<uint8_t> make_fuzz_text(Fuzz* fuzz, const SkFont& font, SkTextEncoding encoding) { | 
|  | SkTDArray<uint8_t> array; | 
|  | if (SkTextEncoding::kGlyphID == encoding) { | 
|  | int glyphRange = font.getTypeface()->countGlyphs(); | 
|  | if (glyphRange == 0) { | 
|  | // Some fuzzing environments have no fonts, so empty array is the best | 
|  | // we can do. | 
|  | return array; | 
|  | } | 
|  | int glyphCount; | 
|  | fuzz->nextRange(&glyphCount, 1, kMaxGlyphCount); | 
|  | SkGlyphID* glyphs = (SkGlyphID*)array.append(glyphCount * sizeof(SkGlyphID)); | 
|  | for (int i = 0; i < glyphCount; ++i) { | 
|  | fuzz->nextRange(&glyphs[i], 0, glyphRange - 1); | 
|  | } | 
|  | return array; | 
|  | } | 
|  | static const SkUnichar ranges[][2] = { | 
|  | {0x0020, 0x007F}, | 
|  | {0x00A1, 0x0250}, | 
|  | {0x0400, 0x0500}, | 
|  | }; | 
|  | int32_t count = 0; | 
|  | for (size_t i = 0; i < std::size(ranges); ++i) { | 
|  | count += (ranges[i][1] - ranges[i][0]); | 
|  | } | 
|  | constexpr int kMaxLength = kMaxGlyphCount; | 
|  | SkUnichar buffer[kMaxLength]; | 
|  | int length; | 
|  | fuzz->nextRange(&length, 1, kMaxLength); | 
|  | for (int j = 0; j < length; ++j) { | 
|  | int32_t value; | 
|  | fuzz->nextRange(&value, 0, count - 1); | 
|  | for (size_t i = 0; i < std::size(ranges); ++i) { | 
|  | if (value + ranges[i][0] < ranges[i][1]) { | 
|  | buffer[j] = value + ranges[i][0]; | 
|  | break; | 
|  | } else { | 
|  | value -= (ranges[i][1] - ranges[i][0]); | 
|  | } | 
|  | } | 
|  | } | 
|  | switch (encoding) { | 
|  | case SkTextEncoding::kUTF8: { | 
|  | size_t utf8len = 0; | 
|  | for (int j = 0; j < length; ++j) { | 
|  | utf8len += SkUTF::ToUTF8(buffer[j], nullptr); | 
|  | } | 
|  | char* ptr = (char*)array.append(utf8len); | 
|  | for (int j = 0; j < length; ++j) { | 
|  | ptr += SkUTF::ToUTF8(buffer[j], ptr); | 
|  | } | 
|  | } break; | 
|  | case SkTextEncoding::kUTF16: { | 
|  | size_t utf16len = 0; | 
|  | for (int j = 0; j < length; ++j) { | 
|  | utf16len += SkUTF::ToUTF16(buffer[j]); | 
|  | } | 
|  | uint16_t* ptr = (uint16_t*)array.append(utf16len * sizeof(uint16_t)); | 
|  | for (int j = 0; j < length; ++j) { | 
|  | ptr += SkUTF::ToUTF16(buffer[j], ptr); | 
|  | } | 
|  | } break; | 
|  | case SkTextEncoding::kUTF32: | 
|  | memcpy(array.append(length * sizeof(SkUnichar)), buffer, length * sizeof(SkUnichar)); | 
|  | break; | 
|  | default: | 
|  | SkASSERT(false); | 
|  | break; | 
|  | } | 
|  | return array; | 
|  | } | 
|  |  | 
|  | static std::string make_fuzz_string(Fuzz* fuzz) { | 
|  | int len; | 
|  | fuzz->nextRange(&len, 0, kMaxGlyphCount); | 
|  | std::string str(len, 0); | 
|  | for (int i = 0; i < len; i++) { | 
|  | fuzz->next(&str[i]); | 
|  | } | 
|  | return str; | 
|  | } | 
|  |  | 
|  | static sk_sp<SkTextBlob> make_fuzz_textblob(Fuzz* fuzz) { | 
|  | SkTextBlobBuilder textBlobBuilder; | 
|  | int8_t runCount; | 
|  | fuzz->nextRange(&runCount, (int8_t)1, (int8_t)8); | 
|  | while (runCount-- > 0) { | 
|  | SkFont font = ToolUtils::DefaultFont(); | 
|  | SkTextEncoding encoding = fuzz_paint_text_encoding(fuzz); | 
|  | font.setEdging(make_fuzz_t<bool>(fuzz) ? SkFont::Edging::kAlias : SkFont::Edging::kAntiAlias); | 
|  | SkTDArray<uint8_t> text = make_fuzz_text(fuzz, font, encoding); | 
|  | int glyphCount = font.countText(text.begin(), SkToSizeT(text.size()), encoding); | 
|  | SkASSERT(glyphCount <= kMaxGlyphCount); | 
|  | SkScalar x, y; | 
|  | const SkTextBlobBuilder::RunBuffer* buffer; | 
|  | uint8_t runType; | 
|  | fuzz->nextRange(&runType, (uint8_t)0, (uint8_t)2); | 
|  | const void* textPtr = text.begin(); | 
|  | size_t textLen =  SkToSizeT(text.size()); | 
|  | switch (runType) { | 
|  | case 0: | 
|  | fuzz->next(&x, &y); | 
|  | // TODO: Test other variations of this. | 
|  | buffer = &textBlobBuilder.allocRun(font, glyphCount, x, y); | 
|  | (void)font.textToGlyphs(textPtr, textLen, encoding, {buffer->glyphs, glyphCount}); | 
|  | break; | 
|  | case 1: | 
|  | fuzz->next(&y); | 
|  | // TODO: Test other variations of this. | 
|  | buffer = &textBlobBuilder.allocRunPosH(font, glyphCount, y); | 
|  | (void)font.textToGlyphs(textPtr, textLen, encoding, {buffer->glyphs, glyphCount}); | 
|  | fuzz->nextN(buffer->pos, glyphCount); | 
|  | break; | 
|  | case 2: | 
|  | // TODO: Test other variations of this. | 
|  | buffer = &textBlobBuilder.allocRunPos(font, glyphCount); | 
|  | (void)font.textToGlyphs(textPtr, textLen, encoding, {buffer->glyphs, glyphCount}); | 
|  | fuzz->nextN(buffer->pos, glyphCount * 2); | 
|  | break; | 
|  | default: | 
|  | SkASSERT(false); | 
|  | break; | 
|  | } | 
|  | } | 
|  | return textBlobBuilder.make(); | 
|  | } | 
|  |  | 
|  | static void fuzz_canvas(Fuzz* fuzz, SkCanvas* canvas, int depth = 9) { | 
|  | if (!fuzz || !canvas || depth <= 0) { | 
|  | return; | 
|  | } | 
|  | SkAutoCanvasRestore autoCanvasRestore(canvas, false); | 
|  | unsigned N; | 
|  | fuzz->nextRange(&N, 0, 2000); | 
|  | for (unsigned loop = 0; loop < N; ++loop) { | 
|  | if (fuzz->exhausted()) { | 
|  | return; | 
|  | } | 
|  | SkPaint paint; | 
|  | SkFont font = ToolUtils::DefaultFont(); | 
|  | unsigned drawCommand; | 
|  | fuzz->nextRange(&drawCommand, 0, 62); | 
|  | switch (drawCommand) { | 
|  | case 0: | 
|  | #if defined(SK_GANESH) | 
|  | if (auto dContext = GrAsDirectContext(canvas->recordingContext())) { | 
|  | dContext->flushAndSubmit(); | 
|  | } | 
|  | #endif | 
|  | break; | 
|  | case 1: | 
|  | canvas->save(); | 
|  | break; | 
|  | case 2: { | 
|  | SkRect bounds; | 
|  | fuzz->next(&bounds); | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | canvas->saveLayer(&bounds, &paint); | 
|  | break; | 
|  | } | 
|  | case 3: { | 
|  | SkRect bounds; | 
|  | fuzz->next(&bounds); | 
|  | canvas->saveLayer(&bounds, nullptr); | 
|  | break; | 
|  | } | 
|  | case 4: | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | canvas->saveLayer(nullptr, &paint); | 
|  | break; | 
|  | case 5: | 
|  | canvas->saveLayer(nullptr, nullptr); | 
|  | break; | 
|  | case 6: { | 
|  | uint8_t alpha; | 
|  | fuzz->next(&alpha); | 
|  | canvas->saveLayerAlpha(nullptr, (U8CPU)alpha); | 
|  | break; | 
|  | } | 
|  | case 7: { | 
|  | SkRect bounds; | 
|  | uint8_t alpha; | 
|  | fuzz->next(&bounds, &alpha); | 
|  | canvas->saveLayerAlpha(&bounds, (U8CPU)alpha); | 
|  | break; | 
|  | } | 
|  | case 8: { | 
|  | SkCanvas::SaveLayerRec saveLayerRec; | 
|  | SkRect bounds; | 
|  | if (make_fuzz_t<bool>(fuzz)) { | 
|  | fuzz->next(&bounds); | 
|  | saveLayerRec.fBounds = &bounds; | 
|  | } | 
|  | if (make_fuzz_t<bool>(fuzz)) { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | saveLayerRec.fPaint = &paint; | 
|  | } | 
|  | sk_sp<SkImageFilter> imageFilter; | 
|  | if (make_fuzz_t<bool>(fuzz)) { | 
|  | imageFilter = make_fuzz_imageFilter(fuzz, depth - 1); | 
|  | saveLayerRec.fBackdrop = imageFilter.get(); | 
|  | } | 
|  | // _DumpCanvas can't handle this. | 
|  | // if (make_fuzz_t<bool>(fuzz)) { | 
|  | //     saveLayerRec.fSaveLayerFlags |= SkCanvas::kPreserveLCDText_SaveLayerFlag; | 
|  | // } | 
|  |  | 
|  | canvas->saveLayer(saveLayerRec); | 
|  | break; | 
|  | } | 
|  | case 9: | 
|  | canvas->restore(); | 
|  | break; | 
|  | case 10: { | 
|  | int saveCount; | 
|  | fuzz->next(&saveCount); | 
|  | canvas->restoreToCount(saveCount); | 
|  | break; | 
|  | } | 
|  | case 11: { | 
|  | SkScalar x, y; | 
|  | fuzz->next(&x, &y); | 
|  | canvas->translate(x, y); | 
|  | break; | 
|  | } | 
|  | case 12: { | 
|  | SkScalar x, y; | 
|  | fuzz->next(&x, &y); | 
|  | canvas->scale(x, y); | 
|  | break; | 
|  | } | 
|  | case 13: { | 
|  | SkScalar v; | 
|  | fuzz->next(&v); | 
|  | canvas->rotate(v); | 
|  | break; | 
|  | } | 
|  | case 14: { | 
|  | SkScalar x, y, v; | 
|  | fuzz->next(&x, &y, &v); | 
|  | canvas->rotate(v, x, y); | 
|  | break; | 
|  | } | 
|  | case 15: { | 
|  | SkScalar x, y; | 
|  | fuzz->next(&x, &y); | 
|  | canvas->skew(x, y); | 
|  | break; | 
|  | } | 
|  | case 16: { | 
|  | SkMatrix mat; | 
|  | FuzzNiceMatrix(fuzz, &mat); | 
|  | canvas->concat(mat); | 
|  | break; | 
|  | } | 
|  | case 17: { | 
|  | SkMatrix mat; | 
|  | FuzzNiceMatrix(fuzz, &mat); | 
|  | canvas->setMatrix(mat); | 
|  | break; | 
|  | } | 
|  | case 18: | 
|  | canvas->resetMatrix(); | 
|  | break; | 
|  | case 19: { | 
|  | SkRect r; | 
|  | int op; | 
|  | bool doAntiAlias; | 
|  | fuzz->next(&r, &doAntiAlias); | 
|  | fuzz->nextRange(&op, 0, 1); | 
|  | r.sort(); | 
|  | canvas->clipRect(r, (SkClipOp)op, doAntiAlias); | 
|  | break; | 
|  | } | 
|  | case 20: { | 
|  | SkRRect rr; | 
|  | int op; | 
|  | bool doAntiAlias; | 
|  | FuzzNiceRRect(fuzz, &rr); | 
|  | fuzz->next(&doAntiAlias); | 
|  | fuzz->nextRange(&op, 0, 1); | 
|  | canvas->clipRRect(rr, (SkClipOp)op, doAntiAlias); | 
|  | break; | 
|  | } | 
|  | case 21: { | 
|  | SkPath path = FuzzNicePath(fuzz, 30); | 
|  | int op; | 
|  | bool doAntiAlias; | 
|  | fuzz->next(&doAntiAlias); | 
|  | fuzz->nextRange(&op, 0, 1); | 
|  | canvas->clipPath(path, (SkClipOp)op, doAntiAlias); | 
|  | break; | 
|  | } | 
|  | case 22: { | 
|  | SkRegion region; | 
|  | int op; | 
|  | fuzz->next(®ion); | 
|  | fuzz->nextRange(&op, 0, 1); | 
|  | canvas->clipRegion(region, (SkClipOp)op); | 
|  | break; | 
|  | } | 
|  | case 23: | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | canvas->drawPaint(paint); | 
|  | break; | 
|  | case 24: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkCanvas::PointMode pointMode; | 
|  | fuzz->nextRange(&pointMode, | 
|  | SkCanvas::kPoints_PointMode, SkCanvas::kPolygon_PointMode); | 
|  | size_t count; | 
|  | constexpr int kMaxCount = 30; | 
|  | fuzz->nextRange(&count, 0, kMaxCount); | 
|  | SkPoint pts[kMaxCount]; | 
|  | fuzz->nextN(pts, count); | 
|  | canvas->drawPoints(pointMode, {pts, count}, paint); | 
|  | break; | 
|  | } | 
|  | case 25: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkRect r; | 
|  | fuzz->next(&r); | 
|  | if (!r.isFinite()) { | 
|  | break; | 
|  | } | 
|  | canvas->drawRect(r, paint); | 
|  | break; | 
|  | } | 
|  | case 26: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkRegion region; | 
|  | fuzz->next(®ion); | 
|  | canvas->drawRegion(region, paint); | 
|  | break; | 
|  | } | 
|  | case 27: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkRect r; | 
|  | fuzz->next(&r); | 
|  | if (!r.isFinite()) { | 
|  | break; | 
|  | } | 
|  | canvas->drawOval(r, paint); | 
|  | break; | 
|  | } | 
|  | case 28: break; // must have deleted this some time earlier | 
|  | case 29: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkRRect rr; | 
|  | FuzzNiceRRect(fuzz, &rr); | 
|  | canvas->drawRRect(rr, paint); | 
|  | break; | 
|  | } | 
|  | case 30: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkRRect orr, irr; | 
|  | FuzzNiceRRect(fuzz, &orr); | 
|  | FuzzNiceRRect(fuzz, &irr); | 
|  | if (orr.getBounds().contains(irr.getBounds())) { | 
|  | canvas->drawDRRect(orr, irr, paint); | 
|  | } | 
|  | break; | 
|  | } | 
|  | case 31: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkRect r; | 
|  | SkScalar start, sweep; | 
|  | bool useCenter; | 
|  | fuzz->next(&r, &start, &sweep, &useCenter); | 
|  | canvas->drawArc(r, start, sweep, useCenter, paint); | 
|  | break; | 
|  | } | 
|  | case 32: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkPath path = FuzzNicePath(fuzz, 60); | 
|  | canvas->drawPath(path, paint); | 
|  | break; | 
|  | } | 
|  | case 33: { | 
|  | sk_sp<SkImage> img = make_fuzz_image(fuzz); | 
|  | SkScalar left, top; | 
|  | bool usePaint; | 
|  | fuzz->next(&left, &top, &usePaint); | 
|  | if (usePaint) { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | } | 
|  | canvas->drawImage(img.get(), left, top, SkSamplingOptions(), | 
|  | usePaint ? &paint : nullptr); | 
|  | break; | 
|  | } | 
|  | case 35: { | 
|  | auto img = make_fuzz_image(fuzz); | 
|  | SkIRect src; | 
|  | SkRect dst; | 
|  | bool usePaint; | 
|  | fuzz->next(&src, &dst, &usePaint); | 
|  | if (usePaint) { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | } | 
|  | SkCanvas::SrcRectConstraint constraint = | 
|  | make_fuzz_t<bool>(fuzz) ? SkCanvas::kStrict_SrcRectConstraint | 
|  | : SkCanvas::kFast_SrcRectConstraint; | 
|  | canvas->drawImageRect(img.get(), SkRect::Make(src), dst, SkSamplingOptions(), | 
|  | usePaint ? &paint : nullptr, constraint); | 
|  | break; | 
|  | } | 
|  | case 37: { | 
|  | auto img = make_fuzz_image(fuzz); | 
|  | SkIRect center; | 
|  | SkRect dst; | 
|  | bool usePaint; | 
|  | fuzz->next(&usePaint); | 
|  | if (usePaint) { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | } | 
|  | if (make_fuzz_t<bool>(fuzz)) { | 
|  | fuzz->next(¢er); | 
|  | } else {  // Make valid center, see SkLatticeIter::Valid(). | 
|  | fuzz->nextRange(¢er.fLeft, 0, img->width() - 1); | 
|  | fuzz->nextRange(¢er.fTop, 0, img->height() - 1); | 
|  | fuzz->nextRange(¢er.fRight, center.fLeft + 1, img->width()); | 
|  | fuzz->nextRange(¢er.fBottom, center.fTop + 1, img->height()); | 
|  | } | 
|  | fuzz->next(&dst); | 
|  | canvas->drawImageNine(img.get(), center, dst, SkFilterMode::kNearest, | 
|  | usePaint ? &paint : nullptr); | 
|  | break; | 
|  | } | 
|  | case 44: { | 
|  | auto img = make_fuzz_image(fuzz); | 
|  | bool usePaint; | 
|  | SkRect dst; | 
|  | fuzz->next(&usePaint, &dst); | 
|  | if (usePaint) { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | } | 
|  | constexpr int kMax = 6; | 
|  | int xDivs[kMax], yDivs[kMax]; | 
|  | SkCanvas::Lattice lattice{xDivs, yDivs, nullptr, 0, 0, nullptr, nullptr}; | 
|  | fuzz->nextRange(&lattice.fXCount, 2, kMax); | 
|  | fuzz->nextRange(&lattice.fYCount, 2, kMax); | 
|  | fuzz->nextN(xDivs, lattice.fXCount); | 
|  | fuzz->nextN(yDivs, lattice.fYCount); | 
|  | canvas->drawImageLattice(img.get(), lattice, dst, SkFilterMode::kLinear, | 
|  | usePaint ? &paint : nullptr); | 
|  | break; | 
|  | } | 
|  | case 45: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | font = fuzz_font(fuzz); | 
|  | SkTextEncoding encoding = fuzz_paint_text_encoding(fuzz); | 
|  | SkScalar x, y; | 
|  | fuzz->next(&x, &y); | 
|  | SkTDArray<uint8_t> text = make_fuzz_text(fuzz, font, encoding); | 
|  | canvas->drawSimpleText(text.begin(), SkToSizeT(text.size()), encoding, x, y, | 
|  | font, paint); | 
|  | break; | 
|  | } | 
|  | case 46: { | 
|  | // was drawPosText | 
|  | break; | 
|  | } | 
|  | case 47: { | 
|  | // was drawPosTextH | 
|  | break; | 
|  | } | 
|  | case 48: { | 
|  | // was drawtextonpath | 
|  | break; | 
|  | } | 
|  | case 49: { | 
|  | // was drawtextonpath | 
|  | break; | 
|  | } | 
|  | case 50: { | 
|  | // was drawTextRSXform | 
|  | break; | 
|  | } | 
|  | case 51: { | 
|  | sk_sp<SkTextBlob> blob = make_fuzz_textblob(fuzz); | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkScalar x, y; | 
|  | fuzz->next(&x, &y); | 
|  | canvas->drawTextBlob(blob, x, y, paint); | 
|  | break; | 
|  | } | 
|  | case 52: { | 
|  | SkMatrix matrix; | 
|  | bool usePaint, useMatrix; | 
|  | fuzz->next(&usePaint, &useMatrix); | 
|  | if (usePaint) { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | } | 
|  | if (useMatrix) { | 
|  | FuzzNiceMatrix(fuzz, &matrix); | 
|  | } | 
|  | auto pic = make_fuzz_picture(fuzz, depth - 1); | 
|  | canvas->drawPicture(pic, useMatrix ? &matrix : nullptr, | 
|  | usePaint ? &paint : nullptr); | 
|  | break; | 
|  | } | 
|  | case 53: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkVertices::VertexMode vertexMode; | 
|  | SkBlendMode blendMode; | 
|  | fuzz->nextRange(&vertexMode, 0, SkVertices::kTriangleFan_VertexMode); | 
|  | fuzz->nextRange(&blendMode, 0, SkBlendMode::kLastMode); | 
|  | constexpr int kMaxCount = 100; | 
|  | int vertexCount; | 
|  | SkPoint vertices[kMaxCount]; | 
|  | SkPoint texs[kMaxCount]; | 
|  | SkColor colors[kMaxCount]; | 
|  | fuzz->nextRange(&vertexCount, 3, kMaxCount); | 
|  | fuzz->nextN(vertices, vertexCount); | 
|  | bool useTexs, useColors; | 
|  | fuzz->next(&useTexs, &useColors); | 
|  | if (useTexs) { | 
|  | fuzz->nextN(texs, vertexCount); | 
|  | } | 
|  | if (useColors) { | 
|  | fuzz->nextN(colors, vertexCount); | 
|  | } | 
|  | int indexCount = 0; | 
|  | uint16_t indices[kMaxCount * 2]; | 
|  | if (make_fuzz_t<bool>(fuzz)) { | 
|  | fuzz->nextRange(&indexCount, vertexCount, vertexCount + kMaxCount); | 
|  | for (int index = 0; index < indexCount; ++index) { | 
|  | fuzz->nextRange(&indices[index], 0, vertexCount - 1); | 
|  | } | 
|  | } | 
|  | canvas->drawVertices(SkVertices::MakeCopy(vertexMode, vertexCount, vertices, | 
|  | useTexs ? texs : nullptr, | 
|  | useColors ? colors : nullptr, | 
|  | indexCount, indices), | 
|  | blendMode, paint); | 
|  | break; | 
|  | } | 
|  | case 54: { | 
|  | SkColor color; | 
|  | SkBlendMode blendMode; | 
|  | fuzz->nextRange(&blendMode, 0, SkBlendMode::kSrcOver); | 
|  | fuzz->next(&color); | 
|  | canvas->drawColor(color, blendMode); | 
|  | break; | 
|  | } | 
|  | case 55: { | 
|  | SkColor4f color; | 
|  | SkBlendMode blendMode; | 
|  | float R, G, B, Alpha; | 
|  | fuzz->nextRange(&blendMode, 0, SkBlendMode::kSrcOver); | 
|  | fuzz->nextRange(&R, -1, 2); | 
|  | fuzz->nextRange(&G, -1, 2); | 
|  | fuzz->nextRange(&B, -1, 2); | 
|  | fuzz->nextRange(&Alpha, 0, 1); | 
|  | color = {R, G, B, Alpha}; | 
|  | canvas->drawColor(color, blendMode); | 
|  | break; | 
|  | } | 
|  | case 56: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkPoint p0, p1; | 
|  | fuzz->next(&p0, &p1); | 
|  | canvas->drawLine(p0, p1, paint); | 
|  | break; | 
|  | } | 
|  | case 57: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkIRect r; | 
|  | fuzz->next(&r); | 
|  | canvas->drawIRect(r, paint); | 
|  | break; | 
|  | } | 
|  | case 58: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkScalar radius; | 
|  | SkPoint center; | 
|  | fuzz->next(&radius, ¢er); | 
|  | canvas->drawCircle(center, radius, paint); | 
|  | break; | 
|  | } | 
|  | case 59: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkRect oval; | 
|  | SkScalar startAngle, sweepAngle; | 
|  | bool useCenter; | 
|  | fuzz->next(&oval, &startAngle, &sweepAngle, &useCenter); | 
|  | canvas->drawArc(oval, startAngle, sweepAngle, useCenter, paint); | 
|  | break; | 
|  | } | 
|  | case 60: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkRect rect; | 
|  | SkScalar rx, ry; | 
|  | fuzz->next(&rect, &rx, &ry); | 
|  | canvas->drawRoundRect(rect, rx, ry, paint); | 
|  | break; | 
|  | } | 
|  | case 61: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | font = fuzz_font(fuzz); | 
|  | std::string str = make_fuzz_string(fuzz); | 
|  | SkScalar x, y; | 
|  | fuzz->next(&x, &y); | 
|  | canvas->drawString(str.c_str(), x, y, font, paint); | 
|  | break; | 
|  | } | 
|  | case 62: { | 
|  | fuzz_paint(fuzz, &paint, depth - 1); | 
|  | SkPoint cubics[12]; | 
|  | SkColor colors[4]; | 
|  | SkPoint texCoords[4]; | 
|  | bool useTexCoords; | 
|  | fuzz->nextN(cubics, 12); | 
|  | fuzz->nextN(colors, 4); | 
|  | fuzz->next(&useTexCoords); | 
|  | if (useTexCoords) { | 
|  | fuzz->nextN(texCoords, 4); | 
|  | } | 
|  | SkBlendMode mode; | 
|  | fuzz->nextEnum(&mode, SkBlendMode::kLastMode); | 
|  | canvas->drawPatch(cubics, colors, useTexCoords ? texCoords : nullptr | 
|  | , mode, paint); | 
|  | break; | 
|  | } | 
|  | default: | 
|  | SkASSERT(false); | 
|  | break; | 
|  | } | 
|  | } | 
|  | } | 
|  |  | 
|  | static sk_sp<SkPicture> make_fuzz_picture(Fuzz* fuzz, int depth) { | 
|  | SkScalar w, h; | 
|  | fuzz->next(&w, &h); | 
|  | SkPictureRecorder pictureRecorder; | 
|  | fuzz_canvas(fuzz, pictureRecorder.beginRecording(w, h), depth - 1); | 
|  | return pictureRecorder.finishRecordingAsPicture(); | 
|  | } | 
|  |  | 
|  | DEF_FUZZ(NullCanvas, fuzz) { | 
|  | fuzz_canvas(fuzz, SkMakeNullCanvas().get()); | 
|  | } | 
|  |  | 
|  | constexpr SkISize kCanvasSize = {128, 160}; | 
|  |  | 
|  | DEF_FUZZ(RasterN32Canvas, fuzz) { | 
|  | auto surface = SkSurfaces::Raster( | 
|  | SkImageInfo::MakeN32Premul(kCanvasSize.width(), kCanvasSize.height())); | 
|  | if (!surface || !surface->getCanvas()) { fuzz->signalBug(); } | 
|  | fuzz_canvas(fuzz, surface->getCanvas()); | 
|  | } | 
|  |  | 
|  | #if defined(SK_CODEC_DECODES_PNG_WITH_LIBPNG) && defined(SK_CODEC_ENCODES_PNG_WITH_LIBPNG) | 
|  | #include "include/codec/SkPngDecoder.h" | 
|  | #include "include/encode/SkPngEncoder.h" | 
|  |  | 
|  | DEF_FUZZ(RasterN32CanvasViaSerialization, fuzz) { | 
|  | SkPictureRecorder recorder; | 
|  | fuzz_canvas(fuzz, recorder.beginRecording(SkIntToScalar(kCanvasSize.width()), | 
|  | SkIntToScalar(kCanvasSize.height()))); | 
|  | sk_sp<SkPicture> pic(recorder.finishRecordingAsPicture()); | 
|  | if (!pic) { fuzz->signalBug(); } | 
|  | SkSerialProcs sProcs; | 
|  | sProcs.fImageProc = [](SkImage* img, void*) -> sk_sp<SkData> { | 
|  | return SkPngEncoder::Encode(nullptr, img, SkPngEncoder::Options{}); | 
|  | }; | 
|  | sk_sp<SkData> data = pic->serialize(&sProcs); | 
|  | if (!data) { fuzz->signalBug(); } | 
|  | SkReadBuffer rb(data->data(), data->size()); | 
|  | SkCodecs::Register(SkPngDecoder::Decoder()); | 
|  | auto deserialized = SkPicturePriv::MakeFromBuffer(rb); | 
|  | if (!deserialized) { fuzz->signalBug(); } | 
|  | auto surface = SkSurfaces::Raster( | 
|  | SkImageInfo::MakeN32Premul(kCanvasSize.width(), kCanvasSize.height())); | 
|  | SkASSERT(surface && surface->getCanvas()); | 
|  | surface->getCanvas()->drawPicture(deserialized); | 
|  | } | 
|  |  | 
|  | #endif | 
|  |  | 
|  | DEF_FUZZ(ImageFilter, fuzz) { | 
|  | SkBitmap bitmap; | 
|  | if (!bitmap.tryAllocN32Pixels(256, 256)) { | 
|  | SkDEBUGF("Could not allocate 256x256 bitmap in ImageFilter"); | 
|  | return; | 
|  | } | 
|  |  | 
|  | auto fil = make_fuzz_imageFilter(fuzz, 20); | 
|  |  | 
|  | SkPaint paint; | 
|  | paint.setImageFilter(fil); | 
|  | SkCanvas canvas(bitmap); | 
|  | canvas.saveLayer(SkRect::MakeWH(500, 500), &paint); | 
|  | } | 
|  |  | 
|  |  | 
|  | //SkRandom _rand; | 
|  | #define SK_ADD_RANDOM_BIT_FLIPS | 
|  |  | 
|  | DEF_FUZZ(SerializedImageFilter, fuzz) { | 
|  | SkBitmap bitmap; | 
|  | if (!bitmap.tryAllocN32Pixels(256, 256)) { | 
|  | SkDEBUGF("Could not allocate 256x256 bitmap in SerializedImageFilter"); | 
|  | return; | 
|  | } | 
|  |  | 
|  | auto filter = make_fuzz_imageFilter(fuzz, 20); | 
|  | if (!filter) { | 
|  | return; | 
|  | } | 
|  | auto data = filter->serialize(); | 
|  | const unsigned char* ptr = static_cast<const unsigned char*>(data->data()); | 
|  | size_t len = data->size(); | 
|  | #ifdef SK_ADD_RANDOM_BIT_FLIPS | 
|  | unsigned char* p = const_cast<unsigned char*>(ptr); | 
|  | for (size_t i = 0; i < len; ++i, ++p) { | 
|  | uint8_t j; | 
|  | fuzz->nextRange(&j, 1, 250); | 
|  | if (j == 1) { // 0.4% of the time, flip a bit or byte | 
|  | uint8_t k; | 
|  | fuzz->nextRange(&k, 1, 10); | 
|  | if (k == 1) { // Then 10% of the time, change a whole byte | 
|  | uint8_t s; | 
|  | fuzz->nextRange(&s, 0, 2); | 
|  | switch(s) { | 
|  | case 0: | 
|  | *p ^= 0xFF; // Flip entire byte | 
|  | break; | 
|  | case 1: | 
|  | *p = 0xFF; // Set all bits to 1 | 
|  | break; | 
|  | case 2: | 
|  | *p = 0x00; // Set all bits to 0 | 
|  | break; | 
|  | } | 
|  | } else { | 
|  | uint8_t s; | 
|  | fuzz->nextRange(&s, 0, 7); | 
|  | *p ^= (1 << 7); | 
|  | } | 
|  | } | 
|  | } | 
|  | #endif // SK_ADD_RANDOM_BIT_FLIPS | 
|  | auto deserializedFil = SkImageFilter::Deserialize(ptr, len); | 
|  |  | 
|  | // uncomment below to write out a serialized image filter (to make corpus | 
|  | // for -t filter_fuzz) | 
|  | // SkString s("./serialized_filters/sf"); | 
|  | // s.appendU32(_rand.nextU()); | 
|  | // auto file = sk_fopen(s.c_str(), SkFILE_Flags::kWrite_SkFILE_Flag); | 
|  | // sk_fwrite(data->bytes(), data->size(), file); | 
|  | // sk_fclose(file); | 
|  |  | 
|  | SkPaint paint; | 
|  | paint.setImageFilter(deserializedFil); | 
|  |  | 
|  | SkCanvas canvas(bitmap); | 
|  | canvas.saveLayer(SkRect::MakeWH(256, 256), &paint); | 
|  | canvas.restore(); | 
|  | } | 
|  |  | 
|  | #if defined(SK_GANESH) | 
|  | static void fuzz_ganesh(Fuzz* fuzz, GrDirectContext* context) { | 
|  | SkASSERT(context); | 
|  | auto surface = SkSurfaces::RenderTarget( | 
|  | context, | 
|  | skgpu::Budgeted::kNo, | 
|  | SkImageInfo::Make(kCanvasSize, kRGBA_8888_SkColorType, kPremul_SkAlphaType)); | 
|  | SkASSERT(surface && surface->getCanvas()); | 
|  | fuzz_canvas(fuzz, surface->getCanvas()); | 
|  | } | 
|  |  | 
|  | DEF_FUZZ(MockGPUCanvas, fuzz) { | 
|  | sk_gpu_test::GrContextFactory f; | 
|  | fuzz_ganesh(fuzz, f.get(skgpu::ContextType::kMock)); | 
|  | } | 
|  | #endif | 
|  |  | 
|  | #ifdef SK_GL | 
|  | static void dump_GPU_info(GrDirectContext* context) { | 
|  | const GrGLInterface* gl = static_cast<GrGLGpu*>(context->priv().getGpu()) | 
|  | ->glInterface(); | 
|  | const GrGLubyte* output; | 
|  | GR_GL_CALL_RET(gl, output, GetString(GR_GL_RENDERER)); | 
|  | SkDebugf("GL_RENDERER %s\n", (const char*) output); | 
|  |  | 
|  | GR_GL_CALL_RET(gl, output, GetString(GR_GL_VENDOR)); | 
|  | SkDebugf("GL_VENDOR %s\n", (const char*) output); | 
|  |  | 
|  | GR_GL_CALL_RET(gl, output, GetString(GR_GL_VERSION)); | 
|  | SkDebugf("GL_VERSION %s\n", (const char*) output); | 
|  | } | 
|  |  | 
|  | DEF_FUZZ(NativeGLCanvas, fuzz) { | 
|  | sk_gpu_test::GrContextFactory f; | 
|  | auto context = f.get(skgpu::ContextType::kGL); | 
|  | if (!context) { | 
|  | context = f.get(skgpu::ContextType::kGLES); | 
|  | } | 
|  | if (FLAGS_gpuInfo) { | 
|  | dump_GPU_info(context); | 
|  | } | 
|  | fuzz_ganesh(fuzz, context); | 
|  | } | 
|  | #endif | 
|  |  | 
|  | DEF_FUZZ(PDFCanvas, fuzz) { | 
|  | SkNullWStream stream; | 
|  | auto doc = SkPDF::MakeDocument(&stream, SkPDF::JPEG::MetadataWithCallbacks()); | 
|  | fuzz_canvas(fuzz, doc->beginPage(SkIntToScalar(kCanvasSize.width()), | 
|  | SkIntToScalar(kCanvasSize.height()))); | 
|  | } | 
|  |  | 
|  | // not a "real" thing to fuzz, used to debug errors found while fuzzing. | 
|  | DEF_FUZZ(_DumpCanvas, fuzz) { | 
|  | DebugCanvas debugCanvas(kCanvasSize.width(), kCanvasSize.height()); | 
|  | fuzz_canvas(fuzz, &debugCanvas); | 
|  | std::unique_ptr<SkCanvas> nullCanvas = SkMakeNullCanvas(); | 
|  | UrlDataManager dataManager(SkString("data")); | 
|  | SkDynamicMemoryWStream stream; | 
|  | SkJSONWriter writer(&stream, SkJSONWriter::Mode::kPretty); | 
|  | writer.beginObject(); // root | 
|  | debugCanvas.toJSON(writer, dataManager, nullCanvas.get()); | 
|  | writer.endObject(); // root | 
|  | writer.flush(); | 
|  | sk_sp<SkData> json = stream.detachAsData(); | 
|  | fwrite(json->data(), json->size(), 1, stdout); | 
|  | } | 
|  |  | 
|  | DEF_FUZZ(SVGCanvas, fuzz) { | 
|  | SkNullWStream stream; | 
|  | SkRect bounds = SkRect::MakeIWH(150, 150); | 
|  | std::unique_ptr<SkCanvas> canvas = SkSVGCanvas::Make(bounds, &stream); | 
|  | fuzz_canvas(fuzz, canvas.get()); | 
|  | } |