File: image_operations_resize_fuzzer.cc

package info (click to toggle)
chromium 139.0.7258.127-1
  • links: PTS, VCS
  • area: main
  • in suites:
  • size: 6,122,068 kB
  • sloc: cpp: 35,100,771; ansic: 7,163,530; javascript: 4,103,002; python: 1,436,920; asm: 946,517; xml: 746,709; pascal: 187,653; perl: 88,691; sh: 88,436; objc: 79,953; sql: 51,488; cs: 44,583; fortran: 24,137; makefile: 22,147; tcl: 15,277; php: 13,980; yacc: 8,984; ruby: 7,485; awk: 3,720; lisp: 3,096; lex: 1,327; ada: 727; jsp: 228; sed: 36
file content (99 lines) | stat: -rw-r--r-- 2,611 bytes parent folder | download | duplicates (6)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
// Copyright 2025 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include <stddef.h>
#include <stdint.h>

#include "base/check.h"
#include "skia/ext/image_operations.h"
#include "third_party/skia/include/core/SkBitmap.h"
#include "third_party/skia/include/core/SkImageInfo.h"
#include "third_party/skia/include/core/SkPixmap.h"
#include "third_party/skia/include/core/SkRect.h"
#include "third_party/skia/include/core/SkRefCnt.h"
#include "third_party/skia/include/core/SkSurface.h"

// TODO(crbug.com/351564777): Remove this and convert code to safer constructs.
#pragma allow_unsafe_buffers

template <typename T>
static bool read(const uint8_t** data, size_t* size, T* value) {
  if (*size < sizeof(T)) {
    return false;
  }

  *value = *reinterpret_cast<const T*>(*data);
  *data += sizeof(T);
  *size -= sizeof(T);
  return true;
}

#define READ_INT(output)                 \
  if (!read<int>(&data, &size, &output)) \
    return 0;

extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
  int iMethod, srcW, srcH, dstW, dstH, subsetX, subsetY, subsetR, subsetB;
  READ_INT(iMethod)
  READ_INT(srcW)
  READ_INT(srcH)
  READ_INT(dstW)
  READ_INT(dstH)
  READ_INT(subsetX)
  READ_INT(subsetY)
  READ_INT(subsetR)
  READ_INT(subsetB)

  skia::ImageOperations::ResizeMethod method =
      skia::ImageOperations::RESIZE_GOOD;
  switch (iMethod) {
    case 1:
      method = skia::ImageOperations::RESIZE_BETTER;
      break;
    case 2:
      method = skia::ImageOperations::RESIZE_BEST;
      break;
    case 3:
      method = skia::ImageOperations::RESIZE_BOX;
      break;
    case 4:
      method = skia::ImageOperations::RESIZE_HAMMING1;
      break;
    case 5:
      method = skia::ImageOperations::RESIZE_LANCZOS3;
      break;
    default:
      break;  // RESIZE_GOOD
  }
  if (srcW < 0 || srcH < 0 || srcW > 300 || srcH > 300) {
    return 0;
  }
  if (dstW <= 0 || dstH <= 0 || dstW > srcW || dstH > srcH) {
    return 0;
  }
  if (dstW == 0 && dstH == 0) {
    return 0;
  }
  SkIRect subset = SkIRect{subsetX, subsetY, subsetR, subsetB};
  if (subset.isEmpty()) {
    return 0;
  }
  SkIRect dest = {0, 0, dstW, dstH};
  if (!dest.contains(subset)) {
    return 0;
  }
  sk_sp<SkSurface> surface =
      SkSurfaces::Raster(SkImageInfo::MakeN32(srcW, srcH, kOpaque_SkAlphaType));
  if (!surface) {
    return 0;
  }
  SkPixmap input;
  if (!surface->peekPixels(&input)) {
    return 0;
  }

  SkBitmap bitmap =
      skia::ImageOperations::Resize(input, method, dstW, dstH, subset);
  return 0;
}