/src/fuzz/surface_write_png_fuzzer.c
Line | Count | Source |
1 | | // Copyright 2020 Google LLC |
2 | | // |
3 | | // Licensed under the Apache License, Version 2.0 (the "License"); |
4 | | // you may not use this file except in compliance with the License. |
5 | | // You may obtain a copy of the License at |
6 | | // |
7 | | // http://www.apache.org/licenses/LICENSE-2.0 |
8 | | // |
9 | | // Unless required by applicable law or agreed to in writing, software |
10 | | // distributed under the License is distributed on an "AS IS" BASIS, |
11 | | // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
12 | | // See the License for the specific language governing permissions and |
13 | | // limitations under the License. |
14 | | |
15 | | #include <cairo.h> |
16 | | #include "fuzzer_temp_file.h" |
17 | | |
18 | 6.32k | int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { |
19 | 6.32k | cairo_surface_t *image; |
20 | 6.32k | cairo_surface_t *surface; |
21 | 6.32k | cairo_status_t status; |
22 | 6.32k | cairo_format_t format; |
23 | | |
24 | 6.32k | char *tmpfile = fuzzer_get_tmpfile(data, size); |
25 | 6.32k | image = cairo_image_surface_create_from_png(tmpfile); |
26 | 6.32k | status = cairo_surface_status (image); |
27 | 6.32k | if (status != CAIRO_STATUS_SUCCESS) { |
28 | 6.19k | fuzzer_release_tmpfile(tmpfile); |
29 | 6.19k | return 0; |
30 | 6.19k | } |
31 | | |
32 | 124 | format = cairo_image_surface_get_format(image); |
33 | 124 | surface = cairo_image_surface_create_for_data((unsigned char*)data, format, 1, 1, size); |
34 | 124 | status = cairo_surface_status (surface); |
35 | 124 | if (status != CAIRO_STATUS_SUCCESS) { |
36 | 71 | cairo_surface_destroy(image); |
37 | 71 | fuzzer_release_tmpfile(tmpfile); |
38 | 71 | return 0; |
39 | 71 | } |
40 | 53 | cairo_surface_write_to_png(surface, tmpfile); |
41 | | |
42 | 53 | cairo_surface_destroy(surface); |
43 | 53 | cairo_surface_destroy(image); |
44 | 53 | fuzzer_release_tmpfile(tmpfile); |
45 | 53 | return 0; |
46 | 124 | } |