Coverage Report

Created: 2026-02-14 06:29

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/fuzz/surface_write_png_fuzzer.c
Line
Count
Source
1
// Copyright 2020 Google LLC
2
//
3
// Licensed under the Apache License, Version 2.0 (the "License");
4
// you may not use this file except in compliance with the License.
5
// You may obtain a copy of the License at
6
//
7
//      http://www.apache.org/licenses/LICENSE-2.0
8
//
9
// Unless required by applicable law or agreed to in writing, software
10
// distributed under the License is distributed on an "AS IS" BASIS,
11
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12
// See the License for the specific language governing permissions and
13
// limitations under the License.
14
15
#include <cairo.h>
16
#include "fuzzer_temp_file.h"
17
18
4.53k
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
19
4.53k
    cairo_surface_t *image;
20
4.53k
    cairo_surface_t *surface;
21
4.53k
    cairo_status_t status;
22
4.53k
    cairo_format_t format;
23
24
4.53k
    char *tmpfile = fuzzer_get_tmpfile(data, size);
25
4.53k
    image = cairo_image_surface_create_from_png(tmpfile);
26
4.53k
    status = cairo_surface_status (image);
27
4.53k
    if (status != CAIRO_STATUS_SUCCESS) {
28
4.42k
        fuzzer_release_tmpfile(tmpfile);
29
4.42k
        return 0;
30
4.42k
    }
31
32
116
    format = cairo_image_surface_get_format(image);
33
116
    surface = cairo_image_surface_create_for_data((unsigned char*)data, format, 1, 1, size);
34
116
    status = cairo_surface_status (surface);
35
116
    if (status != CAIRO_STATUS_SUCCESS) {
36
64
        cairo_surface_destroy(image);
37
64
        fuzzer_release_tmpfile(tmpfile);
38
64
        return 0;
39
64
    }
40
52
    cairo_surface_write_to_png(surface, tmpfile);
41
42
52
    cairo_surface_destroy(surface);
43
52
    cairo_surface_destroy(image);
44
52
    fuzzer_release_tmpfile(tmpfile);
45
52
    return 0;
46
116
}