Coverage Report

Created: 2025-06-10 07:27

/src/ghostpdl/jbig2dec/jbig2_image.c
Line
Count
Source (jump to first uncovered line)
1
/* Copyright (C) 2001-2023 Artifex Software, Inc.
2
   All Rights Reserved.
3
4
   This software is provided AS-IS with no warranty, either express or
5
   implied.
6
7
   This software is distributed under license and may not be copied,
8
   modified or distributed except as expressly authorized under the terms
9
   of the license contained in the file LICENSE in this distribution.
10
11
   Refer to licensing information at http://www.artifex.com or contact
12
   Artifex Software, Inc.,  39 Mesa Street, Suite 108A, San Francisco,
13
   CA 94129, USA, for further information.
14
*/
15
16
/*
17
    jbig2dec
18
*/
19
20
#ifdef HAVE_CONFIG_H
21
#include "config.h"
22
#endif
23
#include "os_types.h"
24
25
#include <stdio.h>
26
#include <stdlib.h>
27
#include <string.h>             /* memcpy() */
28
29
#include "jbig2.h"
30
#include "jbig2_priv.h"
31
#include "jbig2_image.h"
32
33
/* allocate a Jbig2Image structure and its associated bitmap */
34
Jbig2Image *
35
jbig2_image_new(Jbig2Ctx *ctx, uint32_t width, uint32_t height)
36
159
{
37
159
    Jbig2Image *image;
38
159
    uint32_t stride;
39
40
159
    if (width == 0 || height == 0) {
41
0
        jbig2_error(ctx, JBIG2_SEVERITY_FATAL, JBIG2_UNKNOWN_SEGMENT_NUMBER, "failed to create zero sized image");
42
0
        return NULL;
43
0
    }
44
45
159
    image = jbig2_new(ctx, Jbig2Image, 1);
46
159
    if (image == NULL) {
47
0
        jbig2_error(ctx, JBIG2_SEVERITY_FATAL, JBIG2_UNKNOWN_SEGMENT_NUMBER, "failed to allocate image");
48
0
        return NULL;
49
0
    }
50
51
159
    stride = ((width - 1) >> 3) + 1;    /* generate a byte-aligned stride */
52
53
    /* check for integer multiplication overflow */
54
159
    if (height > (INT32_MAX / stride)) {
55
0
        jbig2_error(ctx, JBIG2_SEVERITY_FATAL, JBIG2_UNKNOWN_SEGMENT_NUMBER, "integer multiplication overflow (stride=%u, height=%u)", stride, height);
56
0
        jbig2_free(ctx->allocator, image);
57
0
        return NULL;
58
0
    }
59
159
    image->data = jbig2_new(ctx, uint8_t, (size_t) height * stride);
60
159
    if (image->data == NULL) {
61
0
        jbig2_error(ctx, JBIG2_SEVERITY_FATAL, JBIG2_UNKNOWN_SEGMENT_NUMBER, "failed to allocate image data buffer (stride=%u, height=%u)", stride, height);
62
0
        jbig2_free(ctx->allocator, image);
63
0
        return NULL;
64
0
    }
65
66
159
    image->width = width;
67
159
    image->height = height;
68
159
    image->stride = stride;
69
159
    image->refcount = 1;
70
71
159
    return image;
72
159
}
73
74
/* bump the reference count for an image pointer */
75
Jbig2Image *
76
jbig2_image_reference(Jbig2Ctx *ctx, Jbig2Image *image)
77
99
{
78
99
    if (image)
79
99
        image->refcount++;
80
99
    return image;
81
99
}
82
83
/* release an image pointer, freeing it it appropriate */
84
void
85
jbig2_image_release(Jbig2Ctx *ctx, Jbig2Image *image)
86
581
{
87
581
    if (image == NULL)
88
323
        return;
89
258
    image->refcount--;
90
258
    if (image->refcount == 0)
91
159
        jbig2_image_free(ctx, image);
92
258
}
93
94
/* free a Jbig2Image structure and its associated memory */
95
void
96
jbig2_image_free(Jbig2Ctx *ctx, Jbig2Image *image)
97
159
{
98
159
    if (image != NULL) {
99
159
        jbig2_free(ctx->allocator, image->data);
100
159
        jbig2_free(ctx->allocator, image);
101
159
    }
102
159
}
103
104
/* resize a Jbig2Image */
105
Jbig2Image *
106
jbig2_image_resize(Jbig2Ctx *ctx, Jbig2Image *image, uint32_t width, uint32_t height, int value)
107
0
{
108
0
    if (width == image->width) {
109
0
        uint8_t *data;
110
111
        /* check for integer multiplication overflow */
112
0
        if (image->height > (INT32_MAX / image->stride)) {
113
0
            jbig2_error(ctx, JBIG2_SEVERITY_FATAL, JBIG2_UNKNOWN_SEGMENT_NUMBER, "integer multiplication overflow during resize (stride=%u, height=%u)", image->stride, height);
114
0
            return NULL;
115
0
        }
116
        /* use the same stride, just change the length */
117
0
        data = jbig2_renew(ctx, image->data, uint8_t, (size_t) height * image->stride);
118
0
        if (data == NULL) {
119
0
            jbig2_error(ctx, JBIG2_SEVERITY_FATAL, JBIG2_UNKNOWN_SEGMENT_NUMBER, "failed to reallocate image");
120
0
            return NULL;
121
0
        }
122
0
        image->data = data;
123
0
        if (height > image->height) {
124
0
            const uint8_t fill = value ? 0xFF : 0x00;
125
0
            memset(image->data + (size_t) image->height * image->stride, fill, ((size_t) height - image->height) * image->stride);
126
0
        }
127
0
        image->height = height;
128
129
0
    } else {
130
0
        Jbig2Image *newimage;
131
0
        int code;
132
133
        /* Unoptimized implementation, but it works. */
134
135
0
        newimage = jbig2_image_new(ctx, width, height);
136
0
        if (newimage == NULL) {
137
0
            jbig2_error(ctx, JBIG2_SEVERITY_WARNING, JBIG2_UNKNOWN_SEGMENT_NUMBER, "failed to allocate resized image");
138
0
            return NULL;
139
0
        }
140
0
        jbig2_image_clear(ctx, newimage, value);
141
142
0
        code = jbig2_image_compose(ctx, newimage, image, 0, 0, JBIG2_COMPOSE_REPLACE);
143
0
        if (code < 0) {
144
0
            jbig2_error(ctx, JBIG2_SEVERITY_WARNING, JBIG2_UNKNOWN_SEGMENT_NUMBER, "failed to compose image buffers when resizing");
145
0
            jbig2_image_release(ctx, newimage);
146
0
            return NULL;
147
0
        }
148
149
        /* if refcount > 1 the original image, its pointer must
150
        be kept, so simply replaces its innards, and throw away
151
        the empty new image shell. */
152
0
        jbig2_free(ctx->allocator, image->data);
153
0
        image->width = newimage->width;
154
0
        image->height = newimage->height;
155
0
        image->stride = newimage->stride;
156
0
        image->data = newimage->data;
157
0
        jbig2_free(ctx->allocator, newimage);
158
0
    }
159
160
0
    return image;
161
0
}
162
163
static inline void
164
template_image_compose_opt(const uint8_t * JBIG2_RESTRICT ss, uint8_t * JBIG2_RESTRICT dd, int early, int late, uint8_t leftmask, uint8_t rightmask, uint32_t bytewidth_, uint32_t h, uint32_t shift, uint32_t dstride, uint32_t sstride, Jbig2ComposeOp op)
165
61
{
166
61
    int i;
167
61
    uint32_t j;
168
61
    int bytewidth = (int)bytewidth_;
169
170
61
    if (bytewidth == 1) {
171
0
        for (j = 0; j < h; j++) {
172
            /* Only 1 byte! */
173
0
            uint8_t v = (((early ? 0 : ss[0]<<8) | (late ? 0 : ss[1]))>>shift);
174
0
            if (op == JBIG2_COMPOSE_OR)
175
0
                *dd |= v & leftmask;
176
0
            else if (op == JBIG2_COMPOSE_AND)
177
0
                *dd &= (v & leftmask) | ~leftmask;
178
0
            else if (op == JBIG2_COMPOSE_XOR)
179
0
                *dd ^= v & leftmask;
180
0
            else if (op == JBIG2_COMPOSE_XNOR)
181
0
                *dd ^= (~v) & leftmask;
182
0
            else /* Replace */
183
0
                *dd = (v & leftmask) | (*dd & ~leftmask);
184
0
            dd += dstride;
185
0
            ss += sstride;
186
0
        }
187
0
        return;
188
0
    }
189
61
    bytewidth -= 2;
190
61
    if (shift == 0) {
191
50
        ss++;
192
155k
        for (j = 0; j < h; j++) {
193
            /* Left byte */
194
155k
            const uint8_t * JBIG2_RESTRICT s = ss;
195
155k
            uint8_t * JBIG2_RESTRICT d = dd;
196
155k
            if (op == JBIG2_COMPOSE_OR)
197
692
                *d++ |= *s++ & leftmask;
198
154k
            else if (op == JBIG2_COMPOSE_AND)
199
0
                *d++ &= (*s++ & leftmask) | ~leftmask;
200
154k
            else if (op == JBIG2_COMPOSE_XOR)
201
154k
                *d++ ^= *s++ & leftmask;
202
0
            else if (op == JBIG2_COMPOSE_XNOR)
203
0
                *d++ ^= (~*s++) & leftmask;
204
0
            else /* Replace */
205
0
                *d = (*s++ & leftmask) | (*d & ~leftmask), d++;
206
            /* Central run */
207
47.7M
            for (i = bytewidth; i != 0; i--) {
208
47.5M
                if (op == JBIG2_COMPOSE_OR)
209
22.8k
                    *d++ |= *s++;
210
47.5M
                else if (op == JBIG2_COMPOSE_AND)
211
0
                    *d++ &= *s++;
212
47.5M
                else if (op == JBIG2_COMPOSE_XOR)
213
47.5M
                    *d++ ^= *s++;
214
0
                else if (op == JBIG2_COMPOSE_XNOR)
215
0
                    *d++ ^= ~*s++;
216
0
                else /* Replace */
217
0
                    *d++ = *s++;
218
47.5M
            }
219
            /* Right byte */
220
155k
            if (op == JBIG2_COMPOSE_OR)
221
692
                *d |= *s & rightmask;
222
154k
            else if (op == JBIG2_COMPOSE_AND)
223
0
                *d &= (*s & rightmask) | ~rightmask;
224
154k
            else if (op == JBIG2_COMPOSE_XOR)
225
154k
                *d ^= *s & rightmask;
226
0
            else if (op == JBIG2_COMPOSE_XNOR)
227
0
                *d ^= (~*s) & rightmask;
228
0
            else /* Replace */
229
0
                *d = (*s & rightmask) | (*d & ~rightmask);
230
155k
            dd += dstride;
231
155k
            ss += sstride;
232
155k
        }
233
50
    } else {
234
283
        for (j = 0; j < h; j++) {
235
            /* Left byte */
236
272
            const uint8_t * JBIG2_RESTRICT s = ss;
237
272
            uint8_t * JBIG2_RESTRICT d = dd;
238
272
            uint8_t s0, s1, v;
239
272
            s0 = early ? 0 : *s;
240
272
            s++;
241
272
            s1 = *s++;
242
272
            v = ((s0<<8) | s1)>>shift;
243
272
            if (op == JBIG2_COMPOSE_OR)
244
272
                *d++ |= v & leftmask;
245
0
            else if (op == JBIG2_COMPOSE_AND)
246
0
                *d++ &= (v & leftmask) | ~leftmask;
247
0
            else if (op == JBIG2_COMPOSE_XOR)
248
0
                *d++ ^= v & leftmask;
249
0
            else if (op == JBIG2_COMPOSE_XNOR)
250
0
                *d++ ^= (~v) & leftmask;
251
0
            else /* Replace */
252
0
                *d = (v & leftmask) | (*d & ~leftmask), d++;
253
            /* Central run */
254
1.65k
            for (i = bytewidth; i > 0; i--) {
255
1.37k
                s0 = s1; s1 = *s++;
256
1.37k
                v = ((s0<<8) | s1)>>shift;
257
1.37k
                if (op == JBIG2_COMPOSE_OR)
258
1.37k
                    *d++ |= v;
259
0
                else if (op == JBIG2_COMPOSE_AND)
260
0
                    *d++ &= v;
261
0
                else if (op == JBIG2_COMPOSE_XOR)
262
0
                    *d++ ^= v;
263
0
                else if (op == JBIG2_COMPOSE_XNOR)
264
0
                    *d++ ^= ~v;
265
0
                else /* Replace */
266
0
                    *d++ = v;
267
1.37k
            }
268
            /* Right byte */
269
272
            s0 = s1; s1 = (late ? 0 : *s);
270
272
            v = (((s0<<8) | s1)>>shift);
271
272
            if (op == JBIG2_COMPOSE_OR)
272
272
                *d |= v & rightmask;
273
0
            else if (op == JBIG2_COMPOSE_AND)
274
0
                *d &= (v & rightmask) | ~rightmask;
275
0
            else if (op == JBIG2_COMPOSE_XOR)
276
0
                *d ^= v & rightmask;
277
0
            else if (op == JBIG2_COMPOSE_XNOR)
278
0
                *d ^= ~v & rightmask;
279
0
            else /* Replace */
280
0
                *d = (v & rightmask) | (*d & ~rightmask);
281
272
            dd += dstride;
282
272
            ss += sstride;
283
272
        }
284
11
    }
285
61
}
286
287
static void
288
jbig2_image_compose_opt_OR(const uint8_t *s, uint8_t *d, int early, int late, uint8_t mask, uint8_t rightmask, uint32_t bytewidth, uint32_t h, uint32_t shift, uint32_t dstride, uint32_t sstride)
289
16
{
290
16
    if (early || late)
291
16
        template_image_compose_opt(s, d, early, late, mask, rightmask, bytewidth, h, shift, dstride, sstride, JBIG2_COMPOSE_OR);
292
0
    else
293
0
        template_image_compose_opt(s, d, 0, 0, mask, rightmask, bytewidth, h, shift, dstride, sstride, JBIG2_COMPOSE_OR);
294
16
}
295
296
static void
297
jbig2_image_compose_opt_AND(const uint8_t *s, uint8_t *d, int early, int late, uint8_t mask, uint8_t rightmask, uint32_t bytewidth, uint32_t h, uint32_t shift, uint32_t dstride, uint32_t sstride)
298
0
{
299
0
    if (early || late)
300
0
        template_image_compose_opt(s, d, early, late, mask, rightmask, bytewidth, h, shift, dstride, sstride, JBIG2_COMPOSE_AND);
301
0
    else
302
0
        template_image_compose_opt(s, d, 0, 0, mask, rightmask, bytewidth, h, shift, dstride, sstride, JBIG2_COMPOSE_AND);
303
0
}
304
305
static void
306
jbig2_image_compose_opt_XOR(const uint8_t *s, uint8_t *d, int early, int late, uint8_t mask, uint8_t rightmask, uint32_t bytewidth, uint32_t h, uint32_t shift, uint32_t dstride, uint32_t sstride)
307
45
{
308
45
    if (early || late)
309
45
        template_image_compose_opt(s, d, early, late, mask, rightmask, bytewidth, h, shift, dstride, sstride, JBIG2_COMPOSE_XOR);
310
0
    else
311
0
        template_image_compose_opt(s, d, 0, 0, mask, rightmask, bytewidth, h, shift, dstride, sstride, JBIG2_COMPOSE_XOR);
312
45
}
313
314
static void
315
jbig2_image_compose_opt_XNOR(const uint8_t *s, uint8_t *d, int early, int late, uint8_t mask, uint8_t rightmask, uint32_t bytewidth, uint32_t h, uint32_t shift, uint32_t dstride, uint32_t sstride)
316
0
{
317
0
    if (early || late)
318
0
        template_image_compose_opt(s, d, early, late, mask, rightmask, bytewidth, h, shift, dstride, sstride, JBIG2_COMPOSE_XNOR);
319
0
    else
320
0
        template_image_compose_opt(s, d, 0, 0, mask, rightmask, bytewidth, h, shift, dstride, sstride, JBIG2_COMPOSE_XNOR);
321
0
}
322
323
static void
324
jbig2_image_compose_opt_REPLACE(const uint8_t *s, uint8_t *d, int early, int late, uint8_t mask, uint8_t rightmask, uint32_t bytewidth, uint32_t h, uint32_t shift, uint32_t dstride, uint32_t sstride)
325
0
{
326
0
    if (early || late)
327
0
        template_image_compose_opt(s, d, early, late, mask, rightmask, bytewidth, h, shift, dstride, sstride, JBIG2_COMPOSE_REPLACE);
328
0
    else
329
0
        template_image_compose_opt(s, d, 0, 0, mask, rightmask, bytewidth, h, shift, dstride, sstride, JBIG2_COMPOSE_REPLACE);
330
0
}
331
332
/* composite one jbig2_image onto another */
333
int
334
jbig2_image_compose(Jbig2Ctx *ctx, Jbig2Image *dst, Jbig2Image *src, int x, int y, Jbig2ComposeOp op)
335
71
{
336
71
    uint32_t w, h;
337
71
    uint32_t shift;
338
71
    uint32_t leftbyte;
339
71
    uint8_t *ss;
340
71
    uint8_t *dd;
341
71
    uint8_t leftmask, rightmask;
342
71
    int early = x >= 0;
343
71
    int late;
344
71
    uint32_t bytewidth;
345
71
    uint32_t syoffset = 0;
346
347
71
    if (src == NULL)
348
10
        return 0;
349
350
61
    if ((UINT32_MAX - src->width  < (uint32_t) (x > 0 ? x : -x)) ||
351
61
        (UINT32_MAX - src->height < (uint32_t) (y > 0 ? y : -y)))
352
0
    {
353
#ifdef JBIG2_DEBUG
354
        jbig2_error(ctx, JBIG2_SEVERITY_DEBUG, JBIG2_UNKNOWN_SEGMENT_NUMBER, "overflow in compose_image");
355
#endif
356
0
        return 0;
357
0
    }
358
359
    /* This code takes a src image and combines it onto dst at offset (x,y), with operation op. */
360
361
    /* Data is packed msb first within a byte, so with bits numbered: 01234567.
362
     * Second byte is: 89abcdef. So to combine into a run, we use:
363
     *       (s[0]<<8) | s[1] == 0123456789abcdef.
364
     * To read from src into dst at offset 3, we need to read:
365
     *    read:      0123456789abcdef...
366
     *    write:  0123456798abcdef...
367
     * In general, to read from src and write into dst at offset x, we need to shift
368
     * down by (x&7) bits to allow for bit alignment. So shift = x&7.
369
     * So the 'central' part of our runs will see us doing:
370
     *   *d++ op= ((s[0]<<8)|s[1])>>shift;
371
     * with special cases on the left and right edges of the run to mask.
372
     * With the left hand edge, we have to be careful not to 'underread' the start of
373
     * the src image; this is what the early flag is about. Similarly we have to be
374
     * careful not to read off the right hand edge; this is what the late flag is for.
375
     */
376
377
    /* clip */
378
61
    w = src->width;
379
61
    h = src->height;
380
61
    shift = (x & 7);
381
61
    ss = src->data - early;
382
383
61
    if (x < 0) {
384
0
        if (w < (uint32_t) -x)
385
0
            w = 0;
386
0
        else
387
0
            w += x;
388
0
        ss += (-x-1)>>3;
389
0
        x = 0;
390
0
    }
391
61
    if (y < 0) {
392
0
        if (h < (uint32_t) -y)
393
0
            h = 0;
394
0
        else
395
0
            h += y;
396
0
        syoffset = -y * src->stride;
397
0
        y = 0;
398
0
    }
399
61
    if ((uint32_t)x + w > dst->width)
400
0
    {
401
0
        if (dst->width < (uint32_t)x)
402
0
            w = 0;
403
0
        else
404
0
            w = dst->width - x;
405
0
    }
406
61
    if ((uint32_t)y + h > dst->height)
407
0
    {
408
0
        if (dst->height < (uint32_t)y)
409
0
            h = 0;
410
0
        else
411
0
            h = dst->height - y;
412
0
    }
413
#ifdef JBIG2_DEBUG
414
    jbig2_error(ctx, JBIG2_SEVERITY_DEBUG, JBIG2_UNKNOWN_SEGMENT_NUMBER, "compositing %dx%d at (%d, %d) after clipping", w, h, x, y);
415
#endif
416
417
    /* check for zero clipping region */
418
61
    if ((w <= 0) || (h <= 0)) {
419
#ifdef JBIG2_DEBUG
420
        jbig2_error(ctx, JBIG2_SEVERITY_DEBUG, JBIG2_UNKNOWN_SEGMENT_NUMBER, "zero clipping region");
421
#endif
422
0
        return 0;
423
0
    }
424
425
61
    leftbyte = (uint32_t) x >> 3;
426
61
    dd = dst->data + y * dst->stride + leftbyte;
427
61
    bytewidth = (((uint32_t) x + w - 1) >> 3) - leftbyte + 1;
428
61
    leftmask = 255>>(x&7);
429
61
    rightmask = (((x+w)&7) == 0) ? 255 : ~(255>>((x+w)&7));
430
61
    if (bytewidth == 1)
431
0
        leftmask &= rightmask;
432
61
    late = (ss + bytewidth >= src->data + ((src->width+7)>>3));
433
61
    ss += syoffset;
434
435
61
    switch(op)
436
61
    {
437
16
    case JBIG2_COMPOSE_OR:
438
16
        jbig2_image_compose_opt_OR(ss, dd, early, late, leftmask, rightmask, bytewidth, h, shift, dst->stride, src->stride);
439
16
        break;
440
0
    case JBIG2_COMPOSE_AND:
441
0
        jbig2_image_compose_opt_AND(ss, dd, early, late, leftmask, rightmask, bytewidth, h, shift, dst->stride, src->stride);
442
0
        break;
443
45
    case JBIG2_COMPOSE_XOR:
444
45
        jbig2_image_compose_opt_XOR(ss, dd, early, late, leftmask, rightmask, bytewidth, h, shift, dst->stride, src->stride);
445
45
        break;
446
0
    case JBIG2_COMPOSE_XNOR:
447
0
        jbig2_image_compose_opt_XNOR(ss, dd, early, late, leftmask, rightmask, bytewidth, h, shift, dst->stride, src->stride);
448
0
        break;
449
0
    case JBIG2_COMPOSE_REPLACE:
450
0
        jbig2_image_compose_opt_REPLACE(ss, dd, early, late, leftmask, rightmask, bytewidth, h, shift, dst->stride, src->stride);
451
0
        break;
452
61
    }
453
454
61
    return 0;
455
61
}
456
457
/* initialize an image bitmap to a constant value */
458
void
459
jbig2_image_clear(Jbig2Ctx *ctx, Jbig2Image *image, int value)
460
64
{
461
64
    const uint8_t fill = value ? 0xFF : 0x00;
462
463
64
    memset(image->data, fill, image->stride * image->height);
464
64
}
465
466
/* look up a pixel value in an image.
467
   returns 0 outside the image frame for the convenience of
468
   the template code
469
*/
470
int
471
jbig2_image_get_pixel(Jbig2Image *image, int x, int y)
472
1.81M
{
473
1.81M
    const int w = image->width;
474
1.81M
    const int h = image->height;
475
1.81M
    const int byte = (x >> 3) + y * image->stride;
476
1.81M
    const int bit = 7 - (x & 7);
477
478
1.81M
    if ((x < 0) || (x >= w))
479
110k
        return 0;
480
1.70M
    if ((y < 0) || (y >= h))
481
10.0k
        return 0;
482
483
1.69M
    return ((image->data[byte] >> bit) & 1);
484
1.70M
}
485
486
/* set an individual pixel value in an image */
487
void
488
jbig2_image_set_pixel(Jbig2Image *image, int x, int y, bool value)
489
0
{
490
0
    const int w = image->width;
491
0
    const int h = image->height;
492
0
    int scratch, mask;
493
0
    int bit, byte;
494
495
0
    if ((x < 0) || (x >= w))
496
0
        return;
497
0
    if ((y < 0) || (y >= h))
498
0
        return;
499
500
0
    byte = (x >> 3) + y * image->stride;
501
0
    bit = 7 - (x & 7);
502
0
    mask = (1 << bit) ^ 0xff;
503
504
0
    scratch = image->data[byte] & mask;
505
0
    image->data[byte] = scratch | (value << bit);
506
0
}