Coverage Report

Created: 2022-10-31 07:00

/src/ghostpdl/jbig2dec/jbig2_generic.c
Line
Count
Source (jump to first uncovered line)
1
/* Copyright (C) 2001-2021 Artifex Software, Inc.
2
   All Rights Reserved.
3
4
   This software is provided AS-IS with no warranty, either express or
5
   implied.
6
7
   This software is distributed under license and may not be copied,
8
   modified or distributed except as expressly authorized under the terms
9
   of the license contained in the file LICENSE in this distribution.
10
11
   Refer to licensing information at http://www.artifex.com or contact
12
   Artifex Software, Inc.,  1305 Grant Avenue - Suite 200, Novato,
13
   CA 94945, U.S.A., +1(415)492-9861, for further information.
14
*/
15
16
/*
17
    jbig2dec
18
*/
19
20
/**
21
 * Generic region handlers.
22
 **/
23
24
#ifdef HAVE_CONFIG_H
25
#include "config.h"
26
#endif
27
#include "os_types.h"
28
29
#include <stddef.h>
30
#include <string.h>             /* memcpy(), memset() */
31
32
#ifdef OUTPUT_PBM
33
#include <stdio.h>
34
#endif
35
36
#include "jbig2.h"
37
#include "jbig2_priv.h"
38
#include "jbig2_arith.h"
39
#include "jbig2_generic.h"
40
#include "jbig2_image.h"
41
#include "jbig2_mmr.h"
42
#include "jbig2_page.h"
43
#include "jbig2_segment.h"
44
45
/*
46
This is an explanation of the unoptimized and optimized generic
47
region decoder implementations below, wherein we try to explain
48
all the magic numbers.
49
50
The generic region decoders decode the output pixels one row at a
51
time, top to bottom. Within each row the pixels are decoded left
52
to right. The input for the arithmetic integer decoder used to
53
decode each pixel is a context consisting of up to 16 previously
54
decoded pixels. These pixels are chosen according to a predefined
55
template placed relative to the location of the pixel to be
56
decoded (6.2.5.3 figures 3, 4, 5 and 6). There are four different
57
template that may be used (6.2.5.3). The template to use is
58
determined by GBTEMPLATE. GBTEMPLATE is set in the symbol
59
dictionary (6.5.8.1), generic region (7.4.6.4), or when decoding
60
a halftone region's gray-scale image (annex C.5).
61
62
Most of the pixels in each template have fixed locations relative
63
to the pixel to be decoded. However, all templates have at least
64
one adaptive pixel. The adaptive pixels have nominal locations,
65
but these locations may be changed by GBAT. GBAT is set in the
66
symbol dictionary (7.4.2.1.2), generic region (7.4.6.1), or hard
67
coded as for halftone patterns (6.7.5).
68
69
Adaptive pixels are restricted to fall within a field of
70
previously decoded pixels relative to the pixel to be decoded
71
(figure 7). The relative Y-coordinate for these adaptive pixels
72
may vary between -128 and 0. The relative X-coordinate may vary
73
between -128 and +127 (however, if the Y-coordinate is 0 the
74
range of the X-coordinate is further restricted to -128 to -1
75
since the pixels at locations 0 to +127 have not yet been
76
decoded). If a template refers to a pixel location that reside
77
outside of the image boundaries its value is assumed to be 0.
78
79
UNOPTIMIZED DECODER
80
81
The unoptimized decoders first check the contents of GBAT. If
82
GBAT specifies that any of the adaptive pixels reside outside the
83
allowed field the decoding is aborted. Next, each row is
84
processed top to bottom, left to right, one pixel at a time. For
85
each pixel a context is created containing the bit values of the
86
pixels that fall inside the template.
87
88
The order these bits are stored in the context is implementation
89
dependent (6.2.5.3). We store the bit values in the CONTEXT
90
variable from LSB to MSB, starting with the value of the pixel to
91
the left of the current pixel, continuing right to left, bottom
92
to top following the template. Using the CONTEXT created from
93
these pixel values, the arithmetic integer decoder retrieves the
94
pixel value, which is then written into the output image.
95
96
Example when GBTEMPLATE is 2:
97
98
The figure below represents a pixel grid of the output image.
99
Each pixel is a single bit in the image. The pixel "OO" in the
100
figure below is about to be decoded. The pixels "??" have not
101
been decoded yet. The CONTEXT variable is constructed by
102
combining the bit values from the pixels referred to by the
103
template, shifted to their corresponding bit position.
104
105
     .    .    .    .    .    .    .    .
106
     .    .    .    .    .    .    .    .
107
  ...+----+----+----+----+----+----+----+...
108
     |    |    | X9 | X8 | X7 |    |    |
109
  ...+----+----+----+----+----+----+----+...
110
     |    | X6 | X5 | X4 | X3 | A1 |    |
111
  ...+----+----+----+----+----+----+----+...
112
     |    | X2 | X1 | OO | ?? | ?? | ?? |
113
  ...+----+----+----+----+----+----+----+...
114
     .    .    .    .    .    .    .    .
115
     .    .    .    .    .    .    .    .
116
117
In the table below pixel OO is assumed to be at coordinate (x, y).
118
119
Bit 9: Pixel at location (x-1, y-2) (This is fixed pixel X9)
120
Bit 8: Pixel at location (x  , y-2) (This is fixed pixel X8)
121
Bit 7: Pixel at location (x+1, y-2) (This is fixed pixel X7)
122
Bit 6: Pixel at location (x-2, y-1) (This is fixed pixel X6)
123
Bit 5: Pixel at location (x-1, y-1) (This is fixed pixel X5)
124
Bit 4: Pixel at location (x  , y-1) (This is fixed pixel X4)
125
Bit 3: Pixel at location (x+1, y-1) (This is fixed pixel X3)
126
Bit 2: Pixel at location (x+2, y-1) (This is adaptive pixel A1)
127
Bit 1: Pixel at location (x-2, y  ) (This is fixed pixel X2)
128
Bit 0: Pixel at location (x-1, y  ) (This is fixed pixel X1)
129
130
The location of adaptive pixel A1 may not always be at the
131
nominal location (x+2, y-1). It could be at any pixel location to
132
the left or above OO as specified by GBAT, e.g. at the location
133
(x-128, y+127).
134
135
OPTIMIZED DECODER
136
137
The optimized decoders work differently. They strive to avoid
138
recreating the arithmetic integer decoder context from scratch
139
for every pixel decoded. Instead they reuse part of the CONTEXT
140
used to compute the previous pixel (the pixel to left of the one
141
now being decoded). They also keep two sliding windows of pixel
142
bit values from the two rows of pixels immediately above the
143
pixel to be decoded. These are stored in the 32-bit variables
144
line_m1 (row above the pixel to be decoded) and line_m2 (row
145
above that of line_m1). These optimized decoders ONLY work for
146
the nominal adaptive pixel locations since these locations are
147
hard-coded into the implementation.
148
149
The bit ordering in the CONTEXT variable is identical to the
150
unoptimized case described above.
151
152
The optimized decoders decode the output pixels one row at a
153
time, top to bottom. Within each row the pixels are decoded in
154
batches of up to eight pixels at a time (except possibly the
155
right most batch which may be less than eight pixels). The
156
batches in a row are decoded in sequence from left to right.
157
Within each such batch the pixels are decoded in sequence from
158
left to right.
159
160
Before decoding the pixels in a row the two sliding windows of
161
pixel values are reset. The first eight pixels of the row above
162
the pixel to be decoded is stored in line_m1, while line_m2
163
stores the first eight pixels of the row above that of line_m1.
164
165
The figure below illustrates the situation where the template has
166
been placed so that the decoded pixel OO is the very first pixel
167
of a row. It also gives labels to various pixels that we will
168
refer to below.
169
170
             .    .    .    .    .    .    .    .    .    .    .
171
             |    .    .    .    .    .    .    .    .    .    .
172
   +    +    +----+----+----+----+----+----+----+----+----+----+...
173
          X9 | X8 | X7 | m1 | m2 | m3 | m4 | m5 | m6 | m7 |    |
174
   +    +    +----+----+----+----+----+----+----+----+----+----+...
175
     X6   X5 | X4 | X3 | A1 | n1 | n2 | n3 | n4 | n5 | n6 | n7 |
176
   +    +    +----+----+----+----+----+----+----+----+----+----+...
177
     X2   X1 | OO |    |    |    |    |    |    |    |    |    |
178
   +    +    +----+----+----+----+----+----+----+----+----+----+...
179
             |    .    .    .    .    .    .    .    .    .    .
180
             .    .    .    .    .    .    .    .    .    .    .
181
182
The pixels X1, X2, X5, X6 and X9 all reside outside the left edge
183
of the image. These pixels (like all others outside the image)
184
can according to 6.2.5.2 be assumed to be 0. line_m1 stores n5
185
through n1 as well as A1, and X3 through X6. line_m2 stores m6
186
through m1 as well as X7 through X9. The bits in line_m2 are also
187
shifted left four bits as seen below.
188
189
15 14 13 12 11 10  9  8  7  6  5  4  3  2  1  0 | bit position
190
------------------------------------------------+------------------
191
 0  0  0  0  0  0 X6 X5 X4 X3 A1 n1 n2 n3 n4 n5 | line_m1
192
 0  0  0 X9 X8 X7 m1 m2 m3 m4 m5 m6  0  0  0  0 | line_m2
193
194
The way line_m1 and line_m2 are stored means we can simply shift
195
them by the same amount to move the sliding window.
196
197
The bit order in line_m1 and line_m2 matches the ordering in the
198
CONTEXT variable. Each bit for the 'A' and 'X' pixels in line_m1
199
and line_m2 correspond to the equivalent bits in CONTEXT, only
200
shifted right by 3 bits. Thus X3 is bit 3 in CONTEXT and bit 6 in
201
line_m1, etc.
202
203
The initial arithmetic integer decoder context is created and
204
stored in the CONTEXT variable by masking, shifting, and bitwise
205
ORing the contents of line_m1 and line_m2. The "CONTEXT contents"
206
row is only shown for clarity, it is not present in the code.
207
208
15 14 13 12 11 10  9  8  7  6  5  4  3  2  1  0 | bit position
209
------------------------------------------------+---------------------------
210
 0  0  0  0  0  0  0  0  0 X6 X5 X4 X3 A1 n1 n2 | line_m1 >> 3
211
 0  0  0  0  0  0  0  0  0  1  1  1  1  1  0  0 | mask for line_m1 (0x7c)
212
 0  0  0  0  0  0  0  0  0 X6 X5 X4 X3 A1  0  0 | line_m1 AND mask
213
------------------------------------------------+---------------------------
214
 0  0  0  0  0  0 X9 X8 X7 m1 m2 m3 m4 m5 m6  0 | line_m2 >> 3
215
 0  0  0  0  0  0  1  1  1  0  0  0  0  0  0  0 | mask for line_m2 (0x380)
216
 0  0  0  0  0  0 X9 X8 X7  0  0  0  0  0  0  0 | line_m2 AND mask
217
------------------------------------------------+---------------------------
218
 0  0  0  0  0  0 X9 X8 X7 X6 X5 X4 X3 A1  0  0 | CONTEXT = line_m1 OR line_m2
219
------------------------------------------------+---------------------------
220
 0  0  0  0  0  0 X9 X8 X7 X6 X5 X4 X3 A1 X2 X1 | CONTEXT contents
221
222
Each batch is normally 8 bits, but at the right edge of the image
223
we may have fewer pixels to decode. The minor_width is how many
224
pixels the current batch should decode, with a counter variable
225
x_minor to keep track of the current pixel being decoded.
226
227
In order to process a new batch of pixels, unless we're at the
228
rightmost batch of pixels, we need to refill the sliding window
229
variables with eight new bits. Looking at the diagram above we
230
can see that in order to decode eight pixels starting with O0
231
we'll need to have bits up to pixel 'n7' for line_m1 and 'm7' for
232
line_m2 available (A1 and X7 moved right 7 times). To do this
233
simply and quickly, we shift line_m1 left by 8 bits, and OR in
234
the next byte from corresponding row. Likewise for line_m2, but
235
the next byte from the image is also shifted left by 4 bits to
236
compensate for line_m2 having the four least significant bits
237
unused.
238
239
These new eight bits contain the bit values of the eight pixels
240
to the right of those already present in line_m1 and line_m2. We
241
call these new bits m7 through mE, and n6 through nD, as
242
illustrated below.
243
244
23 22 21 20 19 18 17 16 15 14 13 12 11 10  9  8  7  6  5  4  3  2  1  0 | bit position
245
------------------------------------------------------------------------+-------------
246
 0  0  0  0  0  0  0  0  0  0  0  0  0  0 X6 X5 X4 X3 A1 n1 n2 n3 n4 n5 | original line_m1
247
 0  0  0  0  0  0 X6 X5 X4 X3 A1 n1 n2 n3 n4 n5  0  0  0  0  0  0  0  0 | line_m1 shifted left by 8
248
 0  0  0  0  0  0 X6 X5 X4 X3 A1 n1 n2 n3 n4 n5 n6 n7 n8 n9 nA nB nC nD | line_m1 with new bits ORed in
249
------------------------------------------------------------------------+-------------
250
 0  0  0  0  0  0  0  0  0  0  0 X9 X8 X7 m1 m2 m3 m4 m5 m6  0  0  0  0 | original line_m2
251
 0  0  0 X9 X8 X7 m1 m2 m3 m4 m5 m6  0  0  0  0  0  0  0  0  0  0  0  0 | line_m2 shifted left by 8
252
 0  0  0 X9 X8 X7 m1 m2 m3 m4 m5 m6 m7 m8 m9 mA mB mC mD mE  0  0  0  0 | line_m2 with new bits ORed in
253
254
             .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
255
             |    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
256
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
257
          X9 | X8 | X7 | m1 | m2 | m3 | m4 | m5 | m6 | m7 | m8 | m9 | mA | mB | mC | mD | mE |    |    |    |
258
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
259
     X6   X5 | X4 | X3 | A1 | n1 | n2 | n3 | n4 | n5 | n6 | n7 | n8 | n9 | nA | nB | nC | nD |    |    |    |
260
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
261
     X2   X1 | OO |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |
262
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
263
             |    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
264
             .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
265
266
CONTEXT, line_m1 and line_m2 now contain all necessary bits to
267
decode a full batch of eight pixels.
268
269
The first pixel in the batch is decoded using this CONTEXT. After
270
that, for each following pixel we need to update the CONTEXT
271
using both the last decoded pixel value and new bits from line_m1
272
and line_m2.
273
274
             .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
275
             |    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
276
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
277
         (X9)|_X8_|_X7_|>m1<| m2 | m3 | m4 | m5 | m6 | m7 | m8 | m9 | mA | mB | mC | mD | mE |    |    |    |
278
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
279
    (X6) _X5_|_X4_|_X3_|_A1_|>n1<| n2 | n3 | n4 | n5 | n6 | n7 | n8 | n9 | nA | nB | nC | nD |    |    |    |
280
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
281
    (X2) _X1_|>OO<| oo |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |
282
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
283
             |    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
284
             .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
285
286
This figure illustrates what happens when the same template is
287
overlaid on itself shifted one pixel to the right in order to
288
decode the next pixel. Pixels marked with _  _ are pixels that
289
are present in both templates' CONTEXTs and can be reused. Pixels
290
marked with (  ) are pixels from the first template that are no
291
longer necessary and can be removed from CONTEXT. Pixels marked
292
with >  < are new pixels that were not part of the original
293
CONTEXT, and so need to be moved into the CONTEXT at the
294
appropriate locations. In general the leftmost pixels of each
295
template row can be forgotten, while new pixels are needed at the
296
right most location of each row.
297
298
The CONTEXT corresponding to the current pixel OO and how it is
299
masked is shown below. Note how the left most pixel of each row
300
of the template is NOT propagated to the CONTEXT, these pixels
301
are X2, X6 and X9. This is done by having the mask being 0 at the
302
corresponding locations.
303
304
 9  8  7  6  5  4  3  2  1  0 | bit position
305
------------------------------+-------------
306
X9 X8 X7 X6 X5 X4 X3 A1 X2 X1 | pixel values from CONTEXT
307
 0  1  1  0  1  1  1  1  0  1 | reused pixel bit value mask (0x1bd)
308
 0 X8 X7  0 X5 X4 X3 A1  0 X1 | reused pixel values from CONTEXT
309
310
Next the CONTEXT is shifted left by one bit to make it reference
311
the next pixel to be decoded. The pixel bit value we just decoded
312
is then written into the bit corresponding to X1. The sliding
313
windows in line_m1 and line_m2 are both shifted (10 - x_minor)
314
bits to the right to make the needed pixels' bit values appear at
315
the correct positions to be ORed into CONTEXT. Note that this
316
shift amount depends on which bit in the batch is currently being
317
computed, as is given by the x_minor counter. In the example
318
below we assume that x_minor is 0.
319
320
 9  8  7  6  5  4  3  2  1  0 | bit position
321
------------------------------+--------------
322
 0 X8 X7  0 X5 X4 X3 A1  0  0 | reused pixels from CONTEXT
323
X8 X7  0 X5 X4 X3 A1  0  0  0 | reused pixels shifted left 1 bit
324
------------------------------+--------------
325
X8 X7  0 X5 X4 X3 A1  0 X1 OO | new CONTEXT with current pixel at LSB
326
------------------------------+--------------
327
 0  0 X6 X5 X4 X3 A1 n1 n2 n3 | line_m1 shifted (10 - x_minor) bits to the right
328
 0  0  0  0  0  0  0  1  0  0 | mask for new adaptive pixel one row above (0x4)
329
X8 X7  0 X5 X4 X3 A1 n1 X1 OO | new CONTEXT with new adaptive pixel
330
------------------------------+--------------
331
X8 X7 m1 m2 m3 m4 m5 m6 m7 m8 | line_m2 with new bits ORed in
332
 0  0  1  0  0  0  0  0  0  0 | mask for new pixel two rows above (0x80)
333
X8 X7 m1 X5 X4 X3 A1 n1 X1 OO | new CONTEXT with new pixel
334
335
This makes the computation of the new CONTEXT be:
336
337
NEWCONTEXT = (CONTEXT & 0x1bd) << 1
338
NEWCONTEXT |= newbit;
339
NEWCONTEXT |= (line_m1 >> (10-x_minor)) & 0x4;
340
NEWCONTEXT |= (line_m2 >> (10-x_minor)) & 0x80;
341
342
The optimized decoding functions for GBTEMPLATE 0, 1 and 3 all
343
work similarly. */
344
345
/* Get a bit. No bounds checking. */
346
static inline int
347
jbig2_image_get_pixel_fast(Jbig2Image *image, int x, int y)
348
0
{
349
0
    const int byte = (x >> 3) + y * image->stride;
350
0
    const int bit = 7 - (x & 7);
351
352
0
    return ((image->data[byte] >> bit) & 1);
353
0
}
354
355
/* return the appropriate context size for the given template */
356
int
357
jbig2_generic_stats_size(Jbig2Ctx *ctx, int template)
358
45
{
359
45
    int stats_size = template == 0 ? 1 << 16 : template == 1 ? 1 << 13 : 1 << 10;
360
361
45
    return stats_size;
362
45
}
363
364
static int
365
jbig2_decode_generic_template0(Jbig2Ctx *ctx,
366
                               Jbig2Segment *segment,
367
                               const Jbig2GenericRegionParams *params, Jbig2ArithState *as,
368
                               Jbig2Image *image, Jbig2ArithCx *GB_stats)
369
45
{
370
45
    const uint32_t GBW = image->width;
371
45
    const uint32_t GBH = image->height;
372
45
    const uint32_t rowstride = image->stride;
373
45
    uint32_t x, y;
374
45
    byte *line2 = NULL;
375
45
    byte *line1 = NULL;
376
45
    byte *gbreg_line = (byte *) image->data;
377
378
#ifdef OUTPUT_PBM
379
    printf("P4\n%d %d\n", GBW, GBH);
380
#endif
381
382
45
    if (GBW <= 0)
383
0
        return 0;
384
385
157k
    for (y = 0; y < GBH; y++) {
386
157k
        uint32_t CONTEXT;
387
157k
        uint32_t line_m1;
388
157k
        uint32_t line_m2;
389
157k
        uint32_t padded_width = (GBW + 7) & -8;
390
391
157k
        line_m1 = line1 ? line1[0] : 0;
392
157k
        line_m2 = line2 ? line2[0] << 6 : 0;
393
157k
        CONTEXT = (line_m1 & 0x7f0) | (line_m2 & 0xf800);
394
395
        /* 6.2.5.7 3d */
396
49.0M
        for (x = 0; x < padded_width; x += 8) {
397
48.9M
            byte result = 0;
398
48.9M
            int x_minor;
399
48.9M
            int minor_width = GBW - x > 8 ? 8 : GBW - x;
400
401
48.9M
            if (line1)
402
48.8M
                line_m1 = (line_m1 << 8) | (x + 8 < GBW ? line1[(x >> 3) + 1] : 0);
403
404
48.9M
            if (line2)
405
48.8M
                line_m2 = (line_m2 << 8) | (x + 8 < GBW ? line2[(x >> 3) + 1] << 6 : 0);
406
407
            /* This is the speed-critical inner loop. */
408
440M
            for (x_minor = 0; x_minor < minor_width; x_minor++) {
409
391M
                int bit;
410
411
391M
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
412
391M
                if (bit < 0)
413
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template0 optimized");
414
391M
                result |= bit << (7 - x_minor);
415
391M
                CONTEXT = ((CONTEXT & 0x7bf7) << 1) | bit | ((line_m1 >> (7 - x_minor)) & 0x10) | ((line_m2 >> (7 - x_minor)) & 0x800);
416
391M
            }
417
48.9M
            gbreg_line[x >> 3] = result;
418
48.9M
        }
419
#ifdef OUTPUT_PBM
420
        fwrite(gbreg_line, 1, rowstride, stdout);
421
#endif
422
157k
        line2 = line1;
423
157k
        line1 = gbreg_line;
424
157k
        gbreg_line += rowstride;
425
157k
    }
426
427
45
    return 0;
428
45
}
429
430
#define pixel_outside_field(x, y) \
431
0
    ((y) < -128 || (y) > 0 || (x) < -128 || ((y) < 0 && (x) > 127) || ((y) == 0 && (x) >= 0))
432
433
static int
434
jbig2_decode_generic_template0_unopt(Jbig2Ctx *ctx,
435
                                     Jbig2Segment *segment,
436
                                     const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
437
0
{
438
0
    const uint32_t GBW = image->width;
439
0
    const uint32_t GBH = image->height;
440
0
    uint32_t CONTEXT;
441
0
    uint32_t x, y;
442
0
    int bit;
443
444
0
    if (pixel_outside_field(params->gbat[0], params->gbat[1]) ||
445
0
        pixel_outside_field(params->gbat[2], params->gbat[3]) ||
446
0
        pixel_outside_field(params->gbat[4], params->gbat[5]) ||
447
0
        pixel_outside_field(params->gbat[6], params->gbat[7]))
448
0
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
449
0
                           "adaptive template pixel is out of field");
450
451
0
    for (y = 0; y < GBH; y++) {
452
0
        uint32_t out_byte = 0;
453
0
        int out_bits_to_go_in_byte = 8;
454
0
        uint8_t *d = &image->data[image->stride * y];
455
0
        uint8_t *pline  = &image->data[image->stride * (y-1)];
456
0
        uint8_t *ppline = &image->data[image->stride * (y-2)];
457
0
        uint32_t pd = 0;
458
0
        uint32_t ppd = 0;
459
0
        if (y > 0) {
460
0
            pd = (*pline++ << 8);
461
0
            if (GBW > 8)
462
0
                pd |= *pline++;
463
0
            if (y > 1) {
464
0
                ppd = (*ppline++ << 8);
465
0
                if (GBW > 8)
466
0
                    ppd |= *ppline++;
467
0
            }
468
0
        }
469
0
        for (x = 0; x < GBW; x++) {
470
0
            if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
471
0
                bit = 0;
472
0
            } else {
473
0
                CONTEXT  = out_byte & 0x000F; /* First 4 pixels */
474
0
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 4;
475
0
                CONTEXT |= (pd>>8) & 0x03E0; /* Next 5 pixels */
476
0
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[2], y + params->gbat[3]) << 10;
477
0
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[4], y + params->gbat[5]) << 11;
478
0
                CONTEXT |= (ppd>>2) & 0x7000; /* Next 3 pixels */
479
0
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[6], y + params->gbat[7]) << 15;
480
0
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
481
0
                if (bit < 0)
482
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template0 unoptimized");
483
0
            }
484
0
            pd = pd<<1;
485
0
            ppd = ppd<<1;
486
0
            out_byte = (out_byte<<1) | bit;
487
0
            out_bits_to_go_in_byte--;
488
0
            *d = out_byte<<out_bits_to_go_in_byte;
489
0
            if (out_bits_to_go_in_byte == 0) {
490
0
                out_bits_to_go_in_byte = 8;
491
0
                d++;
492
0
                if (x+9 < GBW && y > 0) {
493
0
                    pd |= *pline++;
494
0
                    if (y > 1)
495
0
                        ppd |= *ppline++;
496
0
                }
497
0
            }
498
0
        }
499
0
        if (out_bits_to_go_in_byte != 8)
500
0
            *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
501
0
    }
502
0
    return 0;
503
0
}
504
505
static int
506
jbig2_decode_generic_template1_unopt(Jbig2Ctx *ctx,
507
                                     Jbig2Segment *segment,
508
                                     const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
509
0
{
510
0
    const uint32_t GBW = image->width;
511
0
    const uint32_t GBH = image->height;
512
0
    uint32_t CONTEXT;
513
0
    uint32_t x, y;
514
0
    int bit;
515
516
0
    if (pixel_outside_field(params->gbat[0], params->gbat[1]))
517
0
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
518
0
                           "adaptive template pixel is out of field");
519
520
0
    for (y = 0; y < GBH; y++) {
521
0
        uint32_t out_byte = 0;
522
0
        int out_bits_to_go_in_byte = 8;
523
0
        uint8_t *d = &image->data[image->stride * y];
524
0
        uint8_t *pline  = &image->data[image->stride * (y-1)];
525
0
        uint8_t *ppline = &image->data[image->stride * (y-2)];
526
0
        uint32_t pd = 0;
527
0
        uint32_t ppd = 0;
528
0
        if (y > 0) {
529
0
            pd = (*pline++ << 8);
530
0
            if (GBW > 8)
531
0
                pd |= *pline++;
532
0
            if (y > 1) {
533
0
                ppd = (*ppline++ << 8);
534
0
                if (GBW > 8)
535
0
                    ppd |= *ppline++;
536
0
            }
537
0
        }
538
0
        for (x = 0; x < GBW; x++) {
539
0
            if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
540
0
                bit = 0;
541
0
            } else {
542
0
                CONTEXT  = out_byte & 0x0007; /* First 3 pixels */
543
0
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 3;
544
0
                CONTEXT |= (pd>>9) & 0x01F0; /* Next 5 pixels */
545
0
                CONTEXT |= (ppd>>4) & 0x1E00; /* Next 4 pixels */
546
0
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
547
0
                if (bit < 0)
548
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template1 unoptimized");
549
0
            }
550
0
            pd = pd<<1;
551
0
            ppd = ppd<<1;
552
0
            out_byte = (out_byte<<1) | bit;
553
0
            out_bits_to_go_in_byte--;
554
0
            *d = out_byte<<out_bits_to_go_in_byte;
555
0
            if (out_bits_to_go_in_byte == 0) {
556
0
                out_bits_to_go_in_byte = 8;
557
0
                d++;
558
0
                if (x+9 < GBW && y > 0) {
559
0
                    pd |= *pline++;
560
0
                    if (y > 1)
561
0
                        ppd |= *ppline++;
562
0
                }
563
0
            }
564
0
        }
565
0
        if (out_bits_to_go_in_byte != 8)
566
0
            *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
567
0
    }
568
0
    return 0;
569
0
}
570
571
static int
572
jbig2_decode_generic_template1(Jbig2Ctx *ctx,
573
                               Jbig2Segment *segment,
574
                               const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
575
0
{
576
0
    const uint32_t GBW = image->width;
577
0
    const uint32_t GBH = image->height;
578
0
    const uint32_t rowstride = image->stride;
579
0
    uint32_t x, y;
580
0
    byte *line2 = NULL;
581
0
    byte *line1 = NULL;
582
0
    byte *gbreg_line = (byte *) image->data;
583
584
#ifdef OUTPUT_PBM
585
    printf("P4\n%d %d\n", GBW, GBH);
586
#endif
587
588
0
    if (GBW <= 0)
589
0
        return 0;
590
591
0
    for (y = 0; y < GBH; y++) {
592
0
        uint32_t CONTEXT;
593
0
        uint32_t line_m1;
594
0
        uint32_t line_m2;
595
0
        uint32_t padded_width = (GBW + 7) & -8;
596
597
0
        line_m1 = line1 ? line1[0] : 0;
598
0
        line_m2 = line2 ? line2[0] << 5 : 0;
599
0
        CONTEXT = ((line_m1 >> 1) & 0x1f8) | ((line_m2 >> 1) & 0x1e00);
600
601
        /* 6.2.5.7 3d */
602
0
        for (x = 0; x < padded_width; x += 8) {
603
0
            byte result = 0;
604
0
            int x_minor;
605
0
            int minor_width = GBW - x > 8 ? 8 : GBW - x;
606
607
0
            if (line1)
608
0
                line_m1 = (line_m1 << 8) | (x + 8 < GBW ? line1[(x >> 3) + 1] : 0);
609
610
0
            if (line2)
611
0
                line_m2 = (line_m2 << 8) | (x + 8 < GBW ? line2[(x >> 3) + 1] << 5 : 0);
612
613
            /* This is the speed-critical inner loop. */
614
0
            for (x_minor = 0; x_minor < minor_width; x_minor++) {
615
0
                int bit;
616
617
0
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
618
0
                if (bit < 0)
619
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template1 optimized");
620
0
                result |= bit << (7 - x_minor);
621
0
                CONTEXT = ((CONTEXT & 0xefb) << 1) | bit | ((line_m1 >> (8 - x_minor)) & 0x8) | ((line_m2 >> (8 - x_minor)) & 0x200);
622
0
            }
623
0
            gbreg_line[x >> 3] = result;
624
0
        }
625
#ifdef OUTPUT_PBM
626
        fwrite(gbreg_line, 1, rowstride, stdout);
627
#endif
628
0
        line2 = line1;
629
0
        line1 = gbreg_line;
630
0
        gbreg_line += rowstride;
631
0
    }
632
633
0
    return 0;
634
0
}
635
636
static int
637
jbig2_decode_generic_template2_unopt(Jbig2Ctx *ctx,
638
                               Jbig2Segment *segment,
639
                               const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
640
0
{
641
0
    const uint32_t GBW = image->width;
642
0
    const uint32_t GBH = image->height;
643
0
    uint32_t CONTEXT;
644
0
    uint32_t x, y;
645
0
    int bit;
646
647
0
    if (pixel_outside_field(params->gbat[0], params->gbat[1]))
648
0
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
649
0
                           "adaptive template pixel is out of field");
650
651
0
    for (y = 0; y < GBH; y++) {
652
0
        uint32_t out_byte = 0;
653
0
        int out_bits_to_go_in_byte = 8;
654
0
        uint8_t *d = &image->data[image->stride * y];
655
0
        uint8_t *pline  = &image->data[image->stride * (y-1)];
656
0
        uint8_t *ppline = &image->data[image->stride * (y-2)];
657
0
        uint32_t pd = 0;
658
0
        uint32_t ppd = 0;
659
0
        if (y > 0) {
660
0
            pd = (*pline++ << 8);
661
0
            if (GBW > 8)
662
0
                pd |= *pline++;
663
0
            if (y > 1) {
664
0
                ppd = (*ppline++ << 8);
665
0
                if (GBW > 8)
666
0
                    ppd |= *ppline++;
667
0
            }
668
0
        }
669
0
        for (x = 0; x < GBW; x++) {
670
0
            if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
671
0
                bit = 0;
672
0
            } else {
673
0
                CONTEXT  = out_byte & 0x003; /* First 2 pixels */
674
0
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 2;
675
0
                CONTEXT |= (pd>>11) & 0x078; /* Next 4 pixels */
676
0
                CONTEXT |= (ppd>>7) & 0x380; /* Next 3 pixels */
677
0
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
678
0
                if (bit < 0)
679
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template2 unoptimized");
680
0
            }
681
0
            pd = pd<<1;
682
0
            ppd = ppd<<1;
683
0
            out_byte = (out_byte<<1) | bit;
684
0
            out_bits_to_go_in_byte--;
685
0
            *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
686
0
            if (out_bits_to_go_in_byte == 0) {
687
0
                out_bits_to_go_in_byte = 8;
688
0
                d++;
689
0
                if (x+9 < GBW && y > 0) {
690
0
                    pd |= *pline++;
691
0
                    if (y > 1)
692
0
                        ppd |= *ppline++;
693
0
                }
694
0
            }
695
0
        }
696
0
        if (out_bits_to_go_in_byte != 8)
697
0
            *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
698
0
    }
699
700
0
    return 0;
701
0
}
702
703
static int
704
jbig2_decode_generic_template2(Jbig2Ctx *ctx,
705
                                Jbig2Segment *segment,
706
                                const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
707
80
{
708
80
    const uint32_t GBW = image->width;
709
80
    const uint32_t GBH = image->height;
710
80
    const uint32_t rowstride = image->stride;
711
80
    uint32_t x, y;
712
80
    byte *line2 = NULL;
713
80
    byte *line1 = NULL;
714
80
    byte *gbreg_line = (byte *) image->data;
715
716
#ifdef OUTPUT_PBM
717
    printf("P4\n%d %d\n", GBW, GBH);
718
#endif
719
720
80
    if (GBW <= 0)
721
0
        return 0;
722
723
1.20k
    for (y = 0; y < GBH; y++) {
724
1.12k
        uint32_t CONTEXT;
725
1.12k
        uint32_t line_m1;
726
1.12k
        uint32_t line_m2;
727
1.12k
        uint32_t padded_width = (GBW + 7) & -8;
728
729
1.12k
        line_m1 = line1 ? line1[0] : 0;
730
1.12k
        line_m2 = line2 ? line2[0] << 4 : 0;
731
1.12k
        CONTEXT = ((line_m1 >> 3) & 0x7c) | ((line_m2 >> 3) & 0x380);
732
733
        /* 6.2.5.7 3d */
734
3.82k
        for (x = 0; x < padded_width; x += 8) {
735
2.69k
            byte result = 0;
736
2.69k
            int x_minor;
737
2.69k
            int minor_width = GBW - x > 8 ? 8 : GBW - x;
738
739
2.69k
            if (line1)
740
2.50k
                line_m1 = (line_m1 << 8) | (x + 8 < GBW ? line1[(x >> 3) + 1] : 0);
741
742
2.69k
            if (line2)
743
2.31k
                line_m2 = (line_m2 << 8) | (x + 8 < GBW ? line2[(x >> 3) + 1] << 4 : 0);
744
745
            /* This is the speed-critical inner loop. */
746
19.0k
            for (x_minor = 0; x_minor < minor_width; x_minor++) {
747
16.3k
                int bit;
748
749
16.3k
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
750
16.3k
                if (bit < 0)
751
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template2 optimized");
752
16.3k
                result |= bit << (7 - x_minor);
753
16.3k
                CONTEXT = ((CONTEXT & 0x1bd) << 1) | bit | ((line_m1 >> (10 - x_minor)) & 0x4) | ((line_m2 >> (10 - x_minor)) & 0x80);
754
16.3k
            }
755
2.69k
            gbreg_line[x >> 3] = result;
756
2.69k
        }
757
#ifdef OUTPUT_PBM
758
        fwrite(gbreg_line, 1, rowstride, stdout);
759
#endif
760
1.12k
        line2 = line1;
761
1.12k
        line1 = gbreg_line;
762
1.12k
        gbreg_line += rowstride;
763
1.12k
    }
764
765
80
    return 0;
766
80
}
767
768
static int
769
jbig2_decode_generic_template3(Jbig2Ctx *ctx,
770
                               Jbig2Segment *segment,
771
                               const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
772
0
{
773
0
    const uint32_t GBW = image->width;
774
0
    const uint32_t GBH = image->height;
775
0
    const uint32_t rowstride = image->stride;
776
0
    byte *line1 = NULL;
777
0
    byte *gbreg_line = (byte *) image->data;
778
0
    uint32_t x, y;
779
780
#ifdef OUTPUT_PBM
781
    printf("P4\n%d %d\n", GBW, GBH);
782
#endif
783
784
0
    if (GBW <= 0)
785
0
        return 0;
786
787
0
    for (y = 0; y < GBH; y++) {
788
0
        uint32_t CONTEXT;
789
0
        uint32_t line_m1;
790
0
        uint32_t padded_width = (GBW + 7) & -8;
791
792
0
        line_m1 = line1 ? line1[0] : 0;
793
0
        CONTEXT = (line_m1 >> 1) & 0x3f0;
794
795
        /* 6.2.5.7 3d */
796
0
        for (x = 0; x < padded_width; x += 8) {
797
0
            byte result = 0;
798
0
            int x_minor;
799
0
            int minor_width = GBW - x > 8 ? 8 : GBW - x;
800
801
0
            if (line1)
802
0
                line_m1 = (line_m1 << 8) | (x + 8 < GBW ? line1[(x >> 3) + 1] : 0);
803
804
            /* This is the speed-critical inner loop. */
805
0
            for (x_minor = 0; x_minor < minor_width; x_minor++) {
806
0
                int bit;
807
808
0
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
809
0
                if (bit < 0)
810
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template3 optimized");
811
0
                result |= bit << (7 - x_minor);
812
0
                CONTEXT = ((CONTEXT & 0x1f7) << 1) | bit | ((line_m1 >> (8 - x_minor)) & 0x10);
813
0
            }
814
0
            gbreg_line[x >> 3] = result;
815
0
        }
816
#ifdef OUTPUT_PBM
817
        fwrite(gbreg_line, 1, rowstride, stdout);
818
#endif
819
0
        line1 = gbreg_line;
820
0
        gbreg_line += rowstride;
821
0
    }
822
823
0
    return 0;
824
0
}
825
826
static int
827
jbig2_decode_generic_template3_unopt(Jbig2Ctx *ctx,
828
                                     Jbig2Segment *segment,
829
                                     const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
830
0
{
831
0
    const uint32_t GBW = image->width;
832
0
    const uint32_t GBH = image->height;
833
0
    uint32_t CONTEXT;
834
0
    uint32_t x, y;
835
0
    int bit;
836
837
0
    if (pixel_outside_field(params->gbat[0], params->gbat[1]))
838
0
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
839
0
                           "adaptive template pixel is out of field");
840
841
0
    for (y = 0; y < GBH; y++) {
842
0
        uint32_t out_byte = 0;
843
0
        int out_bits_to_go_in_byte = 8;
844
0
        uint8_t *d = &image->data[image->stride * y];
845
0
        uint8_t *pline  = &image->data[image->stride * (y-1)];
846
0
        uint32_t pd = 0;
847
0
        if (y > 0) {
848
0
            pd = (*pline++ << 8);
849
0
            if (GBW > 8)
850
0
                pd |= *pline++;
851
0
        }
852
0
        for (x = 0; x < GBW; x++) {
853
0
            if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
854
0
                bit = 0;
855
0
            } else {
856
0
                CONTEXT  = out_byte & 0x00F; /* First 4 pixels */
857
0
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 4;
858
0
                CONTEXT |= (pd>>9) & 0x3E0; /* Next 5 pixels */
859
0
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
860
0
                if (bit < 0)
861
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template3 unoptimized");
862
0
            }
863
0
            pd = pd<<1;
864
0
            out_byte = (out_byte<<1) | bit;
865
0
            out_bits_to_go_in_byte--;
866
0
            *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
867
0
            if (out_bits_to_go_in_byte == 0) {
868
0
                out_bits_to_go_in_byte = 8;
869
0
                d++;
870
0
                if (x+9 < GBW && y > 0)
871
0
                    pd |= *pline++;
872
0
            }
873
0
        }
874
0
        if (out_bits_to_go_in_byte != 8)
875
0
            *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
876
0
    }
877
0
    return 0;
878
0
}
879
880
static void
881
copy_prev_row(Jbig2Image *image, int row)
882
0
{
883
0
    if (!row) {
884
        /* no previous row */
885
0
        memset(image->data, 0, image->stride);
886
0
    } else {
887
        /* duplicate data from the previous row */
888
0
        uint8_t *src = image->data + (row - 1) * image->stride;
889
890
0
        memcpy(src + image->stride, src, image->stride);
891
0
    }
892
0
}
893
894
static int
895
jbig2_decode_generic_template0_TPGDON(Jbig2Ctx *ctx,
896
                                      Jbig2Segment *segment,
897
                                      const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
898
0
{
899
0
    const uint32_t GBW = image->width;
900
0
    const uint32_t GBH = image->height;
901
0
    uint32_t CONTEXT;
902
0
    uint32_t x, y;
903
0
    int LTP = 0;
904
0
    int gmin, gmax;
905
0
    uint32_t left, right, top;
906
907
0
    if (pixel_outside_field(params->gbat[0], params->gbat[1]) ||
908
0
        pixel_outside_field(params->gbat[2], params->gbat[3]) ||
909
0
        pixel_outside_field(params->gbat[4], params->gbat[5]) ||
910
0
        pixel_outside_field(params->gbat[6], params->gbat[7]))
911
0
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
912
0
                           "adaptive template pixel is out of field");
913
914
    /* JBig2 has 'standard' values for gbat (see 6.2.5.4 of the spec).
915
     * Have an optimised version for those locations. This greatly
916
     * simplifies some of the fetches. It's almost like they thought
917
     * it through. */
918
0
    if (params->gbat[0] ==  3 && params->gbat[1] == -1 &&
919
0
        params->gbat[2] == -3 && params->gbat[3] == -1 &&
920
0
        params->gbat[4] ==  2 && params->gbat[5] == -2 &&
921
0
        params->gbat[6] == -2 && params->gbat[7] == -2)
922
0
    {
923
0
        for (y = 0; y < GBH; y++) {
924
0
            int bit = jbig2_arith_decode(ctx, as, &GB_stats[0x9B25]);
925
0
            if (bit < 0)
926
0
                return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template0 TPGDON1");
927
0
            LTP ^= bit;
928
0
            if (!LTP) {
929
0
                uint32_t out_byte = 0;
930
0
                int out_bits_to_go_in_byte = 8;
931
0
                uint8_t *d = &image->data[image->stride * y];
932
0
                uint8_t *pline  = &image->data[image->stride * (y-1)];
933
0
                uint8_t *ppline = &image->data[image->stride * (y-2)];
934
0
                uint32_t pd = 0;
935
0
                uint32_t ppd = 0;
936
0
                if (y > 0) {
937
0
                    pd = (*pline++ << 8);
938
0
                    if (GBW > 8)
939
0
                        pd |= *pline++;
940
0
                    if (y > 1) {
941
0
                        ppd = (*ppline++ << 8);
942
0
                        if (GBW > 8)
943
0
                            ppd |= *ppline++;
944
0
                    }
945
0
                }
946
0
                for (x = 0; x < GBW; x++) {
947
0
                    if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
948
0
                        bit = 0;
949
0
                    } else {
950
0
                        CONTEXT  = out_byte & 0x00F; /* First 4 pixels */
951
0
                        CONTEXT |= (pd>>8) & 0x7F0; /* Next 7 pixels */
952
0
                        CONTEXT |= (ppd>>2) & 0xF800; /* Final 5 pixels */
953
0
                        bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
954
0
                        if (bit < 0)
955
0
                            return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template0 TPGDON2");
956
0
                    }
957
0
                    pd = pd<<1;
958
0
                    ppd = ppd<<1;
959
0
                    out_byte = (out_byte<<1) | bit;
960
0
                    out_bits_to_go_in_byte--;
961
0
                    if (out_bits_to_go_in_byte == 0) {
962
0
                        out_bits_to_go_in_byte = 8;
963
0
                        *d++ = (uint8_t)out_byte;
964
0
                        if (x+9 < GBW && y > 0) {
965
0
                            pd |= *pline++;
966
0
                            if (y > 1)
967
0
                                ppd |= *ppline++;
968
0
                        }
969
0
                    }
970
0
                }
971
0
                if (out_bits_to_go_in_byte != 8)
972
0
                    *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
973
0
            } else {
974
0
                copy_prev_row(image, y);
975
0
            }
976
0
        }
977
0
        return 0;
978
0
    }
979
980
    /* We divide the width into 3 regions 0..left...right...GBW,
981
     * between left and right, we know that our accesses will never
982
     * step outside the image, enabling us to use faster accessors. */
983
0
    left = 4;
984
0
    right = 2;
985
0
    gmin = gmax = params->gbat[0];
986
0
    if (params->gbat[2] < gmin)
987
0
        gmin = params->gbat[2];
988
0
    if (gmax < params->gbat[2])
989
0
        gmax = params->gbat[2];
990
0
    if (params->gbat[4] < gmin)
991
0
        gmin = params->gbat[4];
992
0
    if (gmax < params->gbat[4])
993
0
        gmax = params->gbat[4];
994
0
    if (params->gbat[6] < gmin)
995
0
        gmin = params->gbat[6];
996
0
    if (gmax < params->gbat[6])
997
0
        gmax = params->gbat[6];
998
0
    if ((int)left < -gmin)
999
0
        left = -gmin;
1000
0
    if ((int)right < gmax)
1001
0
        right = gmax;
1002
0
    if (right > GBW)
1003
0
        right = GBW;
1004
0
    right = GBW - right;
1005
    /* So 0 <= x < left or right <= x < GBW needs bounds checking. */
1006
1007
    /* Now we do the same for the height, but here there is no bottom
1008
     * region, as we only ever look up for y. */
1009
0
    top = 2;
1010
0
    gmin = params->gbat[1];
1011
0
    if (params->gbat[3] < gmin)
1012
0
        gmin = params->gbat[3];
1013
0
    if (params->gbat[5] < gmin)
1014
0
        gmin = params->gbat[5];
1015
0
    if (params->gbat[7] < gmin)
1016
0
        gmin = params->gbat[7];
1017
0
    if ((int)top < -gmin)
1018
0
        top = -gmin;
1019
    /* So 0 <= y < top needs bounds checking. */
1020
1021
0
    for (y = 0; y < GBH; y++) {
1022
0
        int bit = jbig2_arith_decode(ctx, as, &GB_stats[0x9B25]);
1023
0
        if (bit < 0)
1024
0
            return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template0 TPGDON1");
1025
0
        LTP ^= bit;
1026
0
        if (!LTP) {
1027
0
            uint32_t out_byte = 0;
1028
0
            int out_bits_to_go_in_byte = 8;
1029
0
            uint8_t *d = &image->data[image->stride * y];
1030
0
            uint8_t *pline  = &image->data[image->stride * (y-1)];
1031
0
            uint8_t *ppline = &image->data[image->stride * (y-2)];
1032
0
            uint32_t pd = 0;
1033
0
            uint32_t ppd = 0;
1034
0
            if (y > 0) {
1035
0
                pd = (*pline++ << 8);
1036
0
                if (GBW > 8)
1037
0
                    pd |= *pline++;
1038
0
                if (y > 1) {
1039
0
                    ppd = (*ppline++ << 8);
1040
0
                    if (GBW > 8)
1041
0
                        ppd |= *ppline++;
1042
0
                }
1043
0
            }
1044
0
            for (x = 0; x < GBW; x++) {
1045
0
                if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
1046
0
                    bit = 0;
1047
0
                } else {
1048
0
                    CONTEXT = out_byte & 0x000F; /* First 4 pixels */
1049
0
                    CONTEXT |= (pd>>8) & 0x03E0; /* Skip one, next 5 pixels */
1050
0
                    CONTEXT |= (ppd>>2) & 0x7000; /* Skip 2, next 3 pixels, skip one */
1051
0
                    if (y >= top && x >= left && x < right)
1052
0
                    {
1053
0
                        CONTEXT |= jbig2_image_get_pixel_fast(image, x + params->gbat[0], y + params->gbat[1]) << 4;
1054
0
                        CONTEXT |= jbig2_image_get_pixel_fast(image, x + params->gbat[2], y + params->gbat[3]) << 10;
1055
0
                        CONTEXT |= jbig2_image_get_pixel_fast(image, x + params->gbat[4], y + params->gbat[5]) << 11;
1056
0
                        CONTEXT |= jbig2_image_get_pixel_fast(image, x + params->gbat[6], y + params->gbat[7]) << 15;
1057
0
                    }
1058
0
                    else
1059
0
                    {
1060
0
                        CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 4;
1061
0
                        CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[2], y + params->gbat[3]) << 10;
1062
0
                        CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[4], y + params->gbat[5]) << 11;
1063
0
                        CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[6], y + params->gbat[7]) << 15;
1064
0
                    }
1065
0
                    bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
1066
0
                    if (bit < 0)
1067
0
                        return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template0 TPGDON2");
1068
0
                }
1069
0
                pd = pd<<1;
1070
0
                ppd = ppd<<1;
1071
0
                out_byte = (out_byte<<1) | bit;
1072
0
                out_bits_to_go_in_byte--;
1073
0
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1074
0
                if (out_bits_to_go_in_byte == 0) {
1075
0
                    out_bits_to_go_in_byte = 8;
1076
0
                    d++;
1077
0
                    if (x+9 < GBW && y > 0) {
1078
0
                        pd |= *pline++;
1079
0
                        if (y > 1)
1080
0
                            ppd |= *ppline++;
1081
0
                    }
1082
0
                }
1083
0
            }
1084
0
            if (out_bits_to_go_in_byte != 8)
1085
0
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1086
0
        } else {
1087
0
            copy_prev_row(image, y);
1088
0
        }
1089
0
    }
1090
1091
0
    return 0;
1092
0
}
1093
1094
static int
1095
jbig2_decode_generic_template1_TPGDON(Jbig2Ctx *ctx,
1096
                                      Jbig2Segment *segment,
1097
                                      const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
1098
0
{
1099
0
    const uint32_t GBW = image->width;
1100
0
    const uint32_t GBH = image->height;
1101
0
    uint32_t CONTEXT;
1102
0
    uint32_t x, y;
1103
0
    int LTP = 0;
1104
1105
0
    if (pixel_outside_field(params->gbat[0], params->gbat[1]))
1106
0
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
1107
0
                           "adaptive template pixel is out of field");
1108
1109
0
    for (y = 0; y < GBH; y++) {
1110
0
        int bit = jbig2_arith_decode(ctx, as, &GB_stats[0x0795]);
1111
0
        if (bit < 0)
1112
0
            return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template1 TPGDON1");
1113
0
        LTP ^= bit;
1114
0
        if (!LTP) {
1115
0
            uint32_t out_byte = 0;
1116
0
            int out_bits_to_go_in_byte = 8;
1117
0
            uint8_t *d = &image->data[image->stride * y];
1118
0
            uint8_t *pline  = &image->data[image->stride * (y-1)];
1119
0
            uint8_t *ppline = &image->data[image->stride * (y-2)];
1120
0
            uint32_t pd = 0;
1121
0
            uint32_t ppd = 0;
1122
0
            if (y > 0) {
1123
0
                pd = (*pline++ << 8);
1124
0
                if (GBW > 8)
1125
0
                    pd |= *pline++;
1126
0
                if (y > 1) {
1127
0
                    ppd = (*ppline++ << 8);
1128
0
                    if (GBW > 8)
1129
0
                        ppd |= *ppline++;
1130
0
                }
1131
0
            }
1132
0
            for (x = 0; x < GBW; x++) {
1133
0
                if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
1134
0
                    bit = 0;
1135
0
                } else {
1136
0
                    CONTEXT  = out_byte & 0x0007; /* First 3 pixels */
1137
0
                    CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 3;
1138
0
                    CONTEXT |= (pd>>9) & 0x01F0; /* next 5 pixels */
1139
0
                    CONTEXT |= (ppd>>4) & 0x1E00; /* next 4 pixels */
1140
0
                    bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
1141
0
                    if (bit < 0)
1142
0
                        return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template1 TPGDON2");
1143
0
                }
1144
0
                pd = pd<<1;
1145
0
                ppd = ppd<<1;
1146
0
                out_byte = (out_byte<<1) | bit;
1147
0
                out_bits_to_go_in_byte--;
1148
0
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1149
0
                if (out_bits_to_go_in_byte == 0) {
1150
0
                    out_bits_to_go_in_byte = 8;
1151
0
                    d++;
1152
0
                    if (x+9 < GBW && y > 0) {
1153
0
                        pd |= *pline++;
1154
0
                        if (y > 1)
1155
0
                            ppd |= *ppline++;
1156
0
                    }
1157
0
                }
1158
0
            }
1159
0
            if (out_bits_to_go_in_byte != 8)
1160
0
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1161
0
        } else {
1162
0
            copy_prev_row(image, y);
1163
0
        }
1164
0
    }
1165
1166
0
    return 0;
1167
0
}
1168
1169
static int
1170
jbig2_decode_generic_template2_TPGDON(Jbig2Ctx *ctx,
1171
                                      Jbig2Segment *segment,
1172
                                      const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
1173
0
{
1174
0
    const uint32_t GBW = image->width;
1175
0
    const uint32_t GBH = image->height;
1176
0
    uint32_t CONTEXT;
1177
0
    uint32_t x, y;
1178
0
    int LTP = 0;
1179
1180
0
    if (pixel_outside_field(params->gbat[0], params->gbat[1]))
1181
0
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
1182
0
                           "adaptive template pixel is out of field");
1183
1184
0
    for (y = 0; y < GBH; y++) {
1185
0
        int bit = jbig2_arith_decode(ctx, as, &GB_stats[0xE5]);
1186
0
        if (bit < 0)
1187
0
            return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template2 TPGDON1");
1188
0
        LTP ^= bit;
1189
0
        if (!LTP) {
1190
0
            uint32_t out_byte = 0;
1191
0
            int out_bits_to_go_in_byte = 8;
1192
0
            uint8_t *d = &image->data[image->stride * y];
1193
0
            uint8_t *pline  = &image->data[image->stride * (y-1)];
1194
0
            uint8_t *ppline = &image->data[image->stride * (y-2)];
1195
0
            uint32_t pd = 0;
1196
0
            uint32_t ppd = 0;
1197
0
            if (y > 0) {
1198
0
                pd = (*pline++ << 8);
1199
0
                if (GBW > 8)
1200
0
                    pd |= *pline++;
1201
0
                if (y > 1) {
1202
0
                    ppd = (*ppline++ << 8);
1203
0
                    if (GBW > 8)
1204
0
                        ppd |= *ppline++;
1205
0
                }
1206
0
            }
1207
0
            for (x = 0; x < GBW; x++) {
1208
0
                if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
1209
0
                    bit = 0;
1210
0
                } else {
1211
0
                    CONTEXT  = out_byte & 0x003; /* First 2 pixels */
1212
0
                    CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 2;
1213
0
                    CONTEXT |= (pd>>11) & 0x078; /* next 4 pixels */
1214
0
                    CONTEXT |= (ppd>>7) & 0x380; /* next 3 pixels */
1215
0
                    bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
1216
0
                    if (bit < 0)
1217
0
                        return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template2 TPGDON2");
1218
0
                }
1219
0
                pd = pd<<1;
1220
0
                ppd = ppd<<1;
1221
0
                out_byte = (out_byte<<1) | bit;
1222
0
                out_bits_to_go_in_byte--;
1223
0
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1224
0
                if (out_bits_to_go_in_byte == 0) {
1225
0
                    out_bits_to_go_in_byte = 8;
1226
0
                    d++;
1227
0
                    if (x+9 < GBW && y > 0) {
1228
0
                        pd |= *pline++;
1229
0
                        if (y > 1)
1230
0
                            ppd |= *ppline++;
1231
0
                    }
1232
0
                }
1233
0
            }
1234
0
            if (out_bits_to_go_in_byte != 8)
1235
0
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1236
0
        } else {
1237
0
            copy_prev_row(image, y);
1238
0
        }
1239
0
    }
1240
1241
0
    return 0;
1242
0
}
1243
1244
static int
1245
jbig2_decode_generic_template3_TPGDON(Jbig2Ctx *ctx,
1246
                                      Jbig2Segment *segment,
1247
                                      const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
1248
0
{
1249
0
    const uint32_t GBW = image->width;
1250
0
    const uint32_t GBH = image->height;
1251
0
    uint32_t CONTEXT;
1252
0
    uint32_t x, y;
1253
0
    int LTP = 0;
1254
1255
0
    if (pixel_outside_field(params->gbat[0], params->gbat[1]))
1256
0
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
1257
0
                           "adaptive template pixel is out of field");
1258
1259
0
    for (y = 0; y < GBH; y++) {
1260
0
        int bit = jbig2_arith_decode(ctx, as, &GB_stats[0x0195]);
1261
0
        if (bit < 0)
1262
0
            return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template3 TPGDON1");
1263
0
        LTP ^= bit;
1264
0
        if (!LTP) {
1265
0
            uint32_t out_byte = 0;
1266
0
            int out_bits_to_go_in_byte = 8;
1267
0
            uint8_t *d = &image->data[image->stride * y];
1268
0
            uint8_t *pline  = &image->data[image->stride * (y-1)];
1269
0
            uint32_t pd = 0;
1270
0
            if (y > 0) {
1271
0
                pd = (*pline++ << 8);
1272
0
                if (GBW > 8)
1273
0
                    pd |= *pline++;
1274
0
            }
1275
0
            for (x = 0; x < GBW; x++) {
1276
0
                if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
1277
0
                    bit = 0;
1278
0
                } else {
1279
0
                    CONTEXT  = out_byte & 0x0F; /* First 4 pixels */
1280
0
                    CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 4;
1281
0
                    CONTEXT |= (pd>>9) & 0x3E0; /* next 5 pixels */
1282
0
                    bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
1283
0
                    if (bit < 0)
1284
0
                        return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template3 TPGDON2");
1285
0
                }
1286
0
                pd = pd<<1;
1287
0
                out_byte = (out_byte<<1) | bit;
1288
0
                out_bits_to_go_in_byte--;
1289
0
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1290
0
                if (out_bits_to_go_in_byte == 0) {
1291
0
                    out_bits_to_go_in_byte = 8;
1292
0
                    d++;
1293
0
                    if (x+9 < GBW && y > 0)
1294
0
                        pd |= *pline++;
1295
0
                }
1296
0
            }
1297
0
            if (out_bits_to_go_in_byte != 8)
1298
0
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1299
0
        } else {
1300
0
            copy_prev_row(image, y);
1301
0
        }
1302
0
    }
1303
1304
0
    return 0;
1305
0
}
1306
1307
static int
1308
jbig2_decode_generic_region_TPGDON(Jbig2Ctx *ctx,
1309
                                   Jbig2Segment *segment,
1310
                                   const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
1311
0
{
1312
0
    switch (params->GBTEMPLATE) {
1313
0
    case 0:
1314
0
        return jbig2_decode_generic_template0_TPGDON(ctx, segment, params, as, image, GB_stats);
1315
0
    case 1:
1316
0
        return jbig2_decode_generic_template1_TPGDON(ctx, segment, params, as, image, GB_stats);
1317
0
    case 2:
1318
0
        return jbig2_decode_generic_template2_TPGDON(ctx, segment, params, as, image, GB_stats);
1319
0
    case 3:
1320
0
        return jbig2_decode_generic_template3_TPGDON(ctx, segment, params, as, image, GB_stats);
1321
0
    }
1322
1323
0
    return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "unsupported GBTEMPLATE (%d)", params->GBTEMPLATE);
1324
0
}
1325
1326
/**
1327
 * jbig2_decode_generic_region: Decode a generic region.
1328
 * @ctx: The context for allocation and error reporting.
1329
 * @segment: A segment reference for error reporting.
1330
 * @params: Decoding parameter set.
1331
 * @as: Arithmetic decoder state.
1332
 * @image: Where to store the decoded data.
1333
 * @GB_stats: Arithmetic stats.
1334
 *
1335
 * Decodes a generic region, according to section 6.2. The caller should
1336
 * pass an already allocated Jbig2Image object for @image
1337
 *
1338
 * Because this API is based on an arithmetic decoding state, it is
1339
 * not suitable for MMR decoding.
1340
 *
1341
 * Return code: 0 on success.
1342
 **/
1343
int
1344
jbig2_decode_generic_region(Jbig2Ctx *ctx,
1345
                            Jbig2Segment *segment, const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
1346
125
{
1347
125
    const int8_t *gbat = params->gbat;
1348
1349
125
    if (!params->MMR && params->TPGDON)
1350
0
        return jbig2_decode_generic_region_TPGDON(ctx, segment, params, as, image, GB_stats);
1351
1352
125
    if (!params->MMR && params->GBTEMPLATE == 0) {
1353
45
        if (!params->USESKIP && gbat[0] == +3 && gbat[1] == -1 && gbat[2] == -3 && gbat[3] == -1 && gbat[4] == +2 && gbat[5] == -2 && gbat[6] == -2 && gbat[7] == -2)
1354
45
            return jbig2_decode_generic_template0(ctx, segment, params, as, image, GB_stats);
1355
0
        else
1356
0
            return jbig2_decode_generic_template0_unopt(ctx, segment, params, as, image, GB_stats);
1357
80
    } else if (!params->MMR && params->GBTEMPLATE == 1) {
1358
0
        if (!params->USESKIP && gbat[0] == +3 && gbat[1] == -1)
1359
0
            return jbig2_decode_generic_template1(ctx, segment, params, as, image, GB_stats);
1360
0
        else
1361
0
            return jbig2_decode_generic_template1_unopt(ctx, segment, params, as, image, GB_stats);
1362
0
    }
1363
80
    else if (!params->MMR && params->GBTEMPLATE == 2) {
1364
80
        if (!params->USESKIP && gbat[0] == 2 && gbat[1] == -1)
1365
80
            return jbig2_decode_generic_template2(ctx, segment, params, as, image, GB_stats);
1366
0
        else
1367
0
            return jbig2_decode_generic_template2_unopt(ctx, segment, params, as, image, GB_stats);
1368
80
    } else if (!params->MMR && params->GBTEMPLATE == 3) {
1369
0
        if (!params->USESKIP && gbat[0] == 2 && gbat[1] == -1)
1370
0
            return jbig2_decode_generic_template3(ctx, segment, params, as, image, GB_stats);
1371
0
        else
1372
0
            return jbig2_decode_generic_template3_unopt(ctx, segment, params, as, image, GB_stats);
1373
0
    }
1374
1375
0
    {
1376
0
        int i;
1377
1378
0
        for (i = 0; i < 8; i++)
1379
0
            jbig2_error(ctx, JBIG2_SEVERITY_DEBUG, segment->number, "gbat[%d] = %d", i, params->gbat[i]);
1380
0
    }
1381
1382
0
    return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "unsupported generic region (MMR=%d, GBTEMPLATE=%d)", params->MMR, params->GBTEMPLATE);
1383
125
}
1384
1385
/**
1386
 * Handler for immediate generic region segments
1387
 */
1388
int
1389
jbig2_immediate_generic_region(Jbig2Ctx *ctx, Jbig2Segment *segment, const byte *segment_data)
1390
45
{
1391
45
    Jbig2RegionSegmentInfo rsi;
1392
45
    byte seg_flags;
1393
45
    int8_t gbat[8];
1394
45
    int offset;
1395
45
    uint32_t gbat_bytes = 0;
1396
45
    Jbig2GenericRegionParams params;
1397
45
    int code = 0;
1398
45
    Jbig2Image *image = NULL;
1399
45
    Jbig2WordStream *ws = NULL;
1400
45
    Jbig2ArithState *as = NULL;
1401
45
    Jbig2ArithCx *GB_stats = NULL;
1402
45
    uint32_t height;
1403
45
    Jbig2Page *page = &ctx->pages[ctx->current_page];
1404
1405
    /* 7.4.6 */
1406
45
    if (segment->data_length < 18)
1407
0
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "segment too short");
1408
1409
45
    jbig2_get_region_segment_info(&rsi, segment_data);
1410
45
    jbig2_error(ctx, JBIG2_SEVERITY_INFO, segment->number, "generic region: %u x %u @ (%u, %u), flags = %02x", rsi.width, rsi.height, rsi.x, rsi.y, rsi.flags);
1411
1412
    /* 7.4.6.4 */
1413
45
    height = rsi.height;
1414
45
    if (segment->rows != UINT32_MAX) {
1415
0
        if (segment->rows > rsi.height)
1416
0
            return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "segment contains more rows than stated in header");
1417
0
        height = segment->rows;
1418
0
    }
1419
1420
    /* 7.4.6.2 */
1421
45
    seg_flags = segment_data[17];
1422
45
    jbig2_error(ctx, JBIG2_SEVERITY_INFO, segment->number, "segment flags = %02x", seg_flags);
1423
45
    if ((seg_flags & 1) && (seg_flags & 6))
1424
0
        jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "MMR is 1, but GBTEMPLATE is not 0");
1425
1426
    /* 7.4.6.3 */
1427
45
    if (!(seg_flags & 1)) {
1428
45
        gbat_bytes = (seg_flags & 6) ? 2 : 8;
1429
45
        if (18 + gbat_bytes > segment->data_length)
1430
0
            return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "segment too short");
1431
45
        memcpy(gbat, segment_data + 18, gbat_bytes);
1432
45
        jbig2_error(ctx, JBIG2_SEVERITY_INFO, segment->number, "gbat: %d, %d", gbat[0], gbat[1]);
1433
45
    }
1434
1435
45
    offset = 18 + gbat_bytes;
1436
1437
    /* Check for T.88 amendment 2 */
1438
45
    if ((seg_flags >> 5) & 1)
1439
0
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "segment uses 12 adaptive template pixels (NYI)");
1440
1441
    /* Table 34 */
1442
45
    params.MMR = seg_flags & 1;
1443
45
    params.GBTEMPLATE = (seg_flags & 6) >> 1;
1444
45
    params.TPGDON = (seg_flags & 8) >> 3;
1445
45
    params.USESKIP = 0;
1446
45
    memcpy(params.gbat, gbat, gbat_bytes);
1447
1448
45
    if (page->height == 0xffffffff && page->striped && page->stripe_size > 0) {
1449
0
        if (rsi.y >= page->end_row + page->stripe_size) {
1450
0
            jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "ignoring %u x %u region at (%u, %u) outside of stripe at row %u covering %u rows, on page of height %u", rsi.width, rsi.height, rsi.x, rsi.y, page->end_row, page->stripe_size, page->image->height);
1451
0
            return 0;
1452
0
        }
1453
0
        if (height > page->end_row + page->stripe_size) {
1454
0
            height = page->end_row + page->stripe_size;
1455
0
        }
1456
45
    } else {
1457
45
        if (rsi.y >= page->height) {
1458
0
            jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "ignoring %u x %u region at (%u, %u) outside of page of height %u", rsi.width, rsi.height, rsi.x, rsi.y, page->height);
1459
0
            return 0;
1460
0
        }
1461
45
        if (height > page->height - rsi .y) {
1462
0
            height = page->height - rsi.y;
1463
0
        }
1464
45
    }
1465
45
    if (height == 0) {
1466
0
        jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "nothing remains of region, ignoring");
1467
0
        return 0;
1468
0
    }
1469
1470
45
    image = jbig2_image_new(ctx, rsi.width, height);
1471
45
    if (image == NULL)
1472
0
        return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to allocate generic image");
1473
45
    jbig2_error(ctx, JBIG2_SEVERITY_DEBUG, segment->number, "allocated %d x %d image buffer for region decode results", rsi.width, height);
1474
1475
45
    if (params.MMR) {
1476
0
        code = jbig2_decode_generic_mmr(ctx, segment, &params, segment_data + offset, segment->data_length - offset, image);
1477
0
        if (code < 0) {
1478
0
            code = jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode MMR-coded generic region");
1479
0
            goto cleanup;
1480
0
        }
1481
45
    } else {
1482
45
        int stats_size = jbig2_generic_stats_size(ctx, params.GBTEMPLATE);
1483
1484
45
        GB_stats = jbig2_new(ctx, Jbig2ArithCx, stats_size);
1485
45
        if (GB_stats == NULL) {
1486
0
            code = jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "failed to allocate arithmetic decoder states when handling immediate generic region");
1487
0
            goto cleanup;
1488
0
        }
1489
45
        memset(GB_stats, 0, stats_size);
1490
1491
45
        ws = jbig2_word_stream_buf_new(ctx, segment_data + offset, segment->data_length - offset);
1492
45
        if (ws == NULL) {
1493
0
            code = jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to allocated word stream when handling immediate generic region");
1494
0
            goto cleanup;
1495
0
        }
1496
45
        as = jbig2_arith_new(ctx, ws);
1497
45
        if (as == NULL) {
1498
0
            code = jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to allocate arithmetic coding state when handling immediate generic region");
1499
0
            goto cleanup;
1500
0
        }
1501
45
        code = jbig2_decode_generic_region(ctx, segment, &params, as, image, GB_stats);
1502
45
        if (code < 0) {
1503
0
            code = jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode immediate generic region");
1504
0
            goto cleanup;
1505
0
        }
1506
45
    }
1507
1508
45
    code = jbig2_page_add_result(ctx, &ctx->pages[ctx->current_page], image, rsi.x, rsi.y, rsi.op);
1509
45
    if (code < 0)
1510
0
        code = jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "unable to add result to page");
1511
1512
45
cleanup:
1513
45
    jbig2_free(ctx->allocator, as);
1514
45
    jbig2_word_stream_buf_free(ctx, ws);
1515
45
    jbig2_free(ctx->allocator, GB_stats);
1516
45
    jbig2_image_release(ctx, image);
1517
1518
45
    return code;
1519
45
}