Coverage Report

Created: 2025-06-24 07:01

/src/ghostpdl/tiff/libtiff/tif_write.c
Line
Count
Source (jump to first uncovered line)
1
/*
2
 * Copyright (c) 1988-1997 Sam Leffler
3
 * Copyright (c) 1991-1997 Silicon Graphics, Inc.
4
 *
5
 * Permission to use, copy, modify, distribute, and sell this software and
6
 * its documentation for any purpose is hereby granted without fee, provided
7
 * that (i) the above copyright notices and this permission notice appear in
8
 * all copies of the software and related documentation, and (ii) the names of
9
 * Sam Leffler and Silicon Graphics may not be used in any advertising or
10
 * publicity relating to the software without the specific, prior written
11
 * permission of Sam Leffler and Silicon Graphics.
12
 *
13
 * THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND,
14
 * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY
15
 * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
16
 *
17
 * IN NO EVENT SHALL SAM LEFFLER OR SILICON GRAPHICS BE LIABLE FOR
18
 * ANY SPECIAL, INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND,
19
 * OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
20
 * WHETHER OR NOT ADVISED OF THE POSSIBILITY OF DAMAGE, AND ON ANY THEORY OF
21
 * LIABILITY, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
22
 * OF THIS SOFTWARE.
23
 */
24
25
/*
26
 * TIFF Library.
27
 *
28
 * Scanline-oriented Write Support
29
 */
30
#include "tiffiop.h"
31
#include <stdio.h>
32
33
#define STRIPINCR 20 /* expansion factor on strip array */
34
35
#define WRITECHECKSTRIPS(tif, module)                                          \
36
31.1M
    (((tif)->tif_flags & TIFF_BEENWRITING) || TIFFWriteCheck((tif), 0, module))
37
#define WRITECHECKTILES(tif, module)                                           \
38
0
    (((tif)->tif_flags & TIFF_BEENWRITING) || TIFFWriteCheck((tif), 1, module))
39
#define BUFFERCHECK(tif)                                                       \
40
31.1M
    ((((tif)->tif_flags & TIFF_BUFFERSETUP) && tif->tif_rawdata) ||            \
41
31.1M
     TIFFWriteBufferSetup((tif), NULL, (tmsize_t)-1))
42
43
static int TIFFGrowStrips(TIFF *tif, uint32_t delta, const char *module);
44
static int TIFFAppendToStrip(TIFF *tif, uint32_t strip, uint8_t *data,
45
                             tmsize_t cc);
46
47
int TIFFWriteScanline(TIFF *tif, void *buf, uint32_t row, uint16_t sample)
48
31.1M
{
49
31.1M
    static const char module[] = "TIFFWriteScanline";
50
31.1M
    register TIFFDirectory *td;
51
31.1M
    int status, imagegrew = 0;
52
31.1M
    uint32_t strip;
53
54
31.1M
    if (!WRITECHECKSTRIPS(tif, module))
55
21.0k
        return (-1);
56
    /*
57
     * Handle delayed allocation of data buffer.  This
58
     * permits it to be sized more intelligently (using
59
     * directory information).
60
     */
61
31.1M
    if (!BUFFERCHECK(tif))
62
0
        return (-1);
63
31.1M
    tif->tif_flags |= TIFF_BUF4WRITE; /* not strictly sure this is right*/
64
65
31.1M
    td = &tif->tif_dir;
66
    /*
67
     * Extend image length if needed
68
     * (but only for PlanarConfig=1).
69
     */
70
31.1M
    if (row >= td->td_imagelength)
71
0
    { /* extend image */
72
0
        if (td->td_planarconfig == PLANARCONFIG_SEPARATE)
73
0
        {
74
0
            TIFFErrorExtR(
75
0
                tif, module,
76
0
                "Can not change \"ImageLength\" when using separate planes");
77
0
            return (-1);
78
0
        }
79
0
        td->td_imagelength = row + 1;
80
0
        imagegrew = 1;
81
0
    }
82
    /*
83
     * Calculate strip and check for crossings.
84
     */
85
31.1M
    if (td->td_planarconfig == PLANARCONFIG_SEPARATE)
86
0
    {
87
0
        if (sample >= td->td_samplesperpixel)
88
0
        {
89
0
            TIFFErrorExtR(tif, module, "%lu: Sample out of range, max %lu",
90
0
                          (unsigned long)sample,
91
0
                          (unsigned long)td->td_samplesperpixel);
92
0
            return (-1);
93
0
        }
94
0
        strip = sample * td->td_stripsperimage + row / td->td_rowsperstrip;
95
0
    }
96
31.1M
    else
97
31.1M
        strip = row / td->td_rowsperstrip;
98
    /*
99
     * Check strip array to make sure there's space. We don't support
100
     * dynamically growing files that have data organized in separate
101
     * bitplanes because it's too painful.  In that case we require that
102
     * the imagelength be set properly before the first write (so that the
103
     * strips array will be fully allocated above).
104
     */
105
31.1M
    if (strip >= td->td_nstrips && !TIFFGrowStrips(tif, 1, module))
106
0
        return (-1);
107
31.1M
    if (strip != tif->tif_curstrip)
108
863k
    {
109
        /*
110
         * Changing strips -- flush any data present.
111
         */
112
863k
        if (!TIFFFlushData(tif))
113
0
            return (-1);
114
863k
        tif->tif_curstrip = strip;
115
        /*
116
         * Watch out for a growing image.  The value of strips/image
117
         * will initially be 1 (since it can't be deduced until the
118
         * imagelength is known).
119
         */
120
863k
        if (strip >= td->td_stripsperimage && imagegrew)
121
0
            td->td_stripsperimage =
122
0
                TIFFhowmany_32(td->td_imagelength, td->td_rowsperstrip);
123
863k
        if (td->td_stripsperimage == 0)
124
0
        {
125
0
            TIFFErrorExtR(tif, module, "Zero strips per image");
126
0
            return (-1);
127
0
        }
128
863k
        tif->tif_row = (strip % td->td_stripsperimage) * td->td_rowsperstrip;
129
863k
        if ((tif->tif_flags & TIFF_CODERSETUP) == 0)
130
18.3k
        {
131
18.3k
            if (!(*tif->tif_setupencode)(tif))
132
0
                return (-1);
133
18.3k
            tif->tif_flags |= TIFF_CODERSETUP;
134
18.3k
        }
135
136
863k
        tif->tif_rawcc = 0;
137
863k
        tif->tif_rawcp = tif->tif_rawdata;
138
139
        /* this informs TIFFAppendToStrip() we have changed strip */
140
863k
        tif->tif_curoff = 0;
141
142
863k
        if (!(*tif->tif_preencode)(tif, sample))
143
0
            return (-1);
144
863k
        tif->tif_flags |= TIFF_POSTENCODE;
145
863k
    }
146
    /*
147
     * Ensure the write is either sequential or at the
148
     * beginning of a strip (or that we can randomly
149
     * access the data -- i.e. no encoding).
150
     */
151
31.1M
    if (row != tif->tif_row)
152
0
    {
153
0
        if (row < tif->tif_row)
154
0
        {
155
            /*
156
             * Moving backwards within the same strip:
157
             * backup to the start and then decode
158
             * forward (below).
159
             */
160
0
            tif->tif_row =
161
0
                (strip % td->td_stripsperimage) * td->td_rowsperstrip;
162
0
            tif->tif_rawcp = tif->tif_rawdata;
163
0
        }
164
        /*
165
         * Seek forward to the desired row.
166
         */
167
0
        if (!(*tif->tif_seek)(tif, row - tif->tif_row))
168
0
            return (-1);
169
0
        tif->tif_row = row;
170
0
    }
171
172
    /* swab if needed - note that source buffer will be altered */
173
31.1M
    tif->tif_postdecode(tif, (uint8_t *)buf, tif->tif_scanlinesize);
174
175
31.1M
    status = (*tif->tif_encoderow)(tif, (uint8_t *)buf, tif->tif_scanlinesize,
176
31.1M
                                   sample);
177
178
    /* we are now poised at the beginning of the next row */
179
31.1M
    tif->tif_row = row + 1;
180
31.1M
    return (status);
181
31.1M
}
182
183
/* Make sure that at the first attempt of rewriting a tile/strip, we will have
184
 */
185
/* more bytes available in the output buffer than the previous byte count, */
186
/* so that TIFFAppendToStrip() will detect the overflow when it is called the
187
 * first */
188
/* time if the new compressed tile is bigger than the older one. (GDAL #4771) */
189
static int _TIFFReserveLargeEnoughWriteBuffer(TIFF *tif, uint32_t strip_or_tile)
190
0
{
191
0
    TIFFDirectory *td = &tif->tif_dir;
192
0
    if (td->td_stripbytecount_p[strip_or_tile] > 0)
193
0
    {
194
        /* The +1 is to ensure at least one extra bytes */
195
        /* The +4 is because the LZW encoder flushes 4 bytes before the limit */
196
0
        uint64_t safe_buffer_size =
197
0
            (uint64_t)(td->td_stripbytecount_p[strip_or_tile] + 1 + 4);
198
0
        if (tif->tif_rawdatasize <= (tmsize_t)safe_buffer_size)
199
0
        {
200
0
            if (!(TIFFWriteBufferSetup(
201
0
                    tif, NULL,
202
0
                    (tmsize_t)TIFFroundup_64(safe_buffer_size, 1024))))
203
0
                return 0;
204
0
        }
205
0
    }
206
0
    return 1;
207
0
}
208
209
/*
210
 * Encode the supplied data and write it to the
211
 * specified strip.
212
 *
213
 * NB: Image length must be setup before writing.
214
 */
215
tmsize_t TIFFWriteEncodedStrip(TIFF *tif, uint32_t strip, void *data,
216
                               tmsize_t cc)
217
0
{
218
0
    static const char module[] = "TIFFWriteEncodedStrip";
219
0
    TIFFDirectory *td = &tif->tif_dir;
220
0
    uint16_t sample;
221
222
0
    if (!WRITECHECKSTRIPS(tif, module))
223
0
        return ((tmsize_t)-1);
224
    /*
225
     * Check strip array to make sure there's space.
226
     * We don't support dynamically growing files that
227
     * have data organized in separate bitplanes because
228
     * it's too painful.  In that case we require that
229
     * the imagelength be set properly before the first
230
     * write (so that the strips array will be fully
231
     * allocated above).
232
     */
233
0
    if (strip >= td->td_nstrips)
234
0
    {
235
0
        if (td->td_planarconfig == PLANARCONFIG_SEPARATE)
236
0
        {
237
0
            TIFFErrorExtR(
238
0
                tif, module,
239
0
                "Can not grow image by strips when using separate planes");
240
0
            return ((tmsize_t)-1);
241
0
        }
242
0
        if (!TIFFGrowStrips(tif, 1, module))
243
0
            return ((tmsize_t)-1);
244
0
        td->td_stripsperimage =
245
0
            TIFFhowmany_32(td->td_imagelength, td->td_rowsperstrip);
246
0
    }
247
    /*
248
     * Handle delayed allocation of data buffer.  This
249
     * permits it to be sized according to the directory
250
     * info.
251
     */
252
0
    if (!BUFFERCHECK(tif))
253
0
        return ((tmsize_t)-1);
254
255
0
    tif->tif_flags |= TIFF_BUF4WRITE;
256
257
0
    tif->tif_curstrip = strip;
258
259
    /* this informs TIFFAppendToStrip() we have changed or reset strip */
260
0
    tif->tif_curoff = 0;
261
262
0
    if (!_TIFFReserveLargeEnoughWriteBuffer(tif, strip))
263
0
    {
264
0
        return ((tmsize_t)(-1));
265
0
    }
266
267
0
    tif->tif_rawcc = 0;
268
0
    tif->tif_rawcp = tif->tif_rawdata;
269
270
0
    if (td->td_stripsperimage == 0)
271
0
    {
272
0
        TIFFErrorExtR(tif, module, "Zero strips per image");
273
0
        return ((tmsize_t)-1);
274
0
    }
275
276
0
    tif->tif_row = (strip % td->td_stripsperimage) * td->td_rowsperstrip;
277
0
    if ((tif->tif_flags & TIFF_CODERSETUP) == 0)
278
0
    {
279
0
        if (!(*tif->tif_setupencode)(tif))
280
0
            return ((tmsize_t)-1);
281
0
        tif->tif_flags |= TIFF_CODERSETUP;
282
0
    }
283
284
0
    tif->tif_flags &= ~TIFF_POSTENCODE;
285
286
    /* shortcut to avoid an extra memcpy() */
287
0
    if (td->td_compression == COMPRESSION_NONE)
288
0
    {
289
        /* swab if needed - note that source buffer will be altered */
290
0
        tif->tif_postdecode(tif, (uint8_t *)data, cc);
291
292
0
        if (!isFillOrder(tif, td->td_fillorder) &&
293
0
            (tif->tif_flags & TIFF_NOBITREV) == 0)
294
0
            TIFFReverseBits((uint8_t *)data, cc);
295
296
0
        if (cc > 0 && !TIFFAppendToStrip(tif, strip, (uint8_t *)data, cc))
297
0
            return ((tmsize_t)-1);
298
0
        return (cc);
299
0
    }
300
301
0
    sample = (uint16_t)(strip / td->td_stripsperimage);
302
0
    if (!(*tif->tif_preencode)(tif, sample))
303
0
        return ((tmsize_t)-1);
304
305
    /* swab if needed - note that source buffer will be altered */
306
0
    tif->tif_postdecode(tif, (uint8_t *)data, cc);
307
308
0
    if (!(*tif->tif_encodestrip)(tif, (uint8_t *)data, cc, sample))
309
0
        return ((tmsize_t)-1);
310
0
    if (!(*tif->tif_postencode)(tif))
311
0
        return ((tmsize_t)-1);
312
0
    if (!isFillOrder(tif, td->td_fillorder) &&
313
0
        (tif->tif_flags & TIFF_NOBITREV) == 0)
314
0
        TIFFReverseBits(tif->tif_rawdata, tif->tif_rawcc);
315
0
    if (tif->tif_rawcc > 0 &&
316
0
        !TIFFAppendToStrip(tif, strip, tif->tif_rawdata, tif->tif_rawcc))
317
0
        return ((tmsize_t)-1);
318
0
    tif->tif_rawcc = 0;
319
0
    tif->tif_rawcp = tif->tif_rawdata;
320
0
    return (cc);
321
0
}
322
323
/*
324
 * Write the supplied data to the specified strip.
325
 *
326
 * NB: Image length must be setup before writing.
327
 */
328
tmsize_t TIFFWriteRawStrip(TIFF *tif, uint32_t strip, void *data, tmsize_t cc)
329
0
{
330
0
    static const char module[] = "TIFFWriteRawStrip";
331
0
    TIFFDirectory *td = &tif->tif_dir;
332
333
0
    if (!WRITECHECKSTRIPS(tif, module))
334
0
        return ((tmsize_t)-1);
335
    /*
336
     * Check strip array to make sure there's space.
337
     * We don't support dynamically growing files that
338
     * have data organized in separate bitplanes because
339
     * it's too painful.  In that case we require that
340
     * the imagelength be set properly before the first
341
     * write (so that the strips array will be fully
342
     * allocated above).
343
     */
344
0
    if (strip >= td->td_nstrips)
345
0
    {
346
0
        if (td->td_planarconfig == PLANARCONFIG_SEPARATE)
347
0
        {
348
0
            TIFFErrorExtR(
349
0
                tif, module,
350
0
                "Can not grow image by strips when using separate planes");
351
0
            return ((tmsize_t)-1);
352
0
        }
353
        /*
354
         * Watch out for a growing image.  The value of
355
         * strips/image will initially be 1 (since it
356
         * can't be deduced until the imagelength is known).
357
         */
358
0
        if (strip >= td->td_stripsperimage)
359
0
            td->td_stripsperimage =
360
0
                TIFFhowmany_32(td->td_imagelength, td->td_rowsperstrip);
361
0
        if (!TIFFGrowStrips(tif, 1, module))
362
0
            return ((tmsize_t)-1);
363
0
    }
364
365
0
    if (tif->tif_curstrip != strip)
366
0
    {
367
0
        tif->tif_curstrip = strip;
368
369
        /* this informs TIFFAppendToStrip() we have changed or reset strip */
370
0
        tif->tif_curoff = 0;
371
0
    }
372
373
0
    if (td->td_stripsperimage == 0)
374
0
    {
375
0
        TIFFErrorExtR(tif, module, "Zero strips per image");
376
0
        return ((tmsize_t)-1);
377
0
    }
378
0
    tif->tif_row = (strip % td->td_stripsperimage) * td->td_rowsperstrip;
379
0
    return (TIFFAppendToStrip(tif, strip, (uint8_t *)data, cc) ? cc
380
0
                                                               : (tmsize_t)-1);
381
0
}
382
383
/*
384
 * Write and compress a tile of data.  The
385
 * tile is selected by the (x,y,z,s) coordinates.
386
 */
387
tmsize_t TIFFWriteTile(TIFF *tif, void *buf, uint32_t x, uint32_t y, uint32_t z,
388
                       uint16_t s)
389
0
{
390
0
    if (!TIFFCheckTile(tif, x, y, z, s))
391
0
        return ((tmsize_t)(-1));
392
    /*
393
     * NB: A tile size of -1 is used instead of tif_tilesize knowing
394
     *     that TIFFWriteEncodedTile will clamp this to the tile size.
395
     *     This is done because the tile size may not be defined until
396
     *     after the output buffer is setup in TIFFWriteBufferSetup.
397
     */
398
0
    return (TIFFWriteEncodedTile(tif, TIFFComputeTile(tif, x, y, z, s), buf,
399
0
                                 (tmsize_t)(-1)));
400
0
}
401
402
/*
403
 * Encode the supplied data and write it to the
404
 * specified tile.  There must be space for the
405
 * data.  The function clamps individual writes
406
 * to a tile to the tile size, but does not (and
407
 * can not) check that multiple writes to the same
408
 * tile do not write more than tile size data.
409
 *
410
 * NB: Image length must be setup before writing; this
411
 *     interface does not support automatically growing
412
 *     the image on each write (as TIFFWriteScanline does).
413
 */
414
tmsize_t TIFFWriteEncodedTile(TIFF *tif, uint32_t tile, void *data, tmsize_t cc)
415
0
{
416
0
    static const char module[] = "TIFFWriteEncodedTile";
417
0
    TIFFDirectory *td;
418
0
    uint16_t sample;
419
0
    uint32_t howmany32;
420
421
0
    if (!WRITECHECKTILES(tif, module))
422
0
        return ((tmsize_t)(-1));
423
0
    td = &tif->tif_dir;
424
0
    if (tile >= td->td_nstrips)
425
0
    {
426
0
        TIFFErrorExtR(tif, module, "Tile %lu out of range, max %lu",
427
0
                      (unsigned long)tile, (unsigned long)td->td_nstrips);
428
0
        return ((tmsize_t)(-1));
429
0
    }
430
    /*
431
     * Handle delayed allocation of data buffer.  This
432
     * permits it to be sized more intelligently (using
433
     * directory information).
434
     */
435
0
    if (!BUFFERCHECK(tif))
436
0
        return ((tmsize_t)(-1));
437
438
0
    tif->tif_flags |= TIFF_BUF4WRITE;
439
440
0
    tif->tif_curtile = tile;
441
442
    /* this informs TIFFAppendToStrip() we have changed or reset tile */
443
0
    tif->tif_curoff = 0;
444
445
0
    if (!_TIFFReserveLargeEnoughWriteBuffer(tif, tile))
446
0
    {
447
0
        return ((tmsize_t)(-1));
448
0
    }
449
450
0
    tif->tif_rawcc = 0;
451
0
    tif->tif_rawcp = tif->tif_rawdata;
452
453
    /*
454
     * Compute tiles per row & per column to compute
455
     * current row and column
456
     */
457
0
    howmany32 = TIFFhowmany_32(td->td_imagelength, td->td_tilelength);
458
0
    if (howmany32 == 0)
459
0
    {
460
0
        TIFFErrorExtR(tif, module, "Zero tiles");
461
0
        return ((tmsize_t)(-1));
462
0
    }
463
0
    tif->tif_row = (tile % howmany32) * td->td_tilelength;
464
0
    howmany32 = TIFFhowmany_32(td->td_imagewidth, td->td_tilewidth);
465
0
    if (howmany32 == 0)
466
0
    {
467
0
        TIFFErrorExtR(tif, module, "Zero tiles");
468
0
        return ((tmsize_t)(-1));
469
0
    }
470
0
    tif->tif_col = (tile % howmany32) * td->td_tilewidth;
471
472
0
    if ((tif->tif_flags & TIFF_CODERSETUP) == 0)
473
0
    {
474
0
        if (!(*tif->tif_setupencode)(tif))
475
0
            return ((tmsize_t)(-1));
476
0
        tif->tif_flags |= TIFF_CODERSETUP;
477
0
    }
478
0
    tif->tif_flags &= ~TIFF_POSTENCODE;
479
480
    /*
481
     * Clamp write amount to the tile size.  This is mostly
482
     * done so that callers can pass in some large number
483
     * (e.g. -1) and have the tile size used instead.
484
     */
485
0
    if (cc < 1 || cc > tif->tif_tilesize)
486
0
        cc = tif->tif_tilesize;
487
488
    /* shortcut to avoid an extra memcpy() */
489
0
    if (td->td_compression == COMPRESSION_NONE)
490
0
    {
491
        /* swab if needed - note that source buffer will be altered */
492
0
        tif->tif_postdecode(tif, (uint8_t *)data, cc);
493
494
0
        if (!isFillOrder(tif, td->td_fillorder) &&
495
0
            (tif->tif_flags & TIFF_NOBITREV) == 0)
496
0
            TIFFReverseBits((uint8_t *)data, cc);
497
498
0
        if (cc > 0 && !TIFFAppendToStrip(tif, tile, (uint8_t *)data, cc))
499
0
            return ((tmsize_t)-1);
500
0
        return (cc);
501
0
    }
502
503
0
    sample = (uint16_t)(tile / td->td_stripsperimage);
504
0
    if (!(*tif->tif_preencode)(tif, sample))
505
0
        return ((tmsize_t)(-1));
506
    /* swab if needed - note that source buffer will be altered */
507
0
    tif->tif_postdecode(tif, (uint8_t *)data, cc);
508
509
0
    if (!(*tif->tif_encodetile)(tif, (uint8_t *)data, cc, sample))
510
0
        return ((tmsize_t)-1);
511
0
    if (!(*tif->tif_postencode)(tif))
512
0
        return ((tmsize_t)(-1));
513
0
    if (!isFillOrder(tif, td->td_fillorder) &&
514
0
        (tif->tif_flags & TIFF_NOBITREV) == 0)
515
0
        TIFFReverseBits((uint8_t *)tif->tif_rawdata, tif->tif_rawcc);
516
0
    if (tif->tif_rawcc > 0 &&
517
0
        !TIFFAppendToStrip(tif, tile, tif->tif_rawdata, tif->tif_rawcc))
518
0
        return ((tmsize_t)(-1));
519
0
    tif->tif_rawcc = 0;
520
0
    tif->tif_rawcp = tif->tif_rawdata;
521
0
    return (cc);
522
0
}
523
524
/*
525
 * Write the supplied data to the specified strip.
526
 * There must be space for the data; we don't check
527
 * if strips overlap!
528
 *
529
 * NB: Image length must be setup before writing; this
530
 *     interface does not support automatically growing
531
 *     the image on each write (as TIFFWriteScanline does).
532
 */
533
tmsize_t TIFFWriteRawTile(TIFF *tif, uint32_t tile, void *data, tmsize_t cc)
534
0
{
535
0
    static const char module[] = "TIFFWriteRawTile";
536
537
0
    if (!WRITECHECKTILES(tif, module))
538
0
        return ((tmsize_t)(-1));
539
0
    if (tile >= tif->tif_dir.td_nstrips)
540
0
    {
541
0
        TIFFErrorExtR(tif, module, "Tile %lu out of range, max %lu",
542
0
                      (unsigned long)tile,
543
0
                      (unsigned long)tif->tif_dir.td_nstrips);
544
0
        return ((tmsize_t)(-1));
545
0
    }
546
0
    return (TIFFAppendToStrip(tif, tile, (uint8_t *)data, cc) ? cc
547
0
                                                              : (tmsize_t)(-1));
548
0
}
549
550
#define isUnspecified(tif, f)                                                  \
551
18.8k
    (TIFFFieldSet(tif, f) && (tif)->tif_dir.td_imagelength == 0)
552
553
int TIFFSetupStrips(TIFF *tif)
554
18.8k
{
555
18.8k
    TIFFDirectory *td = &tif->tif_dir;
556
557
18.8k
    if (isTiled(tif))
558
0
        td->td_stripsperimage = isUnspecified(tif, FIELD_TILEDIMENSIONS)
559
0
                                    ? td->td_samplesperpixel
560
0
                                    : TIFFNumberOfTiles(tif);
561
18.8k
    else
562
18.8k
        td->td_stripsperimage = isUnspecified(tif, FIELD_ROWSPERSTRIP)
563
18.8k
                                    ? td->td_samplesperpixel
564
18.8k
                                    : TIFFNumberOfStrips(tif);
565
18.8k
    td->td_nstrips = td->td_stripsperimage;
566
    /* TIFFWriteDirectoryTagData has a limitation to 0x80000000U bytes */
567
18.8k
    if (td->td_nstrips >=
568
18.8k
        0x80000000U / ((tif->tif_flags & TIFF_BIGTIFF) ? 0x8U : 0x4U))
569
0
    {
570
0
        TIFFErrorExtR(tif, "TIFFSetupStrips",
571
0
                      "Too large Strip/Tile Offsets/ByteCounts arrays");
572
0
        return 0;
573
0
    }
574
18.8k
    if (td->td_planarconfig == PLANARCONFIG_SEPARATE)
575
0
        td->td_stripsperimage /= td->td_samplesperpixel;
576
18.8k
    td->td_stripoffset_p = (uint64_t *)_TIFFCheckMalloc(
577
18.8k
        tif, td->td_nstrips, sizeof(uint64_t), "for \"StripOffsets\" array");
578
18.8k
    td->td_stripbytecount_p = (uint64_t *)_TIFFCheckMalloc(
579
18.8k
        tif, td->td_nstrips, sizeof(uint64_t), "for \"StripByteCounts\" array");
580
18.8k
    if (td->td_stripoffset_p == NULL || td->td_stripbytecount_p == NULL)
581
0
        return (0);
582
    /*
583
     * Place data at the end-of-file
584
     * (by setting offsets to zero).
585
     */
586
18.8k
    _TIFFmemset(td->td_stripoffset_p, 0, td->td_nstrips * sizeof(uint64_t));
587
18.8k
    _TIFFmemset(td->td_stripbytecount_p, 0, td->td_nstrips * sizeof(uint64_t));
588
18.8k
    TIFFSetFieldBit(tif, FIELD_STRIPOFFSETS);
589
18.8k
    TIFFSetFieldBit(tif, FIELD_STRIPBYTECOUNTS);
590
18.8k
    return (1);
591
18.8k
}
592
#undef isUnspecified
593
594
/*
595
 * Verify file is writable and that the directory
596
 * information is setup properly.  In doing the latter
597
 * we also "freeze" the state of the directory so
598
 * that important information is not changed.
599
 */
600
int TIFFWriteCheck(TIFF *tif, int tiles, const char *module)
601
39.3k
{
602
39.3k
    if (tif->tif_mode == O_RDONLY)
603
0
    {
604
0
        TIFFErrorExtR(tif, module, "File not open for writing");
605
0
        return (0);
606
0
    }
607
39.3k
    if (tiles ^ isTiled(tif))
608
0
    {
609
0
        TIFFErrorExtR(tif, module,
610
0
                      tiles ? "Can not write tiles to a striped image"
611
0
                            : "Can not write scanlines to a tiled image");
612
0
        return (0);
613
0
    }
614
615
39.3k
    _TIFFFillStriles(tif);
616
617
    /*
618
     * On the first write verify all the required information
619
     * has been setup and initialize any data structures that
620
     * had to wait until directory information was set.
621
     * Note that a lot of our work is assumed to remain valid
622
     * because we disallow any of the important parameters
623
     * from changing after we start writing (i.e. once
624
     * TIFF_BEENWRITING is set, TIFFSetField will only allow
625
     * the image's length to be changed).
626
     */
627
39.3k
    if (!TIFFFieldSet(tif, FIELD_IMAGEDIMENSIONS))
628
0
    {
629
0
        TIFFErrorExtR(tif, module,
630
0
                      "Must set \"ImageWidth\" before writing data");
631
0
        return (0);
632
0
    }
633
39.3k
    if (tif->tif_dir.td_stripoffset_p == NULL && !TIFFSetupStrips(tif))
634
0
    {
635
0
        tif->tif_dir.td_nstrips = 0;
636
0
        TIFFErrorExtR(tif, module, "No space for %s arrays",
637
0
                      isTiled(tif) ? "tile" : "strip");
638
0
        return (0);
639
0
    }
640
39.3k
    if (isTiled(tif))
641
0
    {
642
0
        tif->tif_tilesize = TIFFTileSize(tif);
643
0
        if (tif->tif_tilesize == 0)
644
0
            return (0);
645
0
    }
646
39.3k
    else
647
39.3k
        tif->tif_tilesize = (tmsize_t)(-1);
648
39.3k
    tif->tif_scanlinesize = TIFFScanlineSize(tif);
649
39.3k
    if (tif->tif_scanlinesize == 0)
650
21.0k
        return (0);
651
18.3k
    tif->tif_flags |= TIFF_BEENWRITING;
652
653
18.3k
    if (tif->tif_dir.td_stripoffset_entry.tdir_tag != 0 &&
654
18.3k
        tif->tif_dir.td_stripoffset_entry.tdir_count == 0 &&
655
18.3k
        tif->tif_dir.td_stripoffset_entry.tdir_type == 0 &&
656
18.3k
        tif->tif_dir.td_stripoffset_entry.tdir_offset.toff_long8 == 0 &&
657
18.3k
        tif->tif_dir.td_stripbytecount_entry.tdir_tag != 0 &&
658
18.3k
        tif->tif_dir.td_stripbytecount_entry.tdir_count == 0 &&
659
18.3k
        tif->tif_dir.td_stripbytecount_entry.tdir_type == 0 &&
660
18.3k
        tif->tif_dir.td_stripbytecount_entry.tdir_offset.toff_long8 == 0 &&
661
18.3k
        !(tif->tif_flags & TIFF_DIRTYDIRECT))
662
0
    {
663
0
        TIFFForceStrileArrayWriting(tif);
664
0
    }
665
666
18.3k
    return (1);
667
39.3k
}
668
669
/*
670
 * Setup the raw data buffer used for encoding.
671
 */
672
int TIFFWriteBufferSetup(TIFF *tif, void *bp, tmsize_t size)
673
18.3k
{
674
18.3k
    static const char module[] = "TIFFWriteBufferSetup";
675
676
18.3k
    if (tif->tif_rawdata)
677
0
    {
678
0
        if (tif->tif_flags & TIFF_MYBUFFER)
679
0
        {
680
0
            _TIFFfreeExt(tif, tif->tif_rawdata);
681
0
            tif->tif_flags &= ~TIFF_MYBUFFER;
682
0
        }
683
0
        tif->tif_rawdata = NULL;
684
0
    }
685
18.3k
    if (size == (tmsize_t)(-1))
686
18.3k
    {
687
18.3k
        size = (isTiled(tif) ? tif->tif_tilesize : TIFFStripSize(tif));
688
689
        /* Adds 10% margin for cases where compression would expand a bit */
690
18.3k
        if (size < TIFF_TMSIZE_T_MAX - size / 10)
691
18.3k
            size += size / 10;
692
        /*
693
         * Make raw data buffer at least 8K
694
         */
695
18.3k
        if (size < 8 * 1024)
696
734
            size = 8 * 1024;
697
18.3k
        bp = NULL; /* NB: force malloc */
698
18.3k
    }
699
18.3k
    if (bp == NULL)
700
18.3k
    {
701
18.3k
        bp = _TIFFmallocExt(tif, size);
702
18.3k
        if (bp == NULL)
703
0
        {
704
0
            TIFFErrorExtR(tif, module, "No space for output buffer");
705
0
            return (0);
706
0
        }
707
18.3k
        tif->tif_flags |= TIFF_MYBUFFER;
708
18.3k
    }
709
0
    else
710
0
        tif->tif_flags &= ~TIFF_MYBUFFER;
711
18.3k
    tif->tif_rawdata = (uint8_t *)bp;
712
18.3k
    tif->tif_rawdatasize = size;
713
18.3k
    tif->tif_rawcc = 0;
714
18.3k
    tif->tif_rawcp = tif->tif_rawdata;
715
18.3k
    tif->tif_flags |= TIFF_BUFFERSETUP;
716
18.3k
    return (1);
717
18.3k
}
718
719
/*
720
 * Grow the strip data structures by delta strips.
721
 */
722
static int TIFFGrowStrips(TIFF *tif, uint32_t delta, const char *module)
723
0
{
724
0
    TIFFDirectory *td = &tif->tif_dir;
725
0
    uint64_t *new_stripoffset;
726
0
    uint64_t *new_stripbytecount;
727
728
0
    assert(td->td_planarconfig == PLANARCONFIG_CONTIG);
729
0
    new_stripoffset = (uint64_t *)_TIFFreallocExt(
730
0
        tif, td->td_stripoffset_p, (td->td_nstrips + delta) * sizeof(uint64_t));
731
0
    new_stripbytecount = (uint64_t *)_TIFFreallocExt(
732
0
        tif, td->td_stripbytecount_p,
733
0
        (td->td_nstrips + delta) * sizeof(uint64_t));
734
0
    if (new_stripoffset == NULL || new_stripbytecount == NULL)
735
0
    {
736
0
        if (new_stripoffset)
737
0
            _TIFFfreeExt(tif, new_stripoffset);
738
0
        if (new_stripbytecount)
739
0
            _TIFFfreeExt(tif, new_stripbytecount);
740
0
        td->td_nstrips = 0;
741
0
        TIFFErrorExtR(tif, module, "No space to expand strip arrays");
742
0
        return (0);
743
0
    }
744
0
    td->td_stripoffset_p = new_stripoffset;
745
0
    td->td_stripbytecount_p = new_stripbytecount;
746
0
    _TIFFmemset(td->td_stripoffset_p + td->td_nstrips, 0,
747
0
                delta * sizeof(uint64_t));
748
0
    _TIFFmemset(td->td_stripbytecount_p + td->td_nstrips, 0,
749
0
                delta * sizeof(uint64_t));
750
0
    td->td_nstrips += delta;
751
0
    tif->tif_flags |= TIFF_DIRTYDIRECT;
752
753
0
    return (1);
754
0
}
755
756
/*
757
 * Append the data to the specified strip.
758
 */
759
static int TIFFAppendToStrip(TIFF *tif, uint32_t strip, uint8_t *data,
760
                             tmsize_t cc)
761
867k
{
762
867k
    static const char module[] = "TIFFAppendToStrip";
763
867k
    TIFFDirectory *td = &tif->tif_dir;
764
867k
    uint64_t m;
765
867k
    int64_t old_byte_count = -1;
766
767
867k
    if (tif->tif_curoff == 0)
768
863k
        tif->tif_lastvalidoff = 0;
769
770
867k
    if (td->td_stripoffset_p[strip] == 0 || tif->tif_curoff == 0)
771
863k
    {
772
863k
        assert(td->td_nstrips > 0);
773
774
863k
        if (td->td_stripbytecount_p[strip] != 0 &&
775
863k
            td->td_stripoffset_p[strip] != 0 &&
776
863k
            td->td_stripbytecount_p[strip] >= (uint64_t)cc)
777
0
        {
778
            /*
779
             * There is already tile data on disk, and the new tile
780
             * data we have will fit in the same space.  The only
781
             * aspect of this that is risky is that there could be
782
             * more data to append to this strip before we are done
783
             * depending on how we are getting called.
784
             */
785
0
            if (!SeekOK(tif, td->td_stripoffset_p[strip]))
786
0
            {
787
0
                TIFFErrorExtR(tif, module, "Seek error at scanline %lu",
788
0
                              (unsigned long)tif->tif_row);
789
0
                return (0);
790
0
            }
791
792
0
            tif->tif_lastvalidoff =
793
0
                td->td_stripoffset_p[strip] + td->td_stripbytecount_p[strip];
794
0
        }
795
863k
        else
796
863k
        {
797
            /*
798
             * Seek to end of file, and set that as our location to
799
             * write this strip.
800
             */
801
863k
            td->td_stripoffset_p[strip] = TIFFSeekFile(tif, 0, SEEK_END);
802
863k
            tif->tif_flags |= TIFF_DIRTYSTRIP;
803
863k
        }
804
805
863k
        tif->tif_curoff = td->td_stripoffset_p[strip];
806
807
        /*
808
         * We are starting a fresh strip/tile, so set the size to zero.
809
         */
810
863k
        old_byte_count = td->td_stripbytecount_p[strip];
811
863k
        td->td_stripbytecount_p[strip] = 0;
812
863k
    }
813
814
867k
    m = tif->tif_curoff + cc;
815
867k
    if (!(tif->tif_flags & TIFF_BIGTIFF))
816
867k
        m = (uint32_t)m;
817
867k
    if ((m < tif->tif_curoff) || (m < (uint64_t)cc))
818
0
    {
819
0
        TIFFErrorExtR(tif, module, "Maximum TIFF file size exceeded");
820
0
        return (0);
821
0
    }
822
823
867k
    if (tif->tif_lastvalidoff != 0 && m > tif->tif_lastvalidoff &&
824
867k
        td->td_stripbytecount_p[strip] > 0)
825
0
    {
826
        /* Ouch: we have detected that we are rewriting in place a strip/tile */
827
        /* with several calls to TIFFAppendToStrip(). The first call was with */
828
        /* a size smaller than the previous size of the strip/tile, so we */
829
        /* opted to rewrite in place, but a following call causes us to go */
830
        /* outsize of the strip/tile area, so we have to finally go for a */
831
        /* append-at-end-of-file strategy, and start by moving what we already
832
         */
833
        /* wrote. */
834
0
        tmsize_t tempSize;
835
0
        void *temp;
836
0
        uint64_t offsetRead;
837
0
        uint64_t offsetWrite;
838
0
        uint64_t toCopy = td->td_stripbytecount_p[strip];
839
840
0
        if (toCopy < 1024 * 1024)
841
0
            tempSize = (tmsize_t)toCopy;
842
0
        else
843
0
            tempSize = 1024 * 1024;
844
845
0
        offsetRead = td->td_stripoffset_p[strip];
846
0
        offsetWrite = TIFFSeekFile(tif, 0, SEEK_END);
847
848
0
        m = offsetWrite + toCopy + cc;
849
0
        if (!(tif->tif_flags & TIFF_BIGTIFF) && m != (uint32_t)m)
850
0
        {
851
0
            TIFFErrorExtR(tif, module, "Maximum TIFF file size exceeded");
852
0
            return (0);
853
0
        }
854
855
0
        temp = _TIFFmallocExt(tif, tempSize);
856
0
        if (temp == NULL)
857
0
        {
858
0
            TIFFErrorExtR(tif, module, "No space for output buffer");
859
0
            return (0);
860
0
        }
861
862
0
        tif->tif_flags |= TIFF_DIRTYSTRIP;
863
864
0
        td->td_stripoffset_p[strip] = offsetWrite;
865
0
        td->td_stripbytecount_p[strip] = 0;
866
867
        /* Move data written by previous calls to us at end of file */
868
0
        while (toCopy > 0)
869
0
        {
870
0
            if (!SeekOK(tif, offsetRead))
871
0
            {
872
0
                TIFFErrorExtR(tif, module, "Seek error");
873
0
                _TIFFfreeExt(tif, temp);
874
0
                return (0);
875
0
            }
876
0
            if (!ReadOK(tif, temp, tempSize))
877
0
            {
878
0
                TIFFErrorExtR(tif, module, "Cannot read");
879
0
                _TIFFfreeExt(tif, temp);
880
0
                return (0);
881
0
            }
882
0
            if (!SeekOK(tif, offsetWrite))
883
0
            {
884
0
                TIFFErrorExtR(tif, module, "Seek error");
885
0
                _TIFFfreeExt(tif, temp);
886
0
                return (0);
887
0
            }
888
0
            if (!WriteOK(tif, temp, tempSize))
889
0
            {
890
0
                TIFFErrorExtR(tif, module, "Cannot write");
891
0
                _TIFFfreeExt(tif, temp);
892
0
                return (0);
893
0
            }
894
0
            offsetRead += tempSize;
895
0
            offsetWrite += tempSize;
896
0
            td->td_stripbytecount_p[strip] += tempSize;
897
0
            toCopy -= tempSize;
898
0
        }
899
0
        _TIFFfreeExt(tif, temp);
900
901
        /* Append the data of this call */
902
0
        offsetWrite += cc;
903
0
        m = offsetWrite;
904
0
    }
905
906
867k
    if (!WriteOK(tif, data, cc))
907
0
    {
908
0
        TIFFErrorExtR(tif, module, "Write error at scanline %lu",
909
0
                      (unsigned long)tif->tif_row);
910
0
        return (0);
911
0
    }
912
867k
    tif->tif_curoff = m;
913
867k
    td->td_stripbytecount_p[strip] += cc;
914
915
867k
    if ((int64_t)td->td_stripbytecount_p[strip] != old_byte_count)
916
867k
        tif->tif_flags |= TIFF_DIRTYSTRIP;
917
918
867k
    return (1);
919
867k
}
920
921
/*
922
 * Internal version of TIFFFlushData that can be
923
 * called by ``encodestrip routines'' w/o concern
924
 * for infinite recursion.
925
 */
926
int TIFFFlushData1(TIFF *tif)
927
885k
{
928
885k
    if (tif->tif_rawcc > 0 && tif->tif_flags & TIFF_BUF4WRITE)
929
867k
    {
930
867k
        if (!isFillOrder(tif, tif->tif_dir.td_fillorder) &&
931
867k
            (tif->tif_flags & TIFF_NOBITREV) == 0)
932
0
            TIFFReverseBits((uint8_t *)tif->tif_rawdata, tif->tif_rawcc);
933
867k
        if (!TIFFAppendToStrip(
934
867k
                tif, isTiled(tif) ? tif->tif_curtile : tif->tif_curstrip,
935
867k
                tif->tif_rawdata, tif->tif_rawcc))
936
0
        {
937
            /* We update those variables even in case of error since there's */
938
            /* code that doesn't really check the return code of this */
939
            /* function */
940
0
            tif->tif_rawcc = 0;
941
0
            tif->tif_rawcp = tif->tif_rawdata;
942
0
            return (0);
943
0
        }
944
867k
        tif->tif_rawcc = 0;
945
867k
        tif->tif_rawcp = tif->tif_rawdata;
946
867k
    }
947
885k
    return (1);
948
885k
}
949
950
/*
951
 * Set the current write offset.  This should only be
952
 * used to set the offset to a known previous location
953
 * (very carefully), or to 0 so that the next write gets
954
 * appended to the end of the file.
955
 */
956
void TIFFSetWriteOffset(TIFF *tif, toff_t off)
957
18.8k
{
958
18.8k
    tif->tif_curoff = off;
959
18.8k
    tif->tif_lastvalidoff = 0;
960
18.8k
}