Coverage Report

Created: 2025-11-06 07:08

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/jbig2dec/jbig2_generic.c
Line
Count
Source
1
/* Copyright (C) 2001-2023 Artifex Software, Inc.
2
   All Rights Reserved.
3
4
   This software is provided AS-IS with no warranty, either express or
5
   implied.
6
7
   This software is distributed under license and may not be copied,
8
   modified or distributed except as expressly authorized under the terms
9
   of the license contained in the file LICENSE in this distribution.
10
11
   Refer to licensing information at http://www.artifex.com or contact
12
   Artifex Software, Inc.,  39 Mesa Street, Suite 108A, San Francisco,
13
   CA 94129, USA, for further information.
14
*/
15
16
/*
17
    jbig2dec
18
*/
19
20
/**
21
 * Generic region handlers.
22
 **/
23
24
#ifdef HAVE_CONFIG_H
25
#include "config.h"
26
#endif
27
#include "os_types.h"
28
29
#include <stddef.h>
30
#include <string.h>             /* memcpy(), memset() */
31
32
#ifdef OUTPUT_PBM
33
#include <stdio.h>
34
#endif
35
36
#include "jbig2.h"
37
#include "jbig2_priv.h"
38
#include "jbig2_arith.h"
39
#include "jbig2_generic.h"
40
#include "jbig2_image.h"
41
#include "jbig2_mmr.h"
42
#include "jbig2_page.h"
43
#include "jbig2_segment.h"
44
45
/*
46
This is an explanation of the unoptimized and optimized generic
47
region decoder implementations below, wherein we try to explain
48
all the magic numbers.
49
50
The generic region decoders decode the output pixels one row at a
51
time, top to bottom. Within each row the pixels are decoded left
52
to right. The input for the arithmetic integer decoder used to
53
decode each pixel is a context consisting of up to 16 previously
54
decoded pixels. These pixels are chosen according to a predefined
55
template placed relative to the location of the pixel to be
56
decoded (6.2.5.3 figures 3, 4, 5 and 6). There are four different
57
template that may be used (6.2.5.3). The template to use is
58
determined by GBTEMPLATE. GBTEMPLATE is set in the symbol
59
dictionary (6.5.8.1), generic region (7.4.6.4), or when decoding
60
a halftone region's gray-scale image (annex C.5).
61
62
Most of the pixels in each template have fixed locations relative
63
to the pixel to be decoded. However, all templates have at least
64
one adaptive pixel. The adaptive pixels have nominal locations,
65
but these locations may be changed by GBAT. GBAT is set in the
66
symbol dictionary (7.4.2.1.2), generic region (7.4.6.1), or hard
67
coded as for halftone patterns (6.7.5).
68
69
Adaptive pixels are restricted to fall within a field of
70
previously decoded pixels relative to the pixel to be decoded
71
(figure 7). The relative Y-coordinate for these adaptive pixels
72
may vary between -128 and 0. The relative X-coordinate may vary
73
between -128 and +127 (however, if the Y-coordinate is 0 the
74
range of the X-coordinate is further restricted to -128 to -1
75
since the pixels at locations 0 to +127 have not yet been
76
decoded). If a template refers to a pixel location that reside
77
outside of the image boundaries its value is assumed to be 0.
78
79
UNOPTIMIZED DECODER
80
81
The unoptimized decoders first check the contents of GBAT. If
82
GBAT specifies that any of the adaptive pixels reside outside the
83
allowed field the decoding is aborted. Next, each row is
84
processed top to bottom, left to right, one pixel at a time. For
85
each pixel a context is created containing the bit values of the
86
pixels that fall inside the template.
87
88
The order these bits are stored in the context is implementation
89
dependent (6.2.5.3). We store the bit values in the CONTEXT
90
variable from LSB to MSB, starting with the value of the pixel to
91
the left of the current pixel, continuing right to left, bottom
92
to top following the template. Using the CONTEXT created from
93
these pixel values, the arithmetic integer decoder retrieves the
94
pixel value, which is then written into the output image.
95
96
Example when GBTEMPLATE is 2:
97
98
The figure below represents a pixel grid of the output image.
99
Each pixel is a single bit in the image. The pixel "OO" in the
100
figure below is about to be decoded. The pixels "??" have not
101
been decoded yet. The CONTEXT variable is constructed by
102
combining the bit values from the pixels referred to by the
103
template, shifted to their corresponding bit position.
104
105
     .    .    .    .    .    .    .    .
106
     .    .    .    .    .    .    .    .
107
  ...+----+----+----+----+----+----+----+...
108
     |    |    | X9 | X8 | X7 |    |    |
109
  ...+----+----+----+----+----+----+----+...
110
     |    | X6 | X5 | X4 | X3 | A1 |    |
111
  ...+----+----+----+----+----+----+----+...
112
     |    | X2 | X1 | OO | ?? | ?? | ?? |
113
  ...+----+----+----+----+----+----+----+...
114
     .    .    .    .    .    .    .    .
115
     .    .    .    .    .    .    .    .
116
117
In the table below pixel OO is assumed to be at coordinate (x, y).
118
119
Bit 9: Pixel at location (x-1, y-2) (This is fixed pixel X9)
120
Bit 8: Pixel at location (x  , y-2) (This is fixed pixel X8)
121
Bit 7: Pixel at location (x+1, y-2) (This is fixed pixel X7)
122
Bit 6: Pixel at location (x-2, y-1) (This is fixed pixel X6)
123
Bit 5: Pixel at location (x-1, y-1) (This is fixed pixel X5)
124
Bit 4: Pixel at location (x  , y-1) (This is fixed pixel X4)
125
Bit 3: Pixel at location (x+1, y-1) (This is fixed pixel X3)
126
Bit 2: Pixel at location (x+2, y-1) (This is adaptive pixel A1)
127
Bit 1: Pixel at location (x-2, y  ) (This is fixed pixel X2)
128
Bit 0: Pixel at location (x-1, y  ) (This is fixed pixel X1)
129
130
The location of adaptive pixel A1 may not always be at the
131
nominal location (x+2, y-1). It could be at any pixel location to
132
the left or above OO as specified by GBAT, e.g. at the location
133
(x-128, y+127).
134
135
OPTIMIZED DECODER
136
137
The optimized decoders work differently. They strive to avoid
138
recreating the arithmetic integer decoder context from scratch
139
for every pixel decoded. Instead they reuse part of the CONTEXT
140
used to compute the previous pixel (the pixel to left of the one
141
now being decoded). They also keep two sliding windows of pixel
142
bit values from the two rows of pixels immediately above the
143
pixel to be decoded. These are stored in the 32-bit variables
144
line_m1 (row above the pixel to be decoded) and line_m2 (row
145
above that of line_m1). These optimized decoders ONLY work for
146
the nominal adaptive pixel locations since these locations are
147
hard-coded into the implementation.
148
149
The bit ordering in the CONTEXT variable is identical to the
150
unoptimized case described above.
151
152
The optimized decoders decode the output pixels one row at a
153
time, top to bottom. Within each row the pixels are decoded in
154
batches of up to eight pixels at a time (except possibly the
155
right most batch which may be less than eight pixels). The
156
batches in a row are decoded in sequence from left to right.
157
Within each such batch the pixels are decoded in sequence from
158
left to right.
159
160
Before decoding the pixels in a row the two sliding windows of
161
pixel values are reset. The first eight pixels of the row above
162
the pixel to be decoded is stored in line_m1, while line_m2
163
stores the first eight pixels of the row above that of line_m1.
164
165
The figure below illustrates the situation where the template has
166
been placed so that the decoded pixel OO is the very first pixel
167
of a row. It also gives labels to various pixels that we will
168
refer to below.
169
170
             .    .    .    .    .    .    .    .    .    .    .
171
             |    .    .    .    .    .    .    .    .    .    .
172
   +    +    +----+----+----+----+----+----+----+----+----+----+...
173
          X9 | X8 | X7 | m1 | m2 | m3 | m4 | m5 | m6 | m7 |    |
174
   +    +    +----+----+----+----+----+----+----+----+----+----+...
175
     X6   X5 | X4 | X3 | A1 | n1 | n2 | n3 | n4 | n5 | n6 | n7 |
176
   +    +    +----+----+----+----+----+----+----+----+----+----+...
177
     X2   X1 | OO |    |    |    |    |    |    |    |    |    |
178
   +    +    +----+----+----+----+----+----+----+----+----+----+...
179
             |    .    .    .    .    .    .    .    .    .    .
180
             .    .    .    .    .    .    .    .    .    .    .
181
182
The pixels X1, X2, X5, X6 and X9 all reside outside the left edge
183
of the image. These pixels (like all others outside the image)
184
can according to 6.2.5.2 be assumed to be 0. line_m1 stores n5
185
through n1 as well as A1, and X3 through X6. line_m2 stores m6
186
through m1 as well as X7 through X9. The bits in line_m2 are also
187
shifted left four bits as seen below.
188
189
15 14 13 12 11 10  9  8  7  6  5  4  3  2  1  0 | bit position
190
------------------------------------------------+------------------
191
 0  0  0  0  0  0 X6 X5 X4 X3 A1 n1 n2 n3 n4 n5 | line_m1
192
 0  0  0 X9 X8 X7 m1 m2 m3 m4 m5 m6  0  0  0  0 | line_m2
193
194
The way line_m1 and line_m2 are stored means we can simply shift
195
them by the same amount to move the sliding window.
196
197
The bit order in line_m1 and line_m2 matches the ordering in the
198
CONTEXT variable. Each bit for the 'A' and 'X' pixels in line_m1
199
and line_m2 correspond to the equivalent bits in CONTEXT, only
200
shifted right by 3 bits. Thus X3 is bit 3 in CONTEXT and bit 6 in
201
line_m1, etc.
202
203
The initial arithmetic integer decoder context is created and
204
stored in the CONTEXT variable by masking, shifting, and bitwise
205
ORing the contents of line_m1 and line_m2. The "CONTEXT contents"
206
row is only shown for clarity, it is not present in the code.
207
208
15 14 13 12 11 10  9  8  7  6  5  4  3  2  1  0 | bit position
209
------------------------------------------------+---------------------------
210
 0  0  0  0  0  0  0  0  0 X6 X5 X4 X3 A1 n1 n2 | line_m1 >> 3
211
 0  0  0  0  0  0  0  0  0  1  1  1  1  1  0  0 | mask for line_m1 (0x7c)
212
 0  0  0  0  0  0  0  0  0 X6 X5 X4 X3 A1  0  0 | line_m1 AND mask
213
------------------------------------------------+---------------------------
214
 0  0  0  0  0  0 X9 X8 X7 m1 m2 m3 m4 m5 m6  0 | line_m2 >> 3
215
 0  0  0  0  0  0  1  1  1  0  0  0  0  0  0  0 | mask for line_m2 (0x380)
216
 0  0  0  0  0  0 X9 X8 X7  0  0  0  0  0  0  0 | line_m2 AND mask
217
------------------------------------------------+---------------------------
218
 0  0  0  0  0  0 X9 X8 X7 X6 X5 X4 X3 A1  0  0 | CONTEXT = line_m1 OR line_m2
219
------------------------------------------------+---------------------------
220
 0  0  0  0  0  0 X9 X8 X7 X6 X5 X4 X3 A1 X2 X1 | CONTEXT contents
221
222
Each batch is normally 8 bits, but at the right edge of the image
223
we may have fewer pixels to decode. The minor_width is how many
224
pixels the current batch should decode, with a counter variable
225
x_minor to keep track of the current pixel being decoded.
226
227
In order to process a new batch of pixels, unless we're at the
228
rightmost batch of pixels, we need to refill the sliding window
229
variables with eight new bits. Looking at the diagram above we
230
can see that in order to decode eight pixels starting with O0
231
we'll need to have bits up to pixel 'n7' for line_m1 and 'm7' for
232
line_m2 available (A1 and X7 moved right 7 times). To do this
233
simply and quickly, we shift line_m1 left by 8 bits, and OR in
234
the next byte from corresponding row. Likewise for line_m2, but
235
the next byte from the image is also shifted left by 4 bits to
236
compensate for line_m2 having the four least significant bits
237
unused.
238
239
These new eight bits contain the bit values of the eight pixels
240
to the right of those already present in line_m1 and line_m2. We
241
call these new bits m7 through mE, and n6 through nD, as
242
illustrated below.
243
244
23 22 21 20 19 18 17 16 15 14 13 12 11 10  9  8  7  6  5  4  3  2  1  0 | bit position
245
------------------------------------------------------------------------+-------------
246
 0  0  0  0  0  0  0  0  0  0  0  0  0  0 X6 X5 X4 X3 A1 n1 n2 n3 n4 n5 | original line_m1
247
 0  0  0  0  0  0 X6 X5 X4 X3 A1 n1 n2 n3 n4 n5  0  0  0  0  0  0  0  0 | line_m1 shifted left by 8
248
 0  0  0  0  0  0 X6 X5 X4 X3 A1 n1 n2 n3 n4 n5 n6 n7 n8 n9 nA nB nC nD | line_m1 with new bits ORed in
249
------------------------------------------------------------------------+-------------
250
 0  0  0  0  0  0  0  0  0  0  0 X9 X8 X7 m1 m2 m3 m4 m5 m6  0  0  0  0 | original line_m2
251
 0  0  0 X9 X8 X7 m1 m2 m3 m4 m5 m6  0  0  0  0  0  0  0  0  0  0  0  0 | line_m2 shifted left by 8
252
 0  0  0 X9 X8 X7 m1 m2 m3 m4 m5 m6 m7 m8 m9 mA mB mC mD mE  0  0  0  0 | line_m2 with new bits ORed in
253
254
             .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
255
             |    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
256
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
257
          X9 | X8 | X7 | m1 | m2 | m3 | m4 | m5 | m6 | m7 | m8 | m9 | mA | mB | mC | mD | mE |    |    |    |
258
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
259
     X6   X5 | X4 | X3 | A1 | n1 | n2 | n3 | n4 | n5 | n6 | n7 | n8 | n9 | nA | nB | nC | nD |    |    |    |
260
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
261
     X2   X1 | OO |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |
262
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
263
             |    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
264
             .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
265
266
CONTEXT, line_m1 and line_m2 now contain all necessary bits to
267
decode a full batch of eight pixels.
268
269
The first pixel in the batch is decoded using this CONTEXT. After
270
that, for each following pixel we need to update the CONTEXT
271
using both the last decoded pixel value and new bits from line_m1
272
and line_m2.
273
274
             .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
275
             |    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
276
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
277
         (X9)|_X8_|_X7_|>m1<| m2 | m3 | m4 | m5 | m6 | m7 | m8 | m9 | mA | mB | mC | mD | mE |    |    |    |
278
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
279
    (X6) _X5_|_X4_|_X3_|_A1_|>n1<| n2 | n3 | n4 | n5 | n6 | n7 | n8 | n9 | nA | nB | nC | nD |    |    |    |
280
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
281
    (X2) _X1_|>OO<| oo |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |    |
282
   +    +    +----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+----+...
283
             |    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
284
             .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .    .
285
286
This figure illustrates what happens when the same template is
287
overlaid on itself shifted one pixel to the right in order to
288
decode the next pixel. Pixels marked with _  _ are pixels that
289
are present in both templates' CONTEXTs and can be reused. Pixels
290
marked with (  ) are pixels from the first template that are no
291
longer necessary and can be removed from CONTEXT. Pixels marked
292
with >  < are new pixels that were not part of the original
293
CONTEXT, and so need to be moved into the CONTEXT at the
294
appropriate locations. In general the leftmost pixels of each
295
template row can be forgotten, while new pixels are needed at the
296
right most location of each row.
297
298
The CONTEXT corresponding to the current pixel OO and how it is
299
masked is shown below. Note how the left most pixel of each row
300
of the template is NOT propagated to the CONTEXT, these pixels
301
are X2, X6 and X9. This is done by having the mask being 0 at the
302
corresponding locations.
303
304
 9  8  7  6  5  4  3  2  1  0 | bit position
305
------------------------------+-------------
306
X9 X8 X7 X6 X5 X4 X3 A1 X2 X1 | pixel values from CONTEXT
307
 0  1  1  0  1  1  1  1  0  1 | reused pixel bit value mask (0x1bd)
308
 0 X8 X7  0 X5 X4 X3 A1  0 X1 | reused pixel values from CONTEXT
309
310
Next the CONTEXT is shifted left by one bit to make it reference
311
the next pixel to be decoded. The pixel bit value we just decoded
312
is then written into the bit corresponding to X1. The sliding
313
windows in line_m1 and line_m2 are both shifted (10 - x_minor)
314
bits to the right to make the needed pixels' bit values appear at
315
the correct positions to be ORed into CONTEXT. Note that this
316
shift amount depends on which bit in the batch is currently being
317
computed, as is given by the x_minor counter. In the example
318
below we assume that x_minor is 0.
319
320
 9  8  7  6  5  4  3  2  1  0 | bit position
321
------------------------------+--------------
322
 0 X8 X7  0 X5 X4 X3 A1  0  0 | reused pixels from CONTEXT
323
X8 X7  0 X5 X4 X3 A1  0  0  0 | reused pixels shifted left 1 bit
324
------------------------------+--------------
325
X8 X7  0 X5 X4 X3 A1  0 X1 OO | new CONTEXT with current pixel at LSB
326
------------------------------+--------------
327
 0  0 X6 X5 X4 X3 A1 n1 n2 n3 | line_m1 shifted (10 - x_minor) bits to the right
328
 0  0  0  0  0  0  0  1  0  0 | mask for new adaptive pixel one row above (0x4)
329
X8 X7  0 X5 X4 X3 A1 n1 X1 OO | new CONTEXT with new adaptive pixel
330
------------------------------+--------------
331
X8 X7 m1 m2 m3 m4 m5 m6 m7 m8 | line_m2 with new bits ORed in
332
 0  0  1  0  0  0  0  0  0  0 | mask for new pixel two rows above (0x80)
333
X8 X7 m1 X5 X4 X3 A1 n1 X1 OO | new CONTEXT with new pixel
334
335
This makes the computation of the new CONTEXT be:
336
337
NEWCONTEXT = (CONTEXT & 0x1bd) << 1
338
NEWCONTEXT |= newbit;
339
NEWCONTEXT |= (line_m1 >> (10-x_minor)) & 0x4;
340
NEWCONTEXT |= (line_m2 >> (10-x_minor)) & 0x80;
341
342
The optimized decoding functions for GBTEMPLATE 0, 1 and 3 all
343
work similarly. */
344
345
/* Get a bit. No bounds checking. */
346
static inline int
347
jbig2_image_get_pixel_fast(Jbig2Image *image, int x, int y)
348
1.27G
{
349
1.27G
    const int byte = (x >> 3) + y * image->stride;
350
1.27G
    const int bit = 7 - (x & 7);
351
352
1.27G
    return ((image->data[byte] >> bit) & 1);
353
1.27G
}
354
355
/* return the appropriate context size for the given template */
356
int
357
jbig2_generic_stats_size(Jbig2Ctx *ctx, int template)
358
15.1k
{
359
15.1k
    int stats_size = template == 0 ? 1 << 16 : template == 1 ? 1 << 13 : 1 << 10;
360
361
15.1k
    return stats_size;
362
15.1k
}
363
364
static int
365
jbig2_decode_generic_template0(Jbig2Ctx *ctx,
366
                               Jbig2Segment *segment,
367
                               const Jbig2GenericRegionParams *params, Jbig2ArithState *as,
368
                               Jbig2Image *image, Jbig2ArithCx *GB_stats)
369
9.14k
{
370
9.14k
    const uint32_t GBW = image->width;
371
9.14k
    const uint32_t GBH = image->height;
372
9.14k
    const uint32_t rowstride = image->stride;
373
9.14k
    uint32_t x, y;
374
9.14k
    byte *line2 = NULL;
375
9.14k
    byte *line1 = NULL;
376
9.14k
    byte *gbreg_line = (byte *) image->data;
377
378
#ifdef OUTPUT_PBM
379
    printf("P4\n%d %d\n", GBW, GBH);
380
#endif
381
382
9.14k
    if (GBW <= 0)
383
0
        return 0;
384
385
55.0k
    for (y = 0; y < GBH; y++) {
386
45.9k
        uint32_t CONTEXT;
387
45.9k
        uint32_t line_m1;
388
45.9k
        uint32_t line_m2;
389
45.9k
        uint32_t padded_width = (GBW + 7) & -8;
390
391
45.9k
        line_m1 = line1 ? line1[0] : 0;
392
45.9k
        line_m2 = line2 ? line2[0] << 6 : 0;
393
45.9k
        CONTEXT = (line_m1 & 0x7f0) | (line_m2 & 0xf800);
394
395
        /* 6.2.5.7 3d */
396
95.2M
        for (x = 0; x < padded_width; x += 8) {
397
95.1M
            byte result = 0;
398
95.1M
            int x_minor;
399
95.1M
            int minor_width = GBW - x > 8 ? 8 : GBW - x;
400
401
95.1M
            if (line1)
402
72.0M
                line_m1 = (line_m1 << 8) | (x + 8 < GBW ? line1[(x >> 3) + 1] : 0);
403
404
95.1M
            if (line2)
405
60.0M
                line_m2 = (line_m2 << 8) | (x + 8 < GBW ? line2[(x >> 3) + 1] << 6 : 0);
406
407
            /* This is the speed-critical inner loop. */
408
856M
            for (x_minor = 0; x_minor < minor_width; x_minor++) {
409
761M
                int bit;
410
411
761M
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
412
761M
                if (bit < 0)
413
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template0 optimized");
414
761M
                result |= bit << (7 - x_minor);
415
761M
                CONTEXT = ((CONTEXT & 0x7bf7) << 1) | bit | ((line_m1 >> (7 - x_minor)) & 0x10) | ((line_m2 >> (7 - x_minor)) & 0x800);
416
761M
            }
417
95.1M
            gbreg_line[x >> 3] = result;
418
95.1M
        }
419
#ifdef OUTPUT_PBM
420
        fwrite(gbreg_line, 1, rowstride, stdout);
421
#endif
422
45.9k
        line2 = line1;
423
45.9k
        line1 = gbreg_line;
424
45.9k
        gbreg_line += rowstride;
425
45.9k
    }
426
427
9.14k
    return 0;
428
9.14k
}
429
430
#define pixel_outside_field(x, y) \
431
164k
    ((y) < -128 || (y) > 0 || (x) < -128 || ((y) < 0 && (x) > 127) || ((y) == 0 && (x) >= 0))
432
433
static int
434
jbig2_decode_generic_template0_unopt(Jbig2Ctx *ctx,
435
                                     Jbig2Segment *segment,
436
                                     const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
437
8.16k
{
438
8.16k
    const uint32_t GBW = image->width;
439
8.16k
    const uint32_t GBH = image->height;
440
8.16k
    uint32_t CONTEXT;
441
8.16k
    uint32_t x, y;
442
8.16k
    int bit;
443
444
8.16k
    if (pixel_outside_field(params->gbat[0], params->gbat[1]) ||
445
8.15k
        pixel_outside_field(params->gbat[2], params->gbat[3]) ||
446
8.15k
        pixel_outside_field(params->gbat[4], params->gbat[5]) ||
447
8.14k
        pixel_outside_field(params->gbat[6], params->gbat[7]))
448
34
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
449
34
                           "adaptive template pixel is out of field");
450
451
174M
    for (y = 0; y < GBH; y++) {
452
174M
        uint32_t out_byte = 0;
453
174M
        int out_bits_to_go_in_byte = 8;
454
174M
        uint8_t *d = &image->data[image->stride * y];
455
174M
        uint32_t pd = 0;
456
174M
        uint32_t ppd = 0;
457
174M
        uint8_t *pline = NULL;
458
174M
        uint8_t *ppline = NULL;
459
174M
        if (y >= 1)
460
174M
        {
461
174M
            pline  = &image->data[image->stride * (y-1)];
462
174M
            pd = (*pline++ << 8);
463
174M
            if (GBW > 8)
464
330k
                pd |= *pline++;
465
174M
        }
466
174M
        if (y >= 2) {
467
174M
            ppline = &image->data[image->stride * (y-2)];
468
174M
            ppd = (*ppline++ << 8);
469
174M
            if (GBW > 8)
470
322k
                ppd |= *ppline++;
471
174M
        }
472
1.24G
        for (x = 0; x < GBW; x++) {
473
1.07G
            if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
474
29.4M
                bit = 0;
475
1.04G
            } else {
476
1.04G
                CONTEXT  = out_byte & 0x000F; /* First 4 pixels */
477
1.04G
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 4;
478
1.04G
                CONTEXT |= (pd>>8) & 0x03E0; /* Next 5 pixels */
479
1.04G
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[2], y + params->gbat[3]) << 10;
480
1.04G
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[4], y + params->gbat[5]) << 11;
481
1.04G
                CONTEXT |= (ppd>>2) & 0x7000; /* Next 3 pixels */
482
1.04G
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[6], y + params->gbat[7]) << 15;
483
1.04G
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
484
1.04G
                if (bit < 0)
485
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template0 unoptimized");
486
1.04G
            }
487
1.07G
            pd = pd<<1;
488
1.07G
            ppd = ppd<<1;
489
1.07G
            out_byte = (out_byte<<1) | bit;
490
1.07G
            out_bits_to_go_in_byte--;
491
1.07G
            *d = out_byte<<out_bits_to_go_in_byte;
492
1.07G
            if (out_bits_to_go_in_byte == 0) {
493
93.4M
                out_bits_to_go_in_byte = 8;
494
93.4M
                d++;
495
93.4M
                if (x+9 < GBW && pline != NULL) {
496
41.4M
                    pd |= *pline++;
497
41.4M
                    if (ppline != NULL)
498
32.2M
                        ppd |= *ppline++;
499
41.4M
                }
500
93.4M
            }
501
1.07G
        }
502
174M
        if (out_bits_to_go_in_byte != 8)
503
168M
            *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
504
174M
    }
505
8.13k
    return 0;
506
8.13k
}
507
508
static int
509
jbig2_decode_generic_template1_unopt(Jbig2Ctx *ctx,
510
                                     Jbig2Segment *segment,
511
                                     const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
512
3.59k
{
513
3.59k
    const uint32_t GBW = image->width;
514
3.59k
    const uint32_t GBH = image->height;
515
3.59k
    uint32_t CONTEXT;
516
3.59k
    uint32_t x, y;
517
3.59k
    int bit;
518
519
3.59k
    if (pixel_outside_field(params->gbat[0], params->gbat[1]))
520
8
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
521
8
                           "adaptive template pixel is out of field");
522
523
147M
    for (y = 0; y < GBH; y++) {
524
147M
        uint32_t out_byte = 0;
525
147M
        int out_bits_to_go_in_byte = 8;
526
147M
        uint8_t *d = &image->data[image->stride * y];
527
147M
        uint32_t pd = 0;
528
147M
        uint32_t ppd = 0;
529
147M
        uint8_t *pline = NULL;
530
147M
        uint8_t *ppline = NULL;
531
147M
        if (y >= 1) {
532
147M
            pline  = &image->data[image->stride * (y-1)];
533
147M
            pd = (*pline++ << 8);
534
147M
            if (GBW > 8)
535
214k
                pd |= *pline++;
536
147M
        }
537
147M
        if (y >= 2) {
538
147M
            ppline = &image->data[image->stride * (y-2)];
539
147M
            ppd = (*ppline++ << 8);
540
147M
            if (GBW > 8)
541
212k
                ppd |= *ppline++;
542
147M
        }
543
1.37G
        for (x = 0; x < GBW; x++) {
544
1.23G
            if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
545
51.1M
                bit = 0;
546
1.17G
            } else {
547
1.17G
                CONTEXT  = out_byte & 0x0007; /* First 3 pixels */
548
1.17G
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 3;
549
1.17G
                CONTEXT |= (pd>>9) & 0x01F0; /* Next 5 pixels */
550
1.17G
                CONTEXT |= (ppd>>4) & 0x1E00; /* Next 4 pixels */
551
1.17G
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
552
1.17G
                if (bit < 0)
553
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template1 unoptimized");
554
1.17G
            }
555
1.23G
            pd = pd<<1;
556
1.23G
            ppd = ppd<<1;
557
1.23G
            out_byte = (out_byte<<1) | bit;
558
1.23G
            out_bits_to_go_in_byte--;
559
1.23G
            *d = out_byte<<out_bits_to_go_in_byte;
560
1.23G
            if (out_bits_to_go_in_byte == 0) {
561
122M
                out_bits_to_go_in_byte = 8;
562
122M
                d++;
563
122M
                if (x+9 < GBW && pline != NULL) {
564
45.5M
                    pd |= *pline++;
565
45.5M
                    if (ppline != NULL)
566
35.1M
                        ppd |= *ppline++;
567
45.5M
                }
568
122M
            }
569
1.23G
        }
570
147M
        if (out_bits_to_go_in_byte != 8)
571
139M
            *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
572
147M
    }
573
3.58k
    return 0;
574
3.58k
}
575
576
static int
577
jbig2_decode_generic_template1(Jbig2Ctx *ctx,
578
                               Jbig2Segment *segment,
579
                               const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
580
1.74k
{
581
1.74k
    const uint32_t GBW = image->width;
582
1.74k
    const uint32_t GBH = image->height;
583
1.74k
    const uint32_t rowstride = image->stride;
584
1.74k
    uint32_t x, y;
585
1.74k
    byte *line2 = NULL;
586
1.74k
    byte *line1 = NULL;
587
1.74k
    byte *gbreg_line = (byte *) image->data;
588
589
#ifdef OUTPUT_PBM
590
    printf("P4\n%d %d\n", GBW, GBH);
591
#endif
592
593
1.74k
    if (GBW <= 0)
594
0
        return 0;
595
596
32.5k
    for (y = 0; y < GBH; y++) {
597
30.7k
        uint32_t CONTEXT;
598
30.7k
        uint32_t line_m1;
599
30.7k
        uint32_t line_m2;
600
30.7k
        uint32_t padded_width = (GBW + 7) & -8;
601
602
30.7k
        line_m1 = line1 ? line1[0] : 0;
603
30.7k
        line_m2 = line2 ? line2[0] << 5 : 0;
604
30.7k
        CONTEXT = ((line_m1 >> 1) & 0x1f8) | ((line_m2 >> 1) & 0x1e00);
605
606
        /* 6.2.5.7 3d */
607
76.7M
        for (x = 0; x < padded_width; x += 8) {
608
76.6M
            byte result = 0;
609
76.6M
            int x_minor;
610
76.6M
            int minor_width = GBW - x > 8 ? 8 : GBW - x;
611
612
76.6M
            if (line1)
613
38.3M
                line_m1 = (line_m1 << 8) | (x + 8 < GBW ? line1[(x >> 3) + 1] : 0);
614
615
76.6M
            if (line2)
616
24.7M
                line_m2 = (line_m2 << 8) | (x + 8 < GBW ? line2[(x >> 3) + 1] << 5 : 0);
617
618
            /* This is the speed-critical inner loop. */
619
689M
            for (x_minor = 0; x_minor < minor_width; x_minor++) {
620
613M
                int bit;
621
622
613M
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
623
613M
                if (bit < 0)
624
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template1 optimized");
625
613M
                result |= bit << (7 - x_minor);
626
613M
                CONTEXT = ((CONTEXT & 0xefb) << 1) | bit | ((line_m1 >> (8 - x_minor)) & 0x8) | ((line_m2 >> (8 - x_minor)) & 0x200);
627
613M
            }
628
76.6M
            gbreg_line[x >> 3] = result;
629
76.6M
        }
630
#ifdef OUTPUT_PBM
631
        fwrite(gbreg_line, 1, rowstride, stdout);
632
#endif
633
30.7k
        line2 = line1;
634
30.7k
        line1 = gbreg_line;
635
30.7k
        gbreg_line += rowstride;
636
30.7k
    }
637
638
1.74k
    return 0;
639
1.74k
}
640
641
static int
642
jbig2_decode_generic_template2_unopt(Jbig2Ctx *ctx,
643
                               Jbig2Segment *segment,
644
                               const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
645
37.9k
{
646
37.9k
    const uint32_t GBW = image->width;
647
37.9k
    const uint32_t GBH = image->height;
648
37.9k
    uint32_t CONTEXT;
649
37.9k
    uint32_t x, y;
650
37.9k
    int bit;
651
652
37.9k
    if (pixel_outside_field(params->gbat[0], params->gbat[1]))
653
8
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
654
8
                           "adaptive template pixel is out of field");
655
656
129M
    for (y = 0; y < GBH; y++) {
657
129M
        uint32_t out_byte = 0;
658
129M
        int out_bits_to_go_in_byte = 8;
659
129M
        uint8_t *d = &image->data[image->stride * y];
660
129M
        uint8_t *pline  = &image->data[image->stride * (y-1)];
661
129M
        uint8_t *ppline = &image->data[image->stride * (y-2)];
662
129M
        uint32_t pd = 0;
663
129M
        uint32_t ppd = 0;
664
129M
        if (y > 0) {
665
129M
            pd = (*pline++ << 8);
666
129M
            if (GBW > 8)
667
405k
                pd |= *pline++;
668
129M
            if (y > 1) {
669
129M
                ppd = (*ppline++ << 8);
670
129M
                if (GBW > 8)
671
367k
                    ppd |= *ppline++;
672
129M
            }
673
129M
        }
674
1.37G
        for (x = 0; x < GBW; x++) {
675
1.24G
            if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
676
62.4M
                bit = 0;
677
1.18G
            } else {
678
1.18G
                CONTEXT  = out_byte & 0x003; /* First 2 pixels */
679
1.18G
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 2;
680
1.18G
                CONTEXT |= (pd>>11) & 0x078; /* Next 4 pixels */
681
1.18G
                CONTEXT |= (ppd>>7) & 0x380; /* Next 3 pixels */
682
1.18G
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
683
1.18G
                if (bit < 0)
684
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template2 unoptimized");
685
1.18G
            }
686
1.24G
            pd = pd<<1;
687
1.24G
            ppd = ppd<<1;
688
1.24G
            out_byte = (out_byte<<1) | bit;
689
1.24G
            out_bits_to_go_in_byte--;
690
1.24G
            *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
691
1.24G
            if (out_bits_to_go_in_byte == 0) {
692
135M
                out_bits_to_go_in_byte = 8;
693
135M
                d++;
694
135M
                if (x+9 < GBW && y > 0) {
695
43.7M
                    pd |= *pline++;
696
43.7M
                    if (y > 1)
697
36.9M
                        ppd |= *ppline++;
698
43.7M
                }
699
135M
            }
700
1.24G
        }
701
129M
        if (out_bits_to_go_in_byte != 8)
702
128M
            *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
703
129M
    }
704
705
37.9k
    return 0;
706
37.9k
}
707
708
static int
709
jbig2_decode_generic_template2(Jbig2Ctx *ctx,
710
                                Jbig2Segment *segment,
711
                                const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
712
3.37k
{
713
3.37k
    const uint32_t GBW = image->width;
714
3.37k
    const uint32_t GBH = image->height;
715
3.37k
    const uint32_t rowstride = image->stride;
716
3.37k
    uint32_t x, y;
717
3.37k
    byte *line2 = NULL;
718
3.37k
    byte *line1 = NULL;
719
3.37k
    byte *gbreg_line = (byte *) image->data;
720
721
#ifdef OUTPUT_PBM
722
    printf("P4\n%d %d\n", GBW, GBH);
723
#endif
724
725
3.37k
    if (GBW <= 0)
726
0
        return 0;
727
728
143M
    for (y = 0; y < GBH; y++) {
729
143M
        uint32_t CONTEXT;
730
143M
        uint32_t line_m1;
731
143M
        uint32_t line_m2;
732
143M
        uint32_t padded_width = (GBW + 7) & -8;
733
734
143M
        line_m1 = line1 ? line1[0] : 0;
735
143M
        line_m2 = line2 ? line2[0] << 4 : 0;
736
143M
        CONTEXT = ((line_m1 >> 3) & 0x7c) | ((line_m2 >> 3) & 0x380);
737
738
        /* 6.2.5.7 3d */
739
308M
        for (x = 0; x < padded_width; x += 8) {
740
164M
            byte result = 0;
741
164M
            int x_minor;
742
164M
            int minor_width = GBW - x > 8 ? 8 : GBW - x;
743
744
164M
            if (line1)
745
155M
                line_m1 = (line_m1 << 8) | (x + 8 < GBW ? line1[(x >> 3) + 1] : 0);
746
747
164M
            if (line2)
748
147M
                line_m2 = (line_m2 << 8) | (x + 8 < GBW ? line2[(x >> 3) + 1] << 4 : 0);
749
750
            /* This is the speed-critical inner loop. */
751
649M
            for (x_minor = 0; x_minor < minor_width; x_minor++) {
752
485M
                int bit;
753
754
485M
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
755
485M
                if (bit < 0)
756
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template2 optimized");
757
485M
                result |= bit << (7 - x_minor);
758
485M
                CONTEXT = ((CONTEXT & 0x1bd) << 1) | bit | ((line_m1 >> (10 - x_minor)) & 0x4) | ((line_m2 >> (10 - x_minor)) & 0x80);
759
485M
            }
760
164M
            gbreg_line[x >> 3] = result;
761
164M
        }
762
#ifdef OUTPUT_PBM
763
        fwrite(gbreg_line, 1, rowstride, stdout);
764
#endif
765
143M
        line2 = line1;
766
143M
        line1 = gbreg_line;
767
143M
        gbreg_line += rowstride;
768
143M
    }
769
770
3.37k
    return 0;
771
3.37k
}
772
773
static int
774
jbig2_decode_generic_template3(Jbig2Ctx *ctx,
775
                               Jbig2Segment *segment,
776
                               const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
777
6.31k
{
778
6.31k
    const uint32_t GBW = image->width;
779
6.31k
    const uint32_t GBH = image->height;
780
6.31k
    const uint32_t rowstride = image->stride;
781
6.31k
    byte *line1 = NULL;
782
6.31k
    byte *gbreg_line = (byte *) image->data;
783
6.31k
    uint32_t x, y;
784
785
#ifdef OUTPUT_PBM
786
    printf("P4\n%d %d\n", GBW, GBH);
787
#endif
788
789
6.31k
    if (GBW <= 0)
790
0
        return 0;
791
792
88.0k
    for (y = 0; y < GBH; y++) {
793
81.7k
        uint32_t CONTEXT;
794
81.7k
        uint32_t line_m1;
795
81.7k
        uint32_t padded_width = (GBW + 7) & -8;
796
797
81.7k
        line_m1 = line1 ? line1[0] : 0;
798
81.7k
        CONTEXT = (line_m1 >> 1) & 0x3f0;
799
800
        /* 6.2.5.7 3d */
801
116M
        for (x = 0; x < padded_width; x += 8) {
802
116M
            byte result = 0;
803
116M
            int x_minor;
804
116M
            int minor_width = GBW - x > 8 ? 8 : GBW - x;
805
806
116M
            if (line1)
807
101M
                line_m1 = (line_m1 << 8) | (x + 8 < GBW ? line1[(x >> 3) + 1] : 0);
808
809
            /* This is the speed-critical inner loop. */
810
1.05G
            for (x_minor = 0; x_minor < minor_width; x_minor++) {
811
933M
                int bit;
812
813
933M
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
814
933M
                if (bit < 0)
815
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template3 optimized");
816
933M
                result |= bit << (7 - x_minor);
817
933M
                CONTEXT = ((CONTEXT & 0x1f7) << 1) | bit | ((line_m1 >> (8 - x_minor)) & 0x10);
818
933M
            }
819
116M
            gbreg_line[x >> 3] = result;
820
116M
        }
821
#ifdef OUTPUT_PBM
822
        fwrite(gbreg_line, 1, rowstride, stdout);
823
#endif
824
81.7k
        line1 = gbreg_line;
825
81.7k
        gbreg_line += rowstride;
826
81.7k
    }
827
828
6.31k
    return 0;
829
6.31k
}
830
831
static int
832
jbig2_decode_generic_template3_unopt(Jbig2Ctx *ctx,
833
                                     Jbig2Segment *segment,
834
                                     const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
835
5.22k
{
836
5.22k
    const uint32_t GBW = image->width;
837
5.22k
    const uint32_t GBH = image->height;
838
5.22k
    uint32_t CONTEXT;
839
5.22k
    uint32_t x, y;
840
5.22k
    int bit;
841
842
5.22k
    if (pixel_outside_field(params->gbat[0], params->gbat[1]))
843
5
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
844
5
                           "adaptive template pixel is out of field");
845
846
133M
    for (y = 0; y < GBH; y++) {
847
133M
        uint32_t out_byte = 0;
848
133M
        int out_bits_to_go_in_byte = 8;
849
133M
        uint8_t *d = &image->data[image->stride * y];
850
133M
        uint8_t *pline  = &image->data[image->stride * (y-1)];
851
133M
        uint32_t pd = 0;
852
133M
        if (y > 0) {
853
133M
            pd = (*pline++ << 8);
854
133M
            if (GBW > 8)
855
594k
                pd |= *pline++;
856
133M
        }
857
1.22G
        for (x = 0; x < GBW; x++) {
858
1.09G
            if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
859
66.2M
                bit = 0;
860
1.02G
            } else {
861
1.02G
                CONTEXT  = out_byte & 0x00F; /* First 4 pixels */
862
1.02G
                CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 4;
863
1.02G
                CONTEXT |= (pd>>9) & 0x3E0; /* Next 5 pixels */
864
1.02G
                bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
865
1.02G
                if (bit < 0)
866
0
                    return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template3 unoptimized");
867
1.02G
            }
868
1.09G
            pd = pd<<1;
869
1.09G
            out_byte = (out_byte<<1) | bit;
870
1.09G
            out_bits_to_go_in_byte--;
871
1.09G
            *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
872
1.09G
            if (out_bits_to_go_in_byte == 0) {
873
114M
                out_bits_to_go_in_byte = 8;
874
114M
                d++;
875
114M
                if (x+9 < GBW && y > 0)
876
65.0M
                    pd |= *pline++;
877
114M
            }
878
1.09G
        }
879
133M
        if (out_bits_to_go_in_byte != 8)
880
125M
            *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
881
133M
    }
882
5.22k
    return 0;
883
5.22k
}
884
885
static void
886
copy_prev_row(Jbig2Image *image, int row)
887
337M
{
888
337M
    if (!row) {
889
        /* no previous row */
890
6.36k
        memset(image->data, 0, image->stride);
891
337M
    } else {
892
        /* duplicate data from the previous row */
893
337M
        uint8_t *src = image->data + (row - 1) * image->stride;
894
895
337M
        memcpy(src + image->stride, src, image->stride);
896
337M
    }
897
337M
}
898
899
static int
900
jbig2_decode_generic_template0_TPGDON(Jbig2Ctx *ctx,
901
                                      Jbig2Segment *segment,
902
                                      const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
903
7.72k
{
904
7.72k
    const uint32_t GBW = image->width;
905
7.72k
    const uint32_t GBH = image->height;
906
7.72k
    uint32_t CONTEXT;
907
7.72k
    uint32_t x, y;
908
7.72k
    int LTP = 0;
909
7.72k
    int gmin, gmax;
910
7.72k
    uint32_t left, right, top;
911
912
7.72k
    if (pixel_outside_field(params->gbat[0], params->gbat[1]) ||
913
7.71k
        pixel_outside_field(params->gbat[2], params->gbat[3]) ||
914
7.70k
        pixel_outside_field(params->gbat[4], params->gbat[5]) ||
915
7.69k
        pixel_outside_field(params->gbat[6], params->gbat[7]))
916
44
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
917
44
                           "adaptive template pixel is out of field");
918
919
    /* JBig2 has 'standard' values for gbat (see 6.2.5.4 of the spec).
920
     * Have an optimised version for those locations. This greatly
921
     * simplifies some of the fetches. It's almost like they thought
922
     * it through. */
923
7.68k
    if (params->gbat[0] ==  3 && params->gbat[1] == -1 &&
924
3.15k
        params->gbat[2] == -3 && params->gbat[3] == -1 &&
925
2.15k
        params->gbat[4] ==  2 && params->gbat[5] == -2 &&
926
1.94k
        params->gbat[6] == -2 && params->gbat[7] == -2)
927
435
    {
928
120M
        for (y = 0; y < GBH; y++) {
929
120M
            int bit = jbig2_arith_decode(ctx, as, &GB_stats[0x9B25]);
930
120M
            if (bit < 0)
931
0
                return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template0 TPGDON1");
932
120M
            LTP ^= bit;
933
120M
            if (!LTP) {
934
85.5M
                uint32_t out_byte = 0;
935
85.5M
                int out_bits_to_go_in_byte = 8;
936
85.5M
                uint8_t *d = &image->data[image->stride * y];
937
85.5M
                uint8_t *pline  = y > 0 ? &image->data[image->stride * (y-1)] : NULL;
938
85.5M
                uint8_t *ppline = y > 1 ? &image->data[image->stride * (y-2)] : NULL;
939
85.5M
                uint32_t pd = 0;
940
85.5M
                uint32_t ppd = 0;
941
85.5M
                if (y > 0 && pline) {
942
85.5M
                    pd = (*pline++ << 8);
943
85.5M
                    if (GBW > 8)
944
1.78M
                        pd |= *pline++;
945
85.5M
                    if (y > 1 && ppline) {
946
85.5M
                        ppd = (*ppline++ << 8);
947
85.5M
                        if (GBW > 8)
948
1.78M
                            ppd |= *ppline++;
949
85.5M
                    }
950
85.5M
                }
951
661M
                for (x = 0; x < GBW; x++) {
952
575M
                    if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
953
0
                        bit = 0;
954
575M
                    } else {
955
575M
                        CONTEXT  = out_byte & 0x00F; /* First 4 pixels */
956
575M
                        CONTEXT |= (pd>>8) & 0x7F0; /* Next 7 pixels */
957
575M
                        CONTEXT |= (ppd>>2) & 0xF800; /* Final 5 pixels */
958
575M
                        bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
959
575M
                        if (bit < 0)
960
0
                            return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template0 TPGDON2");
961
575M
                    }
962
575M
                    pd = pd<<1;
963
575M
                    ppd = ppd<<1;
964
575M
                    out_byte = (out_byte<<1) | bit;
965
575M
                    out_bits_to_go_in_byte--;
966
575M
                    if (out_bits_to_go_in_byte == 0) {
967
56.2M
                        out_bits_to_go_in_byte = 8;
968
56.2M
                        *d++ = (uint8_t)out_byte;
969
56.2M
                        if (x+9 < GBW && y > 0 && pline) {
970
24.6M
                            pd |= *pline++;
971
24.6M
                            if (y > 1 && ppline)
972
22.2M
                                ppd |= *ppline++;
973
24.6M
                        }
974
56.2M
                    }
975
575M
                }
976
85.5M
                if (out_bits_to_go_in_byte != 8)
977
83.7M
                    *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
978
85.5M
            } else {
979
35.1M
                copy_prev_row(image, y);
980
35.1M
            }
981
120M
        }
982
435
        return 0;
983
435
    }
984
985
    /* We divide the width into 3 regions 0..left...right...GBW,
986
     * between left and right, we know that our accesses will never
987
     * step outside the image, enabling us to use faster accessors. */
988
7.24k
    left = 4;
989
7.24k
    right = 2;
990
7.24k
    gmin = gmax = params->gbat[0];
991
7.24k
    if (params->gbat[2] < gmin)
992
2.68k
        gmin = params->gbat[2];
993
7.24k
    if (gmax < params->gbat[2])
994
2.32k
        gmax = params->gbat[2];
995
7.24k
    if (params->gbat[4] < gmin)
996
1.01k
        gmin = params->gbat[4];
997
7.24k
    if (gmax < params->gbat[4])
998
1.03k
        gmax = params->gbat[4];
999
7.24k
    if (params->gbat[6] < gmin)
1000
1.07k
        gmin = params->gbat[6];
1001
7.24k
    if (gmax < params->gbat[6])
1002
3.30k
        gmax = params->gbat[6];
1003
7.24k
    if ((int)left < -gmin)
1004
4.82k
        left = -gmin;
1005
7.24k
    if ((int)right < gmax)
1006
3.08k
        right = gmax;
1007
7.24k
    if (right > GBW)
1008
1.90k
        right = GBW;
1009
7.24k
    right = GBW - right;
1010
    /* So 0 <= x < left or right <= x < GBW needs bounds checking. */
1011
1012
    /* Now we do the same for the height, but here there is no bottom
1013
     * region, as we only ever look up for y. */
1014
7.24k
    top = 2;
1015
7.24k
    gmin = params->gbat[1];
1016
7.24k
    if (params->gbat[3] < gmin)
1017
755
        gmin = params->gbat[3];
1018
7.24k
    if (params->gbat[5] < gmin)
1019
3.26k
        gmin = params->gbat[5];
1020
7.24k
    if (params->gbat[7] < gmin)
1021
1.86k
        gmin = params->gbat[7];
1022
7.24k
    if ((int)top < -gmin)
1023
5.52k
        top = -gmin;
1024
    /* So 0 <= y < top needs bounds checking. */
1025
1026
112M
    for (y = 0; y < GBH; y++) {
1027
112M
        int bit = jbig2_arith_decode(ctx, as, &GB_stats[0x9B25]);
1028
112M
        if (bit < 0)
1029
0
            return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template0 TPGDON1");
1030
112M
        LTP ^= bit;
1031
112M
        if (!LTP) {
1032
70.9M
            uint32_t out_byte = 0;
1033
70.9M
            int out_bits_to_go_in_byte = 8;
1034
70.9M
            uint8_t *d = &image->data[image->stride * y];
1035
70.9M
            uint8_t *pline  = y > 0 ? &image->data[image->stride * (y-1)] : NULL;
1036
70.9M
            uint8_t *ppline = y > 1 ? &image->data[image->stride * (y-2)] : NULL;
1037
70.9M
            uint32_t pd = 0;
1038
70.9M
            uint32_t ppd = 0;
1039
70.9M
            if (y > 0 && pline) {
1040
70.9M
                pd = (*pline++ << 8);
1041
70.9M
                if (GBW > 8)
1042
2.42M
                    pd |= *pline++;
1043
70.9M
                if (y > 1 && ppline) {
1044
70.9M
                    ppd = (*ppline++ << 8);
1045
70.9M
                    if (GBW > 8)
1046
2.42M
                        ppd |= *ppline++;
1047
70.9M
                }
1048
70.9M
            }
1049
816M
            for (x = 0; x < GBW; x++) {
1050
745M
                if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
1051
0
                    bit = 0;
1052
745M
                } else {
1053
745M
                    CONTEXT = out_byte & 0x000F; /* First 4 pixels */
1054
745M
                    CONTEXT |= (pd>>8) & 0x03E0; /* Skip one, next 5 pixels */
1055
745M
                    CONTEXT |= (ppd>>2) & 0x7000; /* Skip 2, next 3 pixels, skip one */
1056
745M
                    if (y >= top && x >= left && x < right)
1057
317M
                    {
1058
317M
                        CONTEXT |= jbig2_image_get_pixel_fast(image, x + params->gbat[0], y + params->gbat[1]) << 4;
1059
317M
                        CONTEXT |= jbig2_image_get_pixel_fast(image, x + params->gbat[2], y + params->gbat[3]) << 10;
1060
317M
                        CONTEXT |= jbig2_image_get_pixel_fast(image, x + params->gbat[4], y + params->gbat[5]) << 11;
1061
317M
                        CONTEXT |= jbig2_image_get_pixel_fast(image, x + params->gbat[6], y + params->gbat[7]) << 15;
1062
317M
                    }
1063
427M
                    else
1064
427M
                    {
1065
427M
                        CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 4;
1066
427M
                        CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[2], y + params->gbat[3]) << 10;
1067
427M
                        CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[4], y + params->gbat[5]) << 11;
1068
427M
                        CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[6], y + params->gbat[7]) << 15;
1069
427M
                    }
1070
745M
                    bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
1071
745M
                    if (bit < 0)
1072
0
                        return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template0 TPGDON2");
1073
745M
                }
1074
745M
                pd = pd<<1;
1075
745M
                ppd = ppd<<1;
1076
745M
                out_byte = (out_byte<<1) | bit;
1077
745M
                out_bits_to_go_in_byte--;
1078
745M
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1079
745M
                if (out_bits_to_go_in_byte == 0) {
1080
77.7M
                    out_bits_to_go_in_byte = 8;
1081
77.7M
                    d++;
1082
77.7M
                    if (x+9 < GBW && y > 0 && pline) {
1083
54.7M
                        pd |= *pline++;
1084
54.7M
                        if (y > 1 && ppline)
1085
51.7M
                            ppd |= *ppline++;
1086
54.7M
                    }
1087
77.7M
                }
1088
745M
            }
1089
70.9M
            if (out_bits_to_go_in_byte != 8)
1090
65.7M
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1091
70.9M
        } else {
1092
41.9M
            copy_prev_row(image, y);
1093
41.9M
        }
1094
112M
    }
1095
1096
7.24k
    return 0;
1097
7.24k
}
1098
1099
static int
1100
jbig2_decode_generic_template1_TPGDON(Jbig2Ctx *ctx,
1101
                                      Jbig2Segment *segment,
1102
                                      const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
1103
3.63k
{
1104
3.63k
    const uint32_t GBW = image->width;
1105
3.63k
    const uint32_t GBH = image->height;
1106
3.63k
    uint32_t CONTEXT;
1107
3.63k
    uint32_t x, y;
1108
3.63k
    int LTP = 0;
1109
1110
3.63k
    if (pixel_outside_field(params->gbat[0], params->gbat[1]))
1111
10
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
1112
10
                           "adaptive template pixel is out of field");
1113
1114
155M
    for (y = 0; y < GBH; y++) {
1115
154M
        int bit = jbig2_arith_decode(ctx, as, &GB_stats[0x0795]);
1116
154M
        if (bit < 0)
1117
0
            return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template1 TPGDON1");
1118
154M
        LTP ^= bit;
1119
154M
        if (!LTP) {
1120
86.8M
            uint32_t out_byte = 0;
1121
86.8M
            int out_bits_to_go_in_byte = 8;
1122
86.8M
            uint8_t *d = &image->data[image->stride * y];
1123
86.8M
            uint8_t *pline  = y > 0 ? &image->data[image->stride * (y-1)] : NULL;
1124
86.8M
            uint8_t *ppline = y > 1 ? &image->data[image->stride * (y-2)] : NULL;
1125
86.8M
            uint32_t pd = 0;
1126
86.8M
            uint32_t ppd = 0;
1127
86.8M
            if (y > 0 && pline) {
1128
86.8M
                pd = (*pline++ << 8);
1129
86.8M
                if (GBW > 8)
1130
5.17M
                    pd |= *pline++;
1131
86.8M
                if (y > 1 && ppline) {
1132
86.8M
                    ppd = (*ppline++ << 8);
1133
86.8M
                    if (GBW > 8)
1134
5.17M
                        ppd |= *ppline++;
1135
86.8M
                }
1136
86.8M
            }
1137
1.16G
            for (x = 0; x < GBW; x++) {
1138
1.08G
                if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
1139
0
                    bit = 0;
1140
1.08G
                } else {
1141
1.08G
                    CONTEXT  = out_byte & 0x0007; /* First 3 pixels */
1142
1.08G
                    CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 3;
1143
1.08G
                    CONTEXT |= (pd>>9) & 0x01F0; /* next 5 pixels */
1144
1.08G
                    CONTEXT |= (ppd>>4) & 0x1E00; /* next 4 pixels */
1145
1.08G
                    bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
1146
1.08G
                    if (bit < 0)
1147
0
                        return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template1 TPGDON2");
1148
1.08G
                }
1149
1.08G
                pd = pd<<1;
1150
1.08G
                ppd = ppd<<1;
1151
1.08G
                out_byte = (out_byte<<1) | bit;
1152
1.08G
                out_bits_to_go_in_byte--;
1153
1.08G
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1154
1.08G
                if (out_bits_to_go_in_byte == 0) {
1155
103M
                    out_bits_to_go_in_byte = 8;
1156
103M
                    d++;
1157
103M
                    if (x+9 < GBW && y > 0 && pline) {
1158
70.0M
                        pd |= *pline++;
1159
70.0M
                        if (y > 1 && ppline)
1160
63.5M
                            ppd |= *ppline++;
1161
70.0M
                    }
1162
103M
                }
1163
1.08G
            }
1164
86.8M
            if (out_bits_to_go_in_byte != 8)
1165
83.8M
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1166
86.8M
        } else {
1167
68.1M
            copy_prev_row(image, y);
1168
68.1M
        }
1169
154M
    }
1170
1171
3.62k
    return 0;
1172
3.62k
}
1173
1174
static int
1175
jbig2_decode_generic_template2_TPGDON(Jbig2Ctx *ctx,
1176
                                      Jbig2Segment *segment,
1177
                                      const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
1178
1.78k
{
1179
1.78k
    const uint32_t GBW = image->width;
1180
1.78k
    const uint32_t GBH = image->height;
1181
1.78k
    uint32_t CONTEXT;
1182
1.78k
    uint32_t x, y;
1183
1.78k
    int LTP = 0;
1184
1185
1.78k
    if (pixel_outside_field(params->gbat[0], params->gbat[1]))
1186
2
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
1187
2
                           "adaptive template pixel is out of field");
1188
1189
253M
    for (y = 0; y < GBH; y++) {
1190
253M
        int bit = jbig2_arith_decode(ctx, as, &GB_stats[0xE5]);
1191
253M
        if (bit < 0)
1192
0
            return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template2 TPGDON1");
1193
253M
        LTP ^= bit;
1194
253M
        if (!LTP) {
1195
152M
            uint32_t out_byte = 0;
1196
152M
            int out_bits_to_go_in_byte = 8;
1197
152M
            uint8_t *d = &image->data[image->stride * y];
1198
152M
            uint8_t *pline  =  y > 0 ? &image->data[image->stride * (y-1)] : NULL;
1199
152M
            uint8_t *ppline = y > 1 ? &image->data[image->stride * (y-2)] : NULL;
1200
152M
            uint32_t pd = 0;
1201
152M
            uint32_t ppd = 0;
1202
152M
            if (y > 0 && pline) {
1203
152M
                pd = (*pline++ << 8);
1204
152M
                if (GBW > 8)
1205
2.70M
                    pd |= *pline++;
1206
152M
                if (y > 1 && ppline) {
1207
152M
                    ppd = (*ppline++ << 8);
1208
152M
                    if (GBW > 8)
1209
2.70M
                        ppd |= *ppline++;
1210
152M
                }
1211
152M
            }
1212
1.30G
            for (x = 0; x < GBW; x++) {
1213
1.14G
                if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
1214
0
                    bit = 0;
1215
1.14G
                } else {
1216
1.14G
                    CONTEXT  = out_byte & 0x003; /* First 2 pixels */
1217
1.14G
                    CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 2;
1218
1.14G
                    CONTEXT |= (pd>>11) & 0x078; /* next 4 pixels */
1219
1.14G
                    CONTEXT |= (ppd>>7) & 0x380; /* next 3 pixels */
1220
1.14G
                    bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
1221
1.14G
                    if (bit < 0)
1222
0
                        return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template2 TPGDON2");
1223
1.14G
                }
1224
1.14G
                pd = pd<<1;
1225
1.14G
                ppd = ppd<<1;
1226
1.14G
                out_byte = (out_byte<<1) | bit;
1227
1.14G
                out_bits_to_go_in_byte--;
1228
1.14G
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1229
1.14G
                if (out_bits_to_go_in_byte == 0) {
1230
104M
                    out_bits_to_go_in_byte = 8;
1231
104M
                    d++;
1232
104M
                    if (x+9 < GBW && y > 0 && pline) {
1233
89.7M
                        pd |= *pline++;
1234
89.7M
                        if (y > 1 && ppline)
1235
57.2M
                            ppd |= *ppline++;
1236
89.7M
                    }
1237
104M
                }
1238
1.14G
            }
1239
152M
            if (out_bits_to_go_in_byte != 8)
1240
146M
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1241
152M
        } else {
1242
101M
            copy_prev_row(image, y);
1243
101M
        }
1244
253M
    }
1245
1246
1.77k
    return 0;
1247
1.77k
}
1248
1249
static int
1250
jbig2_decode_generic_template3_TPGDON(Jbig2Ctx *ctx,
1251
                                      Jbig2Segment *segment,
1252
                                      const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
1253
1.08k
{
1254
1.08k
    const uint32_t GBW = image->width;
1255
1.08k
    const uint32_t GBH = image->height;
1256
1.08k
    uint32_t CONTEXT;
1257
1.08k
    uint32_t x, y;
1258
1.08k
    int LTP = 0;
1259
1260
1.08k
    if (pixel_outside_field(params->gbat[0], params->gbat[1]))
1261
4
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number,
1262
4
                           "adaptive template pixel is out of field");
1263
1264
184M
    for (y = 0; y < GBH; y++) {
1265
184M
        int bit = jbig2_arith_decode(ctx, as, &GB_stats[0x0195]);
1266
184M
        if (bit < 0)
1267
0
            return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template3 TPGDON1");
1268
184M
        LTP ^= bit;
1269
184M
        if (!LTP) {
1270
93.5M
            uint32_t out_byte = 0;
1271
93.5M
            int out_bits_to_go_in_byte = 8;
1272
93.5M
            uint8_t *d = &image->data[image->stride * y];
1273
93.5M
            uint8_t *pline  = y > 0 ? &image->data[image->stride * (y-1)] : NULL;
1274
93.5M
            uint32_t pd = 0;
1275
93.5M
            if (y > 0 && pline) {
1276
93.5M
                pd = (*pline++ << 8);
1277
93.5M
                if (GBW > 8)
1278
1.80M
                    pd |= *pline++;
1279
93.5M
            }
1280
1.08G
            for (x = 0; x < GBW; x++) {
1281
994M
                if (params->USESKIP && jbig2_image_get_pixel(params->SKIP, x, y)) {
1282
0
                    bit = 0;
1283
994M
                } else {
1284
994M
                    CONTEXT  = out_byte & 0x0F; /* First 4 pixels */
1285
994M
                    CONTEXT |= jbig2_image_get_pixel(image, x + params->gbat[0], y + params->gbat[1]) << 4;
1286
994M
                    CONTEXT |= (pd>>9) & 0x3E0; /* next 5 pixels */
1287
994M
                    bit = jbig2_arith_decode(ctx, as, &GB_stats[CONTEXT]);
1288
994M
                    if (bit < 0)
1289
0
                        return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode arithmetic code when handling generic template3 TPGDON2");
1290
994M
                }
1291
994M
                pd = pd<<1;
1292
994M
                out_byte = (out_byte<<1) | bit;
1293
994M
                out_bits_to_go_in_byte--;
1294
994M
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1295
994M
                if (out_bits_to_go_in_byte == 0) {
1296
101M
                    out_bits_to_go_in_byte = 8;
1297
101M
                    d++;
1298
101M
                    if (x+9 < GBW && y > 0 && pline)
1299
69.0M
                        pd |= *pline++;
1300
101M
                }
1301
994M
            }
1302
93.5M
            if (out_bits_to_go_in_byte != 8)
1303
92.2M
                *d = (uint8_t)out_byte<<out_bits_to_go_in_byte;
1304
93.5M
        } else {
1305
91.2M
            copy_prev_row(image, y);
1306
91.2M
        }
1307
184M
    }
1308
1309
1.07k
    return 0;
1310
1.07k
}
1311
1312
static int
1313
jbig2_decode_generic_region_TPGDON(Jbig2Ctx *ctx,
1314
                                   Jbig2Segment *segment,
1315
                                   const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
1316
14.2k
{
1317
14.2k
    switch (params->GBTEMPLATE) {
1318
7.72k
    case 0:
1319
7.72k
        return jbig2_decode_generic_template0_TPGDON(ctx, segment, params, as, image, GB_stats);
1320
3.63k
    case 1:
1321
3.63k
        return jbig2_decode_generic_template1_TPGDON(ctx, segment, params, as, image, GB_stats);
1322
1.78k
    case 2:
1323
1.78k
        return jbig2_decode_generic_template2_TPGDON(ctx, segment, params, as, image, GB_stats);
1324
1.08k
    case 3:
1325
1.08k
        return jbig2_decode_generic_template3_TPGDON(ctx, segment, params, as, image, GB_stats);
1326
14.2k
    }
1327
1328
0
    return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "unsupported GBTEMPLATE (%d)", params->GBTEMPLATE);
1329
14.2k
}
1330
1331
/**
1332
 * jbig2_decode_generic_region: Decode a generic region.
1333
 * @ctx: The context for allocation and error reporting.
1334
 * @segment: A segment reference for error reporting.
1335
 * @params: Decoding parameter set.
1336
 * @as: Arithmetic decoder state.
1337
 * @image: Where to store the decoded data.
1338
 * @GB_stats: Arithmetic stats.
1339
 *
1340
 * Decodes a generic region, according to section 6.2. The caller should
1341
 * pass an already allocated Jbig2Image object for @image
1342
 *
1343
 * Because this API is based on an arithmetic decoding state, it is
1344
 * not suitable for MMR decoding.
1345
 *
1346
 * Return code: 0 on success.
1347
 **/
1348
int
1349
jbig2_decode_generic_region(Jbig2Ctx *ctx,
1350
                            Jbig2Segment *segment, const Jbig2GenericRegionParams *params, Jbig2ArithState *as, Jbig2Image *image, Jbig2ArithCx *GB_stats)
1351
89.7k
{
1352
89.7k
    const int8_t *gbat = params->gbat;
1353
1354
89.7k
    if (!params->MMR && params->TPGDON)
1355
14.2k
        return jbig2_decode_generic_region_TPGDON(ctx, segment, params, as, image, GB_stats);
1356
1357
75.5k
    if (!params->MMR && params->GBTEMPLATE == 0) {
1358
17.3k
        if (!params->USESKIP && gbat[0] == +3 && gbat[1] == -1 && gbat[2] == -3 && gbat[3] == -1 && gbat[4] == +2 && gbat[5] == -2 && gbat[6] == -2 && gbat[7] == -2)
1359
9.14k
            return jbig2_decode_generic_template0(ctx, segment, params, as, image, GB_stats);
1360
8.16k
        else
1361
8.16k
            return jbig2_decode_generic_template0_unopt(ctx, segment, params, as, image, GB_stats);
1362
58.2k
    } else if (!params->MMR && params->GBTEMPLATE == 1) {
1363
5.33k
        if (!params->USESKIP && gbat[0] == +3 && gbat[1] == -1)
1364
1.74k
            return jbig2_decode_generic_template1(ctx, segment, params, as, image, GB_stats);
1365
3.59k
        else
1366
3.59k
            return jbig2_decode_generic_template1_unopt(ctx, segment, params, as, image, GB_stats);
1367
5.33k
    }
1368
52.9k
    else if (!params->MMR && params->GBTEMPLATE == 2) {
1369
41.3k
        if (!params->USESKIP && gbat[0] == 2 && gbat[1] == -1)
1370
3.37k
            return jbig2_decode_generic_template2(ctx, segment, params, as, image, GB_stats);
1371
37.9k
        else
1372
37.9k
            return jbig2_decode_generic_template2_unopt(ctx, segment, params, as, image, GB_stats);
1373
41.3k
    } else if (!params->MMR && params->GBTEMPLATE == 3) {
1374
11.5k
        if (!params->USESKIP && gbat[0] == 2 && gbat[1] == -1)
1375
6.31k
            return jbig2_decode_generic_template3(ctx, segment, params, as, image, GB_stats);
1376
5.22k
        else
1377
5.22k
            return jbig2_decode_generic_template3_unopt(ctx, segment, params, as, image, GB_stats);
1378
11.5k
    }
1379
1380
0
    {
1381
0
        int i;
1382
1383
0
        for (i = 0; i < 8; i++)
1384
0
            jbig2_error(ctx, JBIG2_SEVERITY_DEBUG, segment->number, "gbat[%d] = %d", i, params->gbat[i]);
1385
0
    }
1386
1387
0
    return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "unsupported generic region (MMR=%d, GBTEMPLATE=%d)", params->MMR, params->GBTEMPLATE);
1388
75.5k
}
1389
1390
/**
1391
 * Handler for immediate generic region segments
1392
 */
1393
int
1394
jbig2_immediate_generic_region(Jbig2Ctx *ctx, Jbig2Segment *segment, const byte *segment_data)
1395
18.2k
{
1396
18.2k
    Jbig2RegionSegmentInfo rsi;
1397
18.2k
    byte seg_flags;
1398
18.2k
    int8_t gbat[8];
1399
18.2k
    int offset;
1400
18.2k
    uint32_t gbat_bytes = 0;
1401
18.2k
    Jbig2GenericRegionParams params;
1402
18.2k
    int code = 0;
1403
18.2k
    Jbig2Image *image = NULL;
1404
18.2k
    Jbig2WordStream *ws = NULL;
1405
18.2k
    Jbig2ArithState *as = NULL;
1406
18.2k
    Jbig2ArithCx *GB_stats = NULL;
1407
18.2k
    uint32_t height;
1408
18.2k
    Jbig2Page *page = &ctx->pages[ctx->current_page];
1409
1410
    /* 7.4.6 */
1411
18.2k
    if (segment->data_length < 18)
1412
36
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "segment too short");
1413
1414
18.1k
    jbig2_get_region_segment_info(&rsi, segment_data);
1415
18.1k
    jbig2_error(ctx, JBIG2_SEVERITY_INFO, segment->number, "generic region: %u x %u @ (%u, %u), flags = %02x", rsi.width, rsi.height, rsi.x, rsi.y, rsi.flags);
1416
1417
    /* 7.4.6.4 */
1418
18.1k
    height = rsi.height;
1419
18.1k
    if (segment->rows != UINT32_MAX) {
1420
13.4k
        if (segment->rows > rsi.height)
1421
54
            return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "segment contains more rows than stated in header");
1422
13.4k
        height = segment->rows;
1423
13.4k
    }
1424
1425
    /* 7.4.6.2 */
1426
18.1k
    seg_flags = segment_data[17];
1427
18.1k
    jbig2_error(ctx, JBIG2_SEVERITY_INFO, segment->number, "segment flags = %02x", seg_flags);
1428
18.1k
    if ((seg_flags & 1) && (seg_flags & 6))
1429
352
        jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "MMR is 1, but GBTEMPLATE is not 0");
1430
1431
    /* 7.4.6.3 */
1432
18.1k
    if (!(seg_flags & 1)) {
1433
17.1k
        gbat_bytes = (seg_flags & 6) ? 2 : 8;
1434
17.1k
        if (18 + gbat_bytes > segment->data_length)
1435
8
            return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "segment too short");
1436
17.1k
        memcpy(gbat, segment_data + 18, gbat_bytes);
1437
17.1k
        jbig2_error(ctx, JBIG2_SEVERITY_INFO, segment->number, "gbat: %d, %d", gbat[0], gbat[1]);
1438
17.1k
    }
1439
1440
18.1k
    offset = 18 + gbat_bytes;
1441
1442
    /* Check for T.88 amendment 2 */
1443
18.1k
    if ((seg_flags >> 5) & 1)
1444
45
        return jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "segment uses 12 adaptive template pixels (NYI)");
1445
1446
    /* Table 34 */
1447
18.0k
    params.MMR = seg_flags & 1;
1448
18.0k
    params.GBTEMPLATE = (seg_flags & 6) >> 1;
1449
18.0k
    params.TPGDON = (seg_flags & 8) >> 3;
1450
18.0k
    params.USESKIP = 0;
1451
18.0k
    memcpy(params.gbat, gbat, gbat_bytes);
1452
1453
18.0k
    if (page->height == 0xffffffff && page->striped && page->stripe_size > 0) {
1454
9.14k
        if (rsi.y >= page->end_row + page->stripe_size) {
1455
1.15k
            jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "ignoring %u x %u region at (%u, %u) outside of stripe at row %u covering %u rows, on page of height %u", rsi.width, rsi.height, rsi.x, rsi.y, page->end_row, page->stripe_size, page->image->height);
1456
1.15k
            return 0;
1457
1.15k
        }
1458
7.99k
        if (height > page->end_row + page->stripe_size) {
1459
4.55k
            height = page->end_row + page->stripe_size;
1460
4.55k
        }
1461
8.91k
    } else {
1462
8.91k
        if (rsi.y >= page->height) {
1463
1.32k
            jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "ignoring %u x %u region at (%u, %u) outside of page of height %u", rsi.width, rsi.height, rsi.x, rsi.y, page->height);
1464
1.32k
            return 0;
1465
1.32k
        }
1466
7.58k
        if (height > page->height - rsi .y) {
1467
6.14k
            height = page->height - rsi.y;
1468
6.14k
        }
1469
7.58k
    }
1470
15.5k
    if (height == 0) {
1471
501
        jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "nothing remains of region, ignoring");
1472
501
        return 0;
1473
501
    }
1474
1475
15.0k
    image = jbig2_image_new(ctx, rsi.width, height);
1476
15.0k
    if (image == NULL)
1477
84
        return jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to allocate generic image");
1478
14.9k
    jbig2_error(ctx, JBIG2_SEVERITY_DEBUG, segment->number, "allocated %d x %d image buffer for region decode results", rsi.width, height);
1479
1480
14.9k
    if (params.MMR) {
1481
550
        code = jbig2_decode_generic_mmr(ctx, segment, &params, segment_data + offset, segment->data_length - offset, image);
1482
550
        if (code < 0) {
1483
13
            code = jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode MMR-coded generic region");
1484
13
            goto cleanup;
1485
13
        }
1486
14.4k
    } else {
1487
14.4k
        int stats_size = jbig2_generic_stats_size(ctx, params.GBTEMPLATE);
1488
1489
14.4k
        GB_stats = jbig2_new(ctx, Jbig2ArithCx, stats_size);
1490
14.4k
        if (GB_stats == NULL) {
1491
1
            code = jbig2_error(ctx, JBIG2_SEVERITY_FATAL, segment->number, "failed to allocate arithmetic decoder states when handling immediate generic region");
1492
1
            goto cleanup;
1493
1
        }
1494
14.4k
        memset(GB_stats, 0, stats_size);
1495
1496
14.4k
        ws = jbig2_word_stream_buf_new(ctx, segment_data + offset, segment->data_length - offset);
1497
14.4k
        if (ws == NULL) {
1498
1
            code = jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to allocated word stream when handling immediate generic region");
1499
1
            goto cleanup;
1500
1
        }
1501
14.4k
        as = jbig2_arith_new(ctx, ws);
1502
14.4k
        if (as == NULL) {
1503
9
            code = jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to allocate arithmetic coding state when handling immediate generic region");
1504
9
            goto cleanup;
1505
9
        }
1506
14.4k
        code = jbig2_decode_generic_region(ctx, segment, &params, as, image, GB_stats);
1507
14.4k
        if (code < 0) {
1508
79
            code = jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "failed to decode immediate generic region");
1509
79
            goto cleanup;
1510
79
        }
1511
14.4k
    }
1512
1513
14.8k
    code = jbig2_page_add_result(ctx, &ctx->pages[ctx->current_page], image, rsi.x, rsi.y, rsi.op);
1514
14.8k
    if (code < 0)
1515
655
        code = jbig2_error(ctx, JBIG2_SEVERITY_WARNING, segment->number, "unable to add result to page");
1516
1517
14.9k
cleanup:
1518
14.9k
    jbig2_free(ctx->allocator, as);
1519
14.9k
    jbig2_word_stream_buf_free(ctx, ws);
1520
14.9k
    jbig2_free(ctx->allocator, GB_stats);
1521
14.9k
    jbig2_image_release(ctx, image);
1522
1523
14.9k
    return code;
1524
14.8k
}