Coverage Report

Created: 2023-06-07 06:55

/src/cms_transform_fuzzer.c
Line
Count
Source (jump to first uncovered line)
1
// Copyright 2016 The PDFium Authors. All rights reserved.
2
// Use of this source code is governed by a BSD-style license that can be
3
// found in the LICENSE file.
4
#include <stdint.h>
5
6
#include "lcms2.h"
7
8
5.88k
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
9
5.88k
  cmsHPROFILE srcProfile = cmsOpenProfileFromMem(data, size);
10
5.88k
  if (!srcProfile) return 0;
11
12
5.17k
  cmsHPROFILE dstProfile = cmsCreate_sRGBProfile();
13
5.17k
  if (!dstProfile) {
14
0
    cmsCloseProfile(srcProfile);
15
0
    return 0;
16
0
  }
17
18
5.17k
  cmsColorSpaceSignature srcCS = cmsGetColorSpace(srcProfile);
19
5.17k
  cmsUInt32Number nSrcComponents = cmsChannelsOf(srcCS);
20
5.17k
  cmsUInt32Number srcFormat;
21
5.17k
  if (srcCS == cmsSigLabData) {
22
294
    srcFormat =
23
294
        COLORSPACE_SH(PT_Lab) | CHANNELS_SH(nSrcComponents) | BYTES_SH(0);
24
4.88k
  } else {
25
4.88k
    srcFormat =
26
4.88k
        COLORSPACE_SH(PT_ANY) | CHANNELS_SH(nSrcComponents) | BYTES_SH(1);
27
4.88k
  }
28
29
5.17k
  cmsUInt32Number intent = 0;
30
5.17k
  cmsUInt32Number flags = 0;
31
5.17k
  cmsHTRANSFORM hTransform = cmsCreateTransform(
32
5.17k
      srcProfile, srcFormat, dstProfile, TYPE_BGR_8, intent, flags);
33
5.17k
  cmsCloseProfile(srcProfile);
34
5.17k
  cmsCloseProfile(dstProfile);
35
5.17k
  if (!hTransform) return 0;
36
37
595
  uint8_t output[4];
38
595
  if (T_BYTES(srcFormat) == 0) {  // 0 means double
39
0
    double input[nSrcComponents];
40
0
    for (uint32_t i = 0; i < nSrcComponents; i++) input[i] = 0.5f;
41
0
    cmsDoTransform(hTransform, input, output, 1);
42
595
  } else {
43
595
    uint8_t input[nSrcComponents];
44
3.08k
    for (uint32_t i = 0; i < nSrcComponents; i++) input[i] = 128;
45
595
    cmsDoTransform(hTransform, input, output, 1);
46
595
  }
47
595
  cmsDeleteTransform(hTransform);
48
49
595
  return 0;
50
5.17k
}