Coverage Report

Created: 2026-02-14 07:06

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/cms_virtual_profile_fuzzer.c
Line
Count
Source
1
/* Copyright 2023 Google LLC
2
Licensed under the Apache License, Version 2.0 (the "License");
3
you may not use this file except in compliance with the License.
4
You may obtain a copy of the License at
5
      http://www.apache.org/licenses/LICENSE-2.0
6
Unless required by applicable law or agreed to in writing, software
7
distributed under the License is distributed on an "AS IS" BASIS,
8
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
9
See the License for the specific language governing permissions and
10
limitations under the License.
11
*/
12
13
#include "lcms2.h"
14
#include <stdint.h>
15
16
5.28k
int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
17
18
5.28k
  if (size < 16) {
19
6
    return 0;
20
6
  }
21
22
5.28k
  cmsHPROFILE hInProfile = cmsOpenProfileFromMem(data, size);
23
5.28k
  if (!hInProfile) {
24
669
    return 0;
25
669
  }
26
27
4.61k
  cmsHPROFILE hOutProfile = cmsCreate_sRGBProfile();
28
4.61k
  if (!hOutProfile) {
29
0
    cmsCloseProfile(hInProfile);
30
0
    return 0;
31
0
  }
32
4.61k
  cmsColorSpaceSignature srcCS = cmsGetColorSpace(hInProfile);
33
4.61k
  cmsUInt32Number nSrcComponents = cmsChannelsOf(srcCS);
34
4.61k
  cmsUInt32Number srcFormat;
35
4.61k
  if (srcCS == cmsSigLabData) {
36
81
    srcFormat =
37
81
        COLORSPACE_SH(PT_Lab) | CHANNELS_SH(nSrcComponents) | BYTES_SH(0);
38
4.53k
  } else {
39
4.53k
    srcFormat =
40
4.53k
        COLORSPACE_SH(PT_ANY) | CHANNELS_SH(nSrcComponents) | BYTES_SH(1);
41
4.53k
  }
42
4.61k
  cmsHTRANSFORM hTransform = cmsCreateTransform(
43
4.61k
      hInProfile, srcFormat, hOutProfile, TYPE_BGR_8,
44
4.61k
      *((const uint32_t *)data + 3) % 16, *((const uint32_t *)data + 2));
45
46
4.61k
  cmsCloseProfile(hInProfile);
47
4.61k
  cmsCloseProfile(hOutProfile);
48
4.61k
  if (!hTransform) {
49
3.84k
    return 0;
50
3.84k
  }
51
52
770
  cmsFloat64Number version;
53
770
  if (*((const uint32_t *)data + 3) % 2 == 0) {
54
596
    version = 3.4;
55
596
  } else {
56
174
    version = 4.4;
57
174
  }
58
59
  // cmsTransform2DeviceLink
60
770
  cmsHPROFILE devicelinkProfile = cmsTransform2DeviceLink(
61
770
      hTransform, version, *((const uint32_t *)data + 2));
62
63
  // clean up
64
770
  cmsDeleteTransform(hTransform);
65
770
  if (devicelinkProfile) {
66
653
    cmsCloseProfile(devicelinkProfile);
67
653
  }
68
69
  // cmsCreateLinearizationDeviceLink
70
770
  cmsToneCurve *tone = cmsBuildGamma(NULL, *((const uint32_t *)data + 3));
71
770
  if (!tone) {
72
0
    return 0;
73
0
  }
74
  // 15 curves, so it can handle all color spaces
75
770
  cmsToneCurve *rgb_curves[15] = {tone, tone, tone, tone, tone,
76
770
                                  tone, tone, tone, tone, tone,
77
770
                                  tone, tone, tone, tone, tone};
78
770
  cmsHPROFILE linearizationDeviceLinkProfile =
79
770
      cmsCreateLinearizationDeviceLink(srcCS, rgb_curves);
80
81
770
  cmsFreeToneCurve(tone);
82
83
770
  if (linearizationDeviceLinkProfile) {
84
755
    cmsCloseProfile(linearizationDeviceLinkProfile);
85
755
  }
86
87
770
  return 0;
88
770
}