Coverage Report

Created: 2026-06-07 06:41

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/libtiff/libtiff/tif_open.c
Line
Count
Source
1
/*
2
 * Copyright (c) 1988-1997 Sam Leffler
3
 * Copyright (c) 1991-1997 Silicon Graphics, Inc.
4
 *
5
 * Permission to use, copy, modify, distribute, and sell this software and
6
 * its documentation for any purpose is hereby granted without fee, provided
7
 * that (i) the above copyright notices and this permission notice appear in
8
 * all copies of the software and related documentation, and (ii) the names of
9
 * Sam Leffler and Silicon Graphics may not be used in any advertising or
10
 * publicity relating to the software without the specific, prior written
11
 * permission of Sam Leffler and Silicon Graphics.
12
 *
13
 * THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND,
14
 * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY
15
 * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
16
 *
17
 * IN NO EVENT SHALL SAM LEFFLER OR SILICON GRAPHICS BE LIABLE FOR
18
 * ANY SPECIAL, INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND,
19
 * OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
20
 * WHETHER OR NOT ADVISED OF THE POSSIBILITY OF DAMAGE, AND ON ANY THEORY OF
21
 * LIABILITY, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
22
 * OF THIS SOFTWARE.
23
 */
24
25
/*
26
 * TIFF Library.
27
 */
28
29
#ifdef TIFF_DO_NOT_USE_NON_EXT_ALLOC_FUNCTIONS
30
#undef TIFF_DO_NOT_USE_NON_EXT_ALLOC_FUNCTIONS
31
#endif
32
33
#include "tiffiop.h"
34
#include <assert.h>
35
#include <limits.h>
36
37
/*
38
 * Dummy functions to fill the omitted client procedures.
39
 */
40
int _tiffDummyMapProc(thandle_t fd, void **pbase, toff_t *psize)
41
0
{
42
0
    (void)fd;
43
0
    (void)pbase;
44
0
    (void)psize;
45
0
    return (0);
46
0
}
47
48
void _tiffDummyUnmapProc(thandle_t fd, void *base, toff_t size)
49
0
{
50
0
    (void)fd;
51
0
    (void)base;
52
0
    (void)size;
53
0
}
54
55
int _TIFFgetMode(TIFFOpenOptions *opts, thandle_t clientdata, const char *mode,
56
                 const char *module)
57
9.24k
{
58
9.24k
    int m = -1;
59
60
9.24k
    switch (mode[0])
61
9.24k
    {
62
9.24k
        case 'r':
63
9.24k
            m = O_RDONLY;
64
9.24k
            if (mode[1] == '+')
65
0
                m = O_RDWR;
66
9.24k
            break;
67
0
        case 'w':
68
0
        case 'a':
69
0
            m = O_RDWR | O_CREAT;
70
0
            if (mode[0] == 'w')
71
0
                m |= O_TRUNC;
72
0
            break;
73
0
        default:
74
0
            _TIFFErrorEarly(opts, clientdata, module, "\"%s\": Bad mode", mode);
75
0
            break;
76
9.24k
    }
77
9.24k
    return (m);
78
9.24k
}
79
80
TIFFOpenOptions *TIFFOpenOptionsAlloc(void)
81
0
{
82
0
    TIFFOpenOptions *opts =
83
0
        (TIFFOpenOptions *)_TIFFcalloc(1, sizeof(TIFFOpenOptions));
84
0
    return opts;
85
0
}
86
87
0
void TIFFOpenOptionsFree(TIFFOpenOptions *opts) { _TIFFfree(opts); }
88
89
/** Define a limit in bytes for a single memory allocation done by libtiff.
90
 *  If max_single_mem_alloc is set to 0, which is the default, no other limit
91
 *  that the underlying _TIFFmalloc() or
92
 *  TIFFOpenOptionsSetMaxCumulatedMemAlloc() will be applied.
93
 */
94
void TIFFOpenOptionsSetMaxSingleMemAlloc(TIFFOpenOptions *opts,
95
                                         tmsize_t max_single_mem_alloc)
96
0
{
97
0
    opts->max_single_mem_alloc = max_single_mem_alloc;
98
0
}
99
100
/** Define a limit in bytes for the cumulated memory allocations done by libtiff
101
 *  on a given TIFF handle.
102
 *  If max_cumulated_mem_alloc is set to 0, which is the default, no other limit
103
 *  that the underlying _TIFFmalloc() or
104
 *  TIFFOpenOptionsSetMaxSingleMemAlloc() will be applied.
105
 */
106
void TIFFOpenOptionsSetMaxCumulatedMemAlloc(TIFFOpenOptions *opts,
107
                                            tmsize_t max_cumulated_mem_alloc)
108
0
{
109
0
    opts->max_cumulated_mem_alloc = max_cumulated_mem_alloc;
110
0
}
111
112
/** Whether a warning should be emitted when encountering a unknown tag.
113
 * Default is FALSE since libtiff 4.7.1
114
 */
115
void TIFFOpenOptionsSetWarnAboutUnknownTags(TIFFOpenOptions *opts,
116
                                            int warn_about_unknown_tags)
117
0
{
118
0
    opts->warn_about_unknown_tags = warn_about_unknown_tags;
119
0
}
120
121
void TIFFOpenOptionsSetErrorHandlerExtR(TIFFOpenOptions *opts,
122
                                        TIFFErrorHandlerExtR handler,
123
                                        void *errorhandler_user_data)
124
0
{
125
0
    opts->errorhandler = handler;
126
0
    opts->errorhandler_user_data = errorhandler_user_data;
127
0
}
128
129
void TIFFOpenOptionsSetWarningHandlerExtR(TIFFOpenOptions *opts,
130
                                          TIFFErrorHandlerExtR handler,
131
                                          void *warnhandler_user_data)
132
0
{
133
0
    opts->warnhandler = handler;
134
0
    opts->warnhandler_user_data = warnhandler_user_data;
135
0
}
136
137
static void _TIFFEmitErrorAboveMaxSingleMemAlloc(TIFF *tif,
138
                                                 const char *pszFunction,
139
                                                 tmsize_t s)
140
0
{
141
0
    TIFFErrorExtR(tif, pszFunction,
142
0
                  "Memory allocation of %" PRIu64
143
0
                  " bytes is beyond the %" PRIu64
144
0
                  " byte limit defined in open options",
145
0
                  (uint64_t)s, (uint64_t)tif->tif_max_single_mem_alloc);
146
0
}
147
148
static void _TIFFEmitErrorAboveMaxCumulatedMemAlloc(TIFF *tif,
149
                                                    const char *pszFunction,
150
                                                    tmsize_t s)
151
0
{
152
0
    TIFFErrorExtR(tif, pszFunction,
153
0
                  "Cumulated memory allocation of %" PRIu64 " + %" PRIu64
154
0
                  " bytes is beyond the %" PRIu64
155
0
                  " cumulated byte limit defined in open options",
156
0
                  (uint64_t)tif->tif_cur_cumulated_mem_alloc, (uint64_t)s,
157
0
                  (uint64_t)tif->tif_max_cumulated_mem_alloc);
158
0
}
159
160
/* When allocating memory, we write at the beginning of the buffer it size.
161
 * This allows us to keep track of the total memory allocated when we
162
 * malloc/calloc/realloc and free. In theory we need just SIZEOF_SIZE_T bytes
163
 * for that, but on x86_64, allocations of more than 16 bytes are aligned on
164
 * 16 bytes. Hence using 2 * SIZEOF_SIZE_T.
165
 * It is critical that _TIFFmallocExt/_TIFFcallocExt/_TIFFreallocExt are
166
 * paired with _TIFFfreeExt.
167
 * CMakeLists.txt defines TIFF_DO_NOT_USE_NON_EXT_ALLOC_FUNCTIONS, which in
168
 * turn disables the definition of the non Ext version in tiffio.h
169
 */
170
0
#define LEADING_AREA_TO_STORE_ALLOC_SIZE (2 * SIZEOF_SIZE_T)
171
172
/** malloc() version that takes into account memory-specific open options */
173
void *_TIFFmallocExt(TIFF *tif, tmsize_t s)
174
55.4k
{
175
55.4k
    if (tif != NULL && tif->tif_max_single_mem_alloc > 0 &&
176
0
        s > tif->tif_max_single_mem_alloc)
177
0
    {
178
0
        _TIFFEmitErrorAboveMaxSingleMemAlloc(tif, "_TIFFmallocExt", s);
179
0
        return NULL;
180
0
    }
181
55.4k
    if (tif != NULL && tif->tif_max_cumulated_mem_alloc > 0)
182
0
    {
183
0
        if (s > tif->tif_max_cumulated_mem_alloc -
184
0
                    tif->tif_cur_cumulated_mem_alloc ||
185
0
            s > TIFF_TMSIZE_T_MAX - LEADING_AREA_TO_STORE_ALLOC_SIZE)
186
0
        {
187
0
            _TIFFEmitErrorAboveMaxCumulatedMemAlloc(tif, "_TIFFmallocExt", s);
188
0
            return NULL;
189
0
        }
190
0
        void *ptr = _TIFFmalloc(LEADING_AREA_TO_STORE_ALLOC_SIZE + s);
191
0
        if (!ptr)
192
0
            return NULL;
193
0
        tif->tif_cur_cumulated_mem_alloc += s;
194
0
        memcpy(ptr, &s, sizeof(s));
195
0
        return (char *)ptr + LEADING_AREA_TO_STORE_ALLOC_SIZE;
196
0
    }
197
55.4k
    return _TIFFmalloc(s);
198
55.4k
}
199
200
/** calloc() version that takes into account memory-specific open options */
201
void *_TIFFcallocExt(TIFF *tif, tmsize_t nmemb, tmsize_t siz)
202
0
{
203
0
    if (nmemb <= 0 || siz <= 0 || nmemb > TIFF_TMSIZE_T_MAX / siz)
204
0
        return NULL;
205
0
    if (tif != NULL && tif->tif_max_single_mem_alloc > 0)
206
0
    {
207
0
        if (nmemb * siz > tif->tif_max_single_mem_alloc)
208
0
        {
209
0
            _TIFFEmitErrorAboveMaxSingleMemAlloc(tif, "_TIFFcallocExt",
210
0
                                                 nmemb * siz);
211
0
            return NULL;
212
0
        }
213
0
    }
214
0
    if (tif != NULL && tif->tif_max_cumulated_mem_alloc > 0)
215
0
    {
216
0
        const tmsize_t s = nmemb * siz;
217
0
        if (s > tif->tif_max_cumulated_mem_alloc -
218
0
                    tif->tif_cur_cumulated_mem_alloc ||
219
0
            s > TIFF_TMSIZE_T_MAX - LEADING_AREA_TO_STORE_ALLOC_SIZE)
220
0
        {
221
0
            _TIFFEmitErrorAboveMaxCumulatedMemAlloc(tif, "_TIFFcallocExt", s);
222
0
            return NULL;
223
0
        }
224
0
        void *ptr = _TIFFcalloc(LEADING_AREA_TO_STORE_ALLOC_SIZE + s, 1);
225
0
        if (!ptr)
226
0
            return NULL;
227
0
        tif->tif_cur_cumulated_mem_alloc += s;
228
0
        memcpy(ptr, &s, sizeof(s));
229
0
        return (char *)ptr + LEADING_AREA_TO_STORE_ALLOC_SIZE;
230
0
    }
231
0
    return _TIFFcalloc(nmemb, siz);
232
0
}
233
234
/** realloc() version that takes into account memory-specific open options */
235
void *_TIFFreallocExt(TIFF *tif, void *p, tmsize_t s)
236
83.1k
{
237
83.1k
    if (tif != NULL && tif->tif_max_single_mem_alloc > 0 &&
238
0
        s > tif->tif_max_single_mem_alloc)
239
0
    {
240
0
        _TIFFEmitErrorAboveMaxSingleMemAlloc(tif, "_TIFFreallocExt", s);
241
0
        return NULL;
242
0
    }
243
83.1k
    if (tif != NULL && tif->tif_max_cumulated_mem_alloc > 0)
244
0
    {
245
0
        void *oldPtr = p;
246
0
        tmsize_t oldSize = 0;
247
0
        if (p)
248
0
        {
249
0
            oldPtr = (char *)p - LEADING_AREA_TO_STORE_ALLOC_SIZE;
250
0
            memcpy(&oldSize, oldPtr, sizeof(oldSize));
251
0
            assert(oldSize <= tif->tif_cur_cumulated_mem_alloc);
252
0
        }
253
0
        if (s > oldSize &&
254
0
            (s > tif->tif_max_cumulated_mem_alloc -
255
0
                     (tif->tif_cur_cumulated_mem_alloc - oldSize) ||
256
0
             s > TIFF_TMSIZE_T_MAX - LEADING_AREA_TO_STORE_ALLOC_SIZE))
257
0
        {
258
0
            _TIFFEmitErrorAboveMaxCumulatedMemAlloc(tif, "_TIFFreallocExt",
259
0
                                                    s - oldSize);
260
0
            return NULL;
261
0
        }
262
0
        void *newPtr =
263
0
            _TIFFrealloc(oldPtr, LEADING_AREA_TO_STORE_ALLOC_SIZE + s);
264
0
        if (newPtr == NULL)
265
0
            return NULL;
266
0
        tif->tif_cur_cumulated_mem_alloc -= oldSize;
267
0
        tif->tif_cur_cumulated_mem_alloc += s;
268
0
        memcpy(newPtr, &s, sizeof(s));
269
0
        return (char *)newPtr + LEADING_AREA_TO_STORE_ALLOC_SIZE;
270
0
    }
271
83.1k
    return _TIFFrealloc(p, s);
272
83.1k
}
273
274
/** free() version that takes into account memory-specific open options */
275
void _TIFFfreeExt(TIFF *tif, void *p)
276
120k
{
277
120k
    if (p != NULL && tif != NULL && tif->tif_max_cumulated_mem_alloc > 0)
278
0
    {
279
0
        void *oldPtr = (char *)p - LEADING_AREA_TO_STORE_ALLOC_SIZE;
280
0
        tmsize_t oldSize;
281
0
        memcpy(&oldSize, oldPtr, sizeof(oldSize));
282
0
        assert(oldSize <= tif->tif_cur_cumulated_mem_alloc);
283
0
        tif->tif_cur_cumulated_mem_alloc -= oldSize;
284
0
        p = oldPtr;
285
0
    }
286
120k
    _TIFFfree(p);
287
120k
}
288
289
TIFF *TIFFClientOpen(const char *name, const char *mode, thandle_t clientdata,
290
                     TIFFReadWriteProc readproc, TIFFReadWriteProc writeproc,
291
                     TIFFSeekProc seekproc, TIFFCloseProc closeproc,
292
                     TIFFSizeProc sizeproc, TIFFMapFileProc mapproc,
293
                     TIFFUnmapFileProc unmapproc)
294
9.24k
{
295
9.24k
    return TIFFClientOpenExt(name, mode, clientdata, readproc, writeproc,
296
9.24k
                             seekproc, closeproc, sizeproc, mapproc, unmapproc,
297
9.24k
                             NULL);
298
9.24k
}
299
300
TIFF *TIFFClientOpenExt(const char *name, const char *mode,
301
                        thandle_t clientdata, TIFFReadWriteProc readproc,
302
                        TIFFReadWriteProc writeproc, TIFFSeekProc seekproc,
303
                        TIFFCloseProc closeproc, TIFFSizeProc sizeproc,
304
                        TIFFMapFileProc mapproc, TIFFUnmapFileProc unmapproc,
305
                        TIFFOpenOptions *opts)
306
9.24k
{
307
9.24k
    static const char module[] = "TIFFClientOpenExt";
308
9.24k
    TIFF *tif;
309
9.24k
    int m;
310
9.24k
    const char *cp;
311
9.24k
    tmsize_t size_to_alloc;
312
313
    /* The following are configuration checks. They should be redundant, but
314
     * should not compile to any actual code in an optimised release build
315
     * anyway. If any of them fail, (makefile-based or other) configuration is
316
     * not correct */
317
9.24k
    assert(sizeof(uint8_t) == 1);
318
9.24k
    assert(sizeof(int8_t) == 1);
319
9.24k
    assert(sizeof(uint16_t) == 2);
320
9.24k
    assert(sizeof(int16_t) == 2);
321
9.24k
    assert(sizeof(uint32_t) == 4);
322
9.24k
    assert(sizeof(int32_t) == 4);
323
9.24k
    assert(sizeof(uint64_t) == 8);
324
9.24k
    assert(sizeof(int64_t) == 8);
325
9.24k
    {
326
9.24k
        union
327
9.24k
        {
328
9.24k
            uint8_t a8[2];
329
9.24k
            uint16_t a16;
330
9.24k
        } n;
331
9.24k
        n.a8[0] = 1;
332
9.24k
        n.a8[1] = 0;
333
9.24k
        (void)n;
334
#if WORDS_BIGENDIAN
335
        assert(n.a16 == 256);
336
#else
337
9.24k
        assert(n.a16 == 1);
338
9.24k
#endif
339
9.24k
    }
340
341
9.24k
    m = _TIFFgetMode(opts, clientdata, mode, module);
342
9.24k
    if (m == -1)
343
0
        goto bad2;
344
9.24k
    size_to_alloc = (tmsize_t)(sizeof(TIFF) + strlen(name) + 1);
345
9.24k
    if (opts && opts->max_single_mem_alloc > 0 &&
346
0
        size_to_alloc > opts->max_single_mem_alloc)
347
0
    {
348
0
        _TIFFErrorEarly(opts, clientdata, module,
349
0
                        "%s: Memory allocation of %" PRIu64
350
0
                        " bytes is beyond the %" PRIu64
351
0
                        " byte limit defined in open options",
352
0
                        name, (uint64_t)size_to_alloc,
353
0
                        (uint64_t)opts->max_single_mem_alloc);
354
0
        goto bad2;
355
0
    }
356
9.24k
    if (opts && opts->max_cumulated_mem_alloc > 0 &&
357
0
        size_to_alloc > opts->max_cumulated_mem_alloc)
358
0
    {
359
0
        _TIFFErrorEarly(opts, clientdata, module,
360
0
                        "%s: Memory allocation of %" PRIu64
361
0
                        " bytes is beyond the %" PRIu64
362
0
                        " cumulated byte limit defined in open options",
363
0
                        name, (uint64_t)size_to_alloc,
364
0
                        (uint64_t)opts->max_cumulated_mem_alloc);
365
0
        goto bad2;
366
0
    }
367
9.24k
    tif = (TIFF *)_TIFFmallocExt(NULL, size_to_alloc);
368
9.24k
    if (tif == NULL)
369
0
    {
370
0
        _TIFFErrorEarly(opts, clientdata, module,
371
0
                        "%s: Out of memory (TIFF structure)", name);
372
0
        goto bad2;
373
0
    }
374
9.24k
    _TIFFmemset(tif, 0, sizeof(*tif));
375
9.24k
    tif->tif_name = (char *)tif + sizeof(TIFF);
376
9.24k
    strcpy(tif->tif_name, name);
377
9.24k
    tif->tif_mode = m & ~(O_CREAT | O_TRUNC);
378
9.24k
    tif->tif_curdir = TIFF_NON_EXISTENT_DIR_NUMBER; /* non-existent directory */
379
9.24k
    tif->tif_curdircount = TIFF_NON_EXISTENT_DIR_NUMBER;
380
9.24k
    tif->tif_curoff = 0;
381
9.24k
    tif->tif_clientdata = clientdata;
382
9.24k
    tif->tif_readproc = readproc;
383
9.24k
    tif->tif_writeproc = writeproc;
384
9.24k
    tif->tif_seekproc = seekproc;
385
9.24k
    tif->tif_closeproc = closeproc;
386
9.24k
    tif->tif_sizeproc = sizeproc;
387
9.24k
    tif->tif_mapproc = mapproc ? mapproc : _tiffDummyMapProc;
388
9.24k
    tif->tif_unmapproc = unmapproc ? unmapproc : _tiffDummyUnmapProc;
389
9.24k
    if (opts)
390
0
    {
391
0
        tif->tif_errorhandler = opts->errorhandler;
392
0
        tif->tif_errorhandler_user_data = opts->errorhandler_user_data;
393
0
        tif->tif_warnhandler = opts->warnhandler;
394
0
        tif->tif_warnhandler_user_data = opts->warnhandler_user_data;
395
0
        tif->tif_max_single_mem_alloc = opts->max_single_mem_alloc;
396
0
        tif->tif_max_cumulated_mem_alloc = opts->max_cumulated_mem_alloc;
397
0
        tif->tif_warn_about_unknown_tags = opts->warn_about_unknown_tags;
398
0
    }
399
400
    /* Reset tif->tif_dir structure to zero and
401
     * initialize some IFD strile counter and index parameters. */
402
9.24k
    _TIFFResetTifDirAndInitStrileCounters(&tif->tif_dir);
403
404
9.24k
    if (!readproc || !writeproc || !seekproc || !closeproc || !sizeproc)
405
0
    {
406
0
        TIFFErrorExtR(tif, module,
407
0
                      "One of the client procedures is NULL pointer.");
408
0
        _TIFFfreeExt(NULL, tif);
409
0
        goto bad2;
410
0
    }
411
412
9.24k
    _TIFFSetDefaultCompressionState(tif); /* setup default state */
413
    /*
414
     * Default is to return data MSB2LSB and enable the
415
     * use of memory-mapped files and strip chopping when
416
     * a file is opened read-only.
417
     */
418
9.24k
    tif->tif_flags = FILLORDER_MSB2LSB;
419
9.24k
    if (m == O_RDONLY)
420
9.24k
        tif->tif_flags |= TIFF_MAPPED;
421
422
9.24k
#ifdef STRIPCHOP_DEFAULT
423
9.24k
    if (m == O_RDONLY || m == O_RDWR)
424
9.24k
        tif->tif_flags |= STRIPCHOP_DEFAULT;
425
9.24k
#endif
426
427
    /*
428
     * Process library-specific flags in the open mode string.
429
     * The following flags may be used to control intrinsic library
430
     * behavior that may or may not be desirable (usually for
431
     * compatibility with some application that claims to support
432
     * TIFF but only supports some brain dead idea of what the
433
     * vendor thinks TIFF is):
434
     *
435
     * 'l' use little-endian byte order for creating a file
436
     * 'b' use big-endian byte order for creating a file
437
     * 'L' read/write information using LSB2MSB bit order
438
     * 'B' read/write information using MSB2LSB bit order
439
     * 'H' read/write information using host bit order
440
     * 'M' enable use of memory-mapped files when supported
441
     * 'm' disable use of memory-mapped files
442
     * 'C' enable strip chopping support when reading
443
     * 'c' disable strip chopping support
444
     * 'h' read TIFF header only, do not load the first IFD
445
     * '4' ClassicTIFF for creating a file (default)
446
     * '8' BigTIFF for creating a file
447
     * 'D' enable use of deferred strip/tile offset/bytecount array loading.
448
     * 'O' on-demand loading of values instead of whole array loading (implies
449
     * D)
450
     *
451
     * The use of the 'l' and 'b' flags is strongly discouraged.
452
     * These flags are provided solely because numerous vendors,
453
     * typically on the PC, do not correctly support TIFF; they
454
     * only support the Intel little-endian byte order.  This
455
     * support is not configured by default because it supports
456
     * the violation of the TIFF spec that says that readers *MUST*
457
     * support both byte orders.  It is strongly recommended that
458
     * you not use this feature except to deal with busted apps
459
     * that write invalid TIFF.  And even in those cases you should
460
     * bang on the vendors to fix their software.
461
     *
462
     * The 'L', 'B', and 'H' flags are intended for applications
463
     * that can optimize operations on data by using a particular
464
     * bit order.  By default the library returns data in MSB2LSB
465
     * bit order for compatibility with older versions of this
466
     * library.  Returning data in the bit order of the native CPU
467
     * makes the most sense but also requires applications to check
468
     * the value of the FillOrder tag; something they probably do
469
     * not do right now.
470
     *
471
     * The 'M' and 'm' flags are provided because some virtual memory
472
     * systems exhibit poor behavior when large images are mapped.
473
     * These options permit clients to control the use of memory-mapped
474
     * files on a per-file basis.
475
     *
476
     * The 'C' and 'c' flags are provided because the library support
477
     * for chopping up large strips into multiple smaller strips is not
478
     * application-transparent and as such can cause problems.  The 'c'
479
     * option permits applications that only want to look at the tags,
480
     * for example, to get the unadulterated TIFF tag information.
481
     */
482
18.4k
    for (cp = mode; *cp; cp++)
483
9.24k
        switch (*cp)
484
9.24k
        {
485
0
            case 'b':
486
0
#if !WORDS_BIGENDIAN
487
0
                if (m & O_CREAT)
488
0
                    tif->tif_flags |= TIFF_SWAB;
489
0
#endif
490
0
                break;
491
0
            case 'l':
492
#if WORDS_BIGENDIAN
493
                if ((m & O_CREAT))
494
                    tif->tif_flags |= TIFF_SWAB;
495
#endif
496
0
                break;
497
0
            case 'B':
498
0
                tif->tif_flags =
499
0
                    (tif->tif_flags & ~TIFF_FILLORDER) | FILLORDER_MSB2LSB;
500
0
                break;
501
0
            case 'L':
502
0
                tif->tif_flags =
503
0
                    (tif->tif_flags & ~TIFF_FILLORDER) | FILLORDER_LSB2MSB;
504
0
                break;
505
0
            case 'H':
506
0
                TIFFWarningExtR(tif, name,
507
0
                                "H(ost) mode is deprecated. Since "
508
0
                                "libtiff 4.5.1, it is an alias of 'B' / "
509
0
                                "FILLORDER_MSB2LSB.");
510
0
                tif->tif_flags =
511
0
                    (tif->tif_flags & ~TIFF_FILLORDER) | FILLORDER_MSB2LSB;
512
0
                break;
513
0
            case 'M':
514
0
                if (m == O_RDONLY)
515
0
                    tif->tif_flags |= TIFF_MAPPED;
516
0
                break;
517
0
            case 'm':
518
0
                if (m == O_RDONLY)
519
0
                    tif->tif_flags &= ~TIFF_MAPPED;
520
0
                break;
521
0
            case 'C':
522
0
                if (m == O_RDONLY)
523
0
                    tif->tif_flags |= TIFF_STRIPCHOP;
524
0
                break;
525
0
            case 'c':
526
0
                if (m == O_RDONLY)
527
0
                    tif->tif_flags &= ~TIFF_STRIPCHOP;
528
0
                break;
529
0
            case 'h':
530
0
                tif->tif_flags |= TIFF_HEADERONLY;
531
0
                break;
532
0
            case '8':
533
0
                if (m & O_CREAT)
534
0
                    tif->tif_flags |= TIFF_BIGTIFF;
535
0
                break;
536
0
            case 'D':
537
0
                tif->tif_flags |= TIFF_DEFERSTRILELOAD;
538
0
                break;
539
0
            case 'O':
540
0
                if (m == O_RDONLY)
541
0
                    tif->tif_flags |=
542
0
                        (TIFF_LAZYSTRILELOAD_ASKED | TIFF_DEFERSTRILELOAD);
543
0
                break;
544
9.24k
            default:
545
9.24k
                break;
546
9.24k
        }
547
548
#ifdef DEFER_STRILE_LOAD
549
    /* Compatibility with old DEFER_STRILE_LOAD compilation flag */
550
    /* Probably unneeded, since to the best of my knowledge (E. Rouault) */
551
    /* GDAL was the only user of this, and will now use the new 'D' flag */
552
    tif->tif_flags |= TIFF_DEFERSTRILELOAD;
553
#endif
554
555
    /*
556
     * Read in TIFF header.
557
     */
558
9.24k
    if ((m & O_TRUNC) ||
559
9.24k
        !ReadOK(tif, &tif->tif_header, sizeof(TIFFHeaderClassic)))
560
0
    {
561
0
        if (tif->tif_mode == O_RDONLY)
562
0
        {
563
0
            TIFFErrorExtR(tif, name, "Cannot read TIFF header");
564
0
            goto bad;
565
0
        }
566
        /*
567
         * Setup header and write.
568
         */
569
#if WORDS_BIGENDIAN
570
        tif->tif_header.common.tiff_magic =
571
            (tif->tif_flags & TIFF_SWAB) ? TIFF_LITTLEENDIAN : TIFF_BIGENDIAN;
572
#else
573
0
        tif->tif_header.common.tiff_magic =
574
0
            (tif->tif_flags & TIFF_SWAB) ? TIFF_BIGENDIAN : TIFF_LITTLEENDIAN;
575
0
#endif
576
0
        TIFFHeaderUnion tif_header_swapped;
577
0
        if (!(tif->tif_flags & TIFF_BIGTIFF))
578
0
        {
579
0
            tif->tif_header.common.tiff_version = TIFF_VERSION_CLASSIC;
580
0
            tif->tif_header.classic.tiff_diroff = 0;
581
0
            tif->tif_header_size = sizeof(TIFFHeaderClassic);
582
            /* Swapped copy for writing */
583
0
            _TIFFmemcpy(&tif_header_swapped, &tif->tif_header,
584
0
                        sizeof(TIFFHeaderUnion));
585
0
            if (tif->tif_flags & TIFF_SWAB)
586
0
                TIFFSwabShort(&tif_header_swapped.common.tiff_version);
587
0
        }
588
0
        else
589
0
        {
590
0
            tif->tif_header.common.tiff_version = TIFF_VERSION_BIG;
591
0
            tif->tif_header.big.tiff_offsetsize = 8;
592
0
            tif->tif_header.big.tiff_unused = 0;
593
0
            tif->tif_header.big.tiff_diroff = 0;
594
0
            tif->tif_header_size = sizeof(TIFFHeaderBig);
595
            /* Swapped copy for writing */
596
0
            _TIFFmemcpy(&tif_header_swapped, &tif->tif_header,
597
0
                        sizeof(TIFFHeaderUnion));
598
0
            if (tif->tif_flags & TIFF_SWAB)
599
0
            {
600
0
                TIFFSwabShort(&tif_header_swapped.common.tiff_version);
601
0
                TIFFSwabShort(&tif_header_swapped.big.tiff_offsetsize);
602
0
            }
603
0
        }
604
        /*
605
         * The doc for "fopen" for some STD_C_LIBs says that if you
606
         * open a file for modify ("+"), then you must fseek (or
607
         * fflush?) between any freads and fwrites.  This is not
608
         * necessary on most systems, but has been shown to be needed
609
         * on Solaris.
610
         */
611
0
        TIFFSeekFile(tif, 0, SEEK_SET);
612
0
        if (!WriteOK(tif, &tif_header_swapped,
613
0
                     (tmsize_t)(tif->tif_header_size)))
614
0
        {
615
0
            TIFFErrorExtR(tif, name, "Error writing TIFF header");
616
0
            goto bad;
617
0
        }
618
        /*
619
         * Setup default directory.
620
         */
621
0
        if (!TIFFDefaultDirectory(tif))
622
0
            goto bad;
623
0
        tif->tif_diroff = 0;
624
0
        tif->tif_lastdiroff = 0;
625
0
        tif->tif_setdirectory_force_absolute = FALSE;
626
        /* tif_curdircount = 0 means 'empty file opened for writing, but no IFD
627
         * written yet' */
628
0
        tif->tif_curdircount = 0;
629
0
        return (tif);
630
0
    }
631
632
    /*
633
     * Setup the byte order handling according to the opened file for reading.
634
     */
635
9.24k
    if (tif->tif_header.common.tiff_magic != TIFF_BIGENDIAN &&
636
9.24k
        tif->tif_header.common.tiff_magic != TIFF_LITTLEENDIAN
637
0
#if MDI_SUPPORT
638
0
        &&
639
#if HOST_BIGENDIAN
640
        tif->tif_header.common.tiff_magic != MDI_BIGENDIAN
641
#else
642
0
        tif->tif_header.common.tiff_magic != MDI_LITTLEENDIAN
643
9.24k
#endif
644
9.24k
    )
645
0
    {
646
0
        TIFFErrorExtR(tif, name,
647
0
                      "Not a TIFF or MDI file, bad magic number %" PRIu16
648
0
                      " (0x%" PRIx16 ")",
649
#else
650
    )
651
    {
652
        TIFFErrorExtR(tif, name,
653
                      "Not a TIFF file, bad magic number %" PRIu16
654
                      " (0x%" PRIx16 ")",
655
#endif
656
0
                      tif->tif_header.common.tiff_magic,
657
0
                      tif->tif_header.common.tiff_magic);
658
0
        goto bad;
659
0
    }
660
9.24k
    if (tif->tif_header.common.tiff_magic == TIFF_BIGENDIAN)
661
0
    {
662
0
#if !WORDS_BIGENDIAN
663
0
        tif->tif_flags |= TIFF_SWAB;
664
0
#endif
665
0
    }
666
9.24k
    else
667
9.24k
    {
668
#if WORDS_BIGENDIAN
669
        tif->tif_flags |= TIFF_SWAB;
670
#endif
671
9.24k
    }
672
9.24k
    if (tif->tif_flags & TIFF_SWAB)
673
0
        TIFFSwabShort(&tif->tif_header.common.tiff_version);
674
9.24k
    if ((tif->tif_header.common.tiff_version != TIFF_VERSION_CLASSIC) &&
675
0
        (tif->tif_header.common.tiff_version != TIFF_VERSION_BIG))
676
0
    {
677
0
        TIFFErrorExtR(tif, name,
678
0
                      "Not a TIFF file, bad version number %" PRIu16
679
0
                      " (0x%" PRIx16 ")",
680
0
                      tif->tif_header.common.tiff_version,
681
0
                      tif->tif_header.common.tiff_version);
682
0
        goto bad;
683
0
    }
684
9.24k
    if (tif->tif_header.common.tiff_version == TIFF_VERSION_CLASSIC)
685
9.24k
    {
686
9.24k
        if (tif->tif_flags & TIFF_SWAB)
687
0
            TIFFSwabLong(&tif->tif_header.classic.tiff_diroff);
688
9.24k
        tif->tif_header_size = sizeof(TIFFHeaderClassic);
689
9.24k
    }
690
0
    else
691
0
    {
692
0
        if (!ReadOK(tif,
693
0
                    ((uint8_t *)(&tif->tif_header) + sizeof(TIFFHeaderClassic)),
694
0
                    (sizeof(TIFFHeaderBig) - sizeof(TIFFHeaderClassic))))
695
0
        {
696
0
            TIFFErrorExtR(tif, name, "Cannot read TIFF header");
697
0
            goto bad;
698
0
        }
699
0
        if (tif->tif_flags & TIFF_SWAB)
700
0
        {
701
0
            TIFFSwabShort(&tif->tif_header.big.tiff_offsetsize);
702
0
            TIFFSwabLong8(&tif->tif_header.big.tiff_diroff);
703
0
        }
704
0
        if (tif->tif_header.big.tiff_offsetsize != 8)
705
0
        {
706
0
            TIFFErrorExtR(tif, name,
707
0
                          "Not a TIFF file, bad BigTIFF offsetsize %" PRIu16
708
0
                          " (0x%" PRIx16 ")",
709
0
                          tif->tif_header.big.tiff_offsetsize,
710
0
                          tif->tif_header.big.tiff_offsetsize);
711
0
            goto bad;
712
0
        }
713
0
        if (tif->tif_header.big.tiff_unused != 0)
714
0
        {
715
0
            TIFFErrorExtR(tif, name,
716
0
                          "Not a TIFF file, bad BigTIFF unused %" PRIu16
717
0
                          " (0x%" PRIx16 ")",
718
0
                          tif->tif_header.big.tiff_unused,
719
0
                          tif->tif_header.big.tiff_unused);
720
0
            goto bad;
721
0
        }
722
0
        tif->tif_header_size = sizeof(TIFFHeaderBig);
723
0
        tif->tif_flags |= TIFF_BIGTIFF;
724
0
    }
725
9.24k
    tif->tif_flags |= TIFF_MYBUFFER;
726
9.24k
    tif->tif_rawcp = tif->tif_rawdata = 0;
727
9.24k
    tif->tif_rawdatasize = 0;
728
9.24k
    tif->tif_rawdataoff = 0;
729
9.24k
    tif->tif_rawdataloaded = 0;
730
731
9.24k
    switch (mode[0])
732
9.24k
    {
733
9.24k
        case 'r':
734
9.24k
            if (!(tif->tif_flags & TIFF_BIGTIFF))
735
9.24k
                tif->tif_nextdiroff = tif->tif_header.classic.tiff_diroff;
736
0
            else
737
0
                tif->tif_nextdiroff = tif->tif_header.big.tiff_diroff;
738
            /*
739
             * Try to use a memory-mapped file if the client
740
             * has not explicitly suppressed usage with the
741
             * 'm' flag in the open mode (see above).
742
             */
743
9.24k
            if (tif->tif_flags & TIFF_MAPPED)
744
9.24k
            {
745
9.24k
                toff_t n;
746
9.24k
                if (TIFFMapFileContents(tif, (void **)(&tif->tif_base), &n))
747
0
                {
748
0
                    tif->tif_size = (tmsize_t)n;
749
0
                    assert((toff_t)tif->tif_size == n);
750
0
                }
751
9.24k
                else
752
9.24k
                    tif->tif_flags &= ~TIFF_MAPPED;
753
9.24k
            }
754
            /*
755
             * Sometimes we do not want to read the first directory (for
756
             * example, it may be broken) and want to proceed to other
757
             * directories. I this case we use the TIFF_HEADERONLY flag to open
758
             * file and return immediately after reading TIFF header.
759
             * However, the pointer to TIFFSetField() and TIFFGetField()
760
             * (i.e. tif->tif_tagmethods.vsetfield and
761
             * tif->tif_tagmethods.vgetfield) need to be initialized, which is
762
             * done in TIFFDefaultDirectory().
763
             */
764
9.24k
            if (tif->tif_flags & TIFF_HEADERONLY)
765
0
            {
766
0
                if (!TIFFDefaultDirectory(tif))
767
0
                    goto bad;
768
0
                return (tif);
769
0
            }
770
771
            /*
772
             * Setup initial directory.
773
             */
774
9.24k
            if (TIFFReadDirectory(tif))
775
9.24k
            {
776
9.24k
                return (tif);
777
9.24k
            }
778
0
            break;
779
0
        case 'a':
780
            /*
781
             * New directories are automatically append
782
             * to the end of the directory chain when they
783
             * are written out (see TIFFWriteDirectory).
784
             */
785
0
            if (!TIFFDefaultDirectory(tif))
786
0
                goto bad;
787
0
            return (tif);
788
0
        default:
789
0
            break;
790
9.24k
    }
791
0
bad:
792
0
    tif->tif_mode = O_RDONLY; /* XXX avoid flush */
793
0
    TIFFCleanup(tif);
794
0
bad2:
795
0
    return ((TIFF *)0);
796
0
}
797
798
/*
799
 * Query functions to access private data.
800
 */
801
802
/*
803
 * Return open file's name.
804
 */
805
0
const char *TIFFFileName(TIFF *tif) { return (tif->tif_name); }
806
807
/*
808
 * Set the file name.
809
 */
810
const char *TIFFSetFileName(TIFF *tif, const char *name)
811
0
{
812
0
    const char *old_name = tif->tif_name;
813
0
    tif->tif_name = (char *)name;
814
0
    return (old_name);
815
0
}
816
817
/*
818
 * Return open file's I/O descriptor.
819
 */
820
0
int TIFFFileno(TIFF *tif) { return (tif->tif_fd); }
821
822
/*
823
 * Set open file's I/O descriptor, and return previous value.
824
 */
825
int TIFFSetFileno(TIFF *tif, int fd)
826
0
{
827
0
    int old_fd = tif->tif_fd;
828
0
    tif->tif_fd = fd;
829
0
    return old_fd;
830
0
}
831
832
/*
833
 * Return open file's clientdata.
834
 */
835
0
thandle_t TIFFClientdata(TIFF *tif) { return (tif->tif_clientdata); }
836
837
/*
838
 * Set open file's clientdata, and return previous value.
839
 */
840
thandle_t TIFFSetClientdata(TIFF *tif, thandle_t newvalue)
841
0
{
842
0
    thandle_t m = tif->tif_clientdata;
843
0
    tif->tif_clientdata = newvalue;
844
0
    return m;
845
0
}
846
847
/*
848
 * Return read/write mode.
849
 */
850
0
int TIFFGetMode(TIFF *tif) { return (tif->tif_mode); }
851
852
/*
853
 * Return read/write mode.
854
 */
855
int TIFFSetMode(TIFF *tif, int mode)
856
0
{
857
0
    int old_mode = tif->tif_mode;
858
0
    tif->tif_mode = mode;
859
0
    return (old_mode);
860
0
}
861
862
/*
863
 * Return nonzero if file is organized in
864
 * tiles; zero if organized as strips.
865
 */
866
9.24k
int TIFFIsTiled(TIFF *tif) { return (isTiled(tif)); }
867
868
/*
869
 * Return current row being read/written.
870
 */
871
0
uint32_t TIFFCurrentRow(TIFF *tif) { return (tif->tif_dir.td_row); }
872
873
/*
874
 * Return index of the current directory.
875
 */
876
0
tdir_t TIFFCurrentDirectory(TIFF *tif) { return (tif->tif_curdir); }
877
878
/*
879
 * Return current strip.
880
 */
881
0
uint32_t TIFFCurrentStrip(TIFF *tif) { return (tif->tif_dir.td_curstrip); }
882
883
/*
884
 * Return current tile.
885
 */
886
0
uint32_t TIFFCurrentTile(TIFF *tif) { return (tif->tif_dir.td_curtile); }
887
888
/*
889
 * Return nonzero if the file has byte-swapped data.
890
 */
891
0
int TIFFIsByteSwapped(TIFF *tif) { return ((tif->tif_flags & TIFF_SWAB) != 0); }
892
893
/*
894
 * Return nonzero if the data is returned up-sampled.
895
 */
896
0
int TIFFIsUpSampled(TIFF *tif) { return (isUpSampled(tif)); }
897
898
/*
899
 * Return nonzero if the data is returned in MSB-to-LSB bit order.
900
 */
901
0
int TIFFIsMSB2LSB(TIFF *tif) { return (isFillOrder(tif, FILLORDER_MSB2LSB)); }
902
903
/*
904
 * Return nonzero if given file was written in big-endian order.
905
 */
906
int TIFFIsBigEndian(TIFF *tif)
907
0
{
908
0
    return (tif->tif_header.common.tiff_magic == TIFF_BIGENDIAN);
909
0
}
910
911
/*
912
 * Return nonzero if given file is BigTIFF style.
913
 */
914
0
int TIFFIsBigTIFF(TIFF *tif) { return ((tif->tif_flags & TIFF_BIGTIFF) != 0); }
915
916
/*
917
 * Return pointer to file read method.
918
 */
919
0
TIFFReadWriteProc TIFFGetReadProc(TIFF *tif) { return (tif->tif_readproc); }
920
921
/*
922
 * Return pointer to file write method.
923
 */
924
0
TIFFReadWriteProc TIFFGetWriteProc(TIFF *tif) { return (tif->tif_writeproc); }
925
926
/*
927
 * Return pointer to file seek method.
928
 */
929
0
TIFFSeekProc TIFFGetSeekProc(TIFF *tif) { return (tif->tif_seekproc); }
930
931
/*
932
 * Return pointer to file close method.
933
 */
934
0
TIFFCloseProc TIFFGetCloseProc(TIFF *tif) { return (tif->tif_closeproc); }
935
936
/*
937
 * Return pointer to file size requesting method.
938
 */
939
0
TIFFSizeProc TIFFGetSizeProc(TIFF *tif) { return (tif->tif_sizeproc); }
940
941
/*
942
 * Return pointer to memory mapping method.
943
 */
944
0
TIFFMapFileProc TIFFGetMapFileProc(TIFF *tif) { return (tif->tif_mapproc); }
945
946
/*
947
 * Return pointer to memory unmapping method.
948
 */
949
TIFFUnmapFileProc TIFFGetUnmapFileProc(TIFF *tif)
950
0
{
951
0
    return (tif->tif_unmapproc);
952
0
}