Coverage Report

Created: 2026-06-10 06:17

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/libjpeg-turbo.main/src/rdtarga.c
Line
Count
Source
1
/*
2
 * rdtarga.c
3
 *
4
 * This file was part of the Independent JPEG Group's software:
5
 * Copyright (C) 1991-1996, Thomas G. Lane.
6
 * Modified 2017 by Guido Vollbeding.
7
 * libjpeg-turbo Modifications:
8
 * Copyright (C) 2018, 2021-2023, 2026, D. R. Commander.
9
 * For conditions of distribution and use, see the accompanying README.ijg
10
 * file.
11
 *
12
 * This file contains routines to read input images in Targa format.
13
 *
14
 * These routines may need modification for non-Unix environments or
15
 * specialized applications.  As they stand, they assume input from
16
 * an ordinary stdio stream.  They further assume that reading begins
17
 * at the start of the file; start_input may need work if the
18
 * user interface has already read some data (e.g., to determine that
19
 * the file is indeed Targa format).
20
 *
21
 * Based on code contributed by Lee Daniel Crocker.
22
 */
23
24
#include "cdjpeg.h"             /* Common decls for cjpeg/djpeg applications */
25
26
#ifdef TARGA_SUPPORTED
27
28
29
#define ReadOK(file, buffer, len) \
30
12.9k
  (fread(buffer, 1, len, file) == ((size_t)(len)))
31
32
33
/* Private version of data source object */
34
35
typedef struct _tga_source_struct *tga_source_ptr;
36
37
typedef struct _tga_source_struct {
38
  struct cjpeg_source_struct pub; /* public fields */
39
40
  j_compress_ptr cinfo;         /* back link saves passing separate parm */
41
42
  JSAMPARRAY colormap;          /* Targa colormap (converted to my format) */
43
44
  jvirt_sarray_ptr whole_image; /* Needed if funny input row order */
45
  JDIMENSION current_row;       /* Current logical row number to read */
46
47
  /* Pointer to routine to extract next Targa pixel from input file */
48
  void (*read_pixel) (tga_source_ptr sinfo);
49
50
  /* Result of read_pixel is delivered here:
51
   * The array length is 6 rather than 4 to work around a -Wstringop-overflow
52
   * false positive with GCC 14 and later.
53
   */
54
  unsigned char tga_pixel[6];
55
56
  int pixel_size;               /* Bytes per Targa pixel (1 to 4) */
57
  int cmap_length;              /* colormap length */
58
59
  /* State info for reading RLE-coded pixels; both counts must be init to 0 */
60
  int block_count;              /* # of pixels remaining in RLE block */
61
  int dup_pixel_count;          /* # of times to duplicate previous pixel */
62
63
  /* This saves the correct pixel-row-expansion method for preload_image */
64
  JDIMENSION (*get_pixel_rows) (j_compress_ptr cinfo, cjpeg_source_ptr sinfo);
65
} tga_source_struct;
66
67
68
/* For expanding 5-bit pixel values to 8-bit with best rounding */
69
70
static const UINT8 c5to8bits[32] = {
71
    0,   8,  16,  25,  33,  41,  49,  58,
72
   66,  74,  82,  90,  99, 107, 115, 123,
73
  132, 140, 148, 156, 165, 173, 181, 189,
74
  197, 206, 214, 222, 230, 239, 247, 255
75
};
76
77
78
79
LOCAL(int)
80
read_byte(tga_source_ptr sinfo)
81
/* Read next byte from Targa file */
82
849k
{
83
849k
  register FILE *infile = sinfo->pub.input_file;
84
849k
  register int c;
85
86
849k
  if ((c = getc(infile)) == EOF)
87
924
    ERREXIT(sinfo->cinfo, JERR_INPUT_EOF);
88
849k
  return c;
89
849k
}
90
91
92
LOCAL(void)
93
read_colormap(tga_source_ptr sinfo, int cmaplen, int mapentrysize)
94
/* Read the colormap from a Targa file */
95
308
{
96
308
  int i;
97
98
  /* Presently only handles 24-bit BGR format */
99
308
  if (mapentrysize != 24)
100
40
    ERREXIT(sinfo->cinfo, JERR_TGA_BADCMAP);
101
102
1.34k
  for (i = 0; i < cmaplen; i++) {
103
1.04k
    sinfo->colormap[2][i] = (JSAMPLE)read_byte(sinfo);
104
1.04k
    sinfo->colormap[1][i] = (JSAMPLE)read_byte(sinfo);
105
1.04k
    sinfo->colormap[0][i] = (JSAMPLE)read_byte(sinfo);
106
1.04k
  }
107
308
}
108
109
110
/*
111
 * read_pixel methods: get a single pixel from Targa file into tga_pixel[]
112
 */
113
114
METHODDEF(void)
115
read_non_rle_pixel(tga_source_ptr sinfo)
116
/* Read one Targa pixel from the input file; no RLE expansion */
117
918
{
118
918
  register int i;
119
120
2.12k
  for (i = 0; i < sinfo->pixel_size; i++) {
121
1.20k
    sinfo->tga_pixel[i] = (unsigned char)read_byte(sinfo);
122
1.20k
  }
123
918
}
124
125
126
METHODDEF(void)
127
read_rle_pixel(tga_source_ptr sinfo)
128
/* Read one Targa pixel from the input file, expanding RLE data as needed */
129
4.98M
{
130
4.98M
  register int i;
131
132
  /* Duplicate previously read pixel? */
133
4.98M
  if (sinfo->dup_pixel_count > 0) {
134
4.20M
    sinfo->dup_pixel_count--;
135
4.20M
    return;
136
4.20M
  }
137
138
  /* Time to read RLE block header? */
139
781k
  if (--sinfo->block_count < 0) { /* decrement pixels remaining in block */
140
59.3k
    i = read_byte(sinfo);
141
59.3k
    if (i & 0x80) {             /* Start of duplicate-pixel block? */
142
39.3k
      sinfo->dup_pixel_count = i & 0x7F; /* number of dups after this one */
143
39.3k
      sinfo->block_count = 0;   /* then read new block header */
144
39.3k
    } else {
145
20.0k
      sinfo->block_count = i & 0x7F; /* number of pixels after this one */
146
20.0k
    }
147
59.3k
  }
148
149
  /* Read next pixel */
150
1.56M
  for (i = 0; i < sinfo->pixel_size; i++) {
151
785k
    sinfo->tga_pixel[i] = (unsigned char)read_byte(sinfo);
152
785k
  }
153
781k
}
154
155
156
/*
157
 * Read one row of pixels.
158
 *
159
 * We provide several different versions depending on input file format.
160
 */
161
162
163
METHODDEF(JDIMENSION)
164
get_8bit_gray_row(j_compress_ptr cinfo, cjpeg_source_ptr sinfo)
165
/* This version is for reading 8-bit grayscale pixels */
166
14.3k
{
167
14.3k
  tga_source_ptr source = (tga_source_ptr)sinfo;
168
14.3k
  register JSAMPROW ptr;
169
14.3k
  register JDIMENSION col;
170
171
14.3k
  ptr = source->pub.buffer[0];
172
4.90M
  for (col = cinfo->image_width; col > 0; col--) {
173
4.89M
    (*source->read_pixel) (source); /* Load next pixel into tga_pixel */
174
4.89M
    *ptr++ = (JSAMPLE)source->tga_pixel[0];
175
4.89M
  }
176
14.3k
  return 1;
177
14.3k
}
178
179
METHODDEF(JDIMENSION)
180
get_8bit_row(j_compress_ptr cinfo, cjpeg_source_ptr sinfo)
181
/* This version is for reading 8-bit colormap indexes */
182
674
{
183
674
  tga_source_ptr source = (tga_source_ptr)sinfo;
184
674
  register int t;
185
674
  register JSAMPROW ptr;
186
674
  register JDIMENSION col;
187
674
  register JSAMPARRAY colormap = source->colormap;
188
674
  int cmaplen = source->cmap_length;
189
190
674
  ptr = source->pub.buffer[0];
191
2.39k
  for (col = cinfo->image_width; col > 0; col--) {
192
1.72k
    (*source->read_pixel) (source); /* Load next pixel into tga_pixel */
193
1.72k
    t = source->tga_pixel[0];
194
1.72k
    if (t >= cmaplen)
195
30
      ERREXIT(cinfo, JERR_TGA_BADPARMS);
196
1.72k
    *ptr++ = colormap[0][t];
197
1.72k
    *ptr++ = colormap[1][t];
198
1.72k
    *ptr++ = colormap[2][t];
199
1.72k
  }
200
674
  return 1;
201
674
}
202
203
METHODDEF(JDIMENSION)
204
get_16bit_row(j_compress_ptr cinfo, cjpeg_source_ptr sinfo)
205
/* This version is for reading 16-bit pixels */
206
3.30k
{
207
3.30k
  tga_source_ptr source = (tga_source_ptr)sinfo;
208
3.30k
  register int t;
209
3.30k
  register JSAMPROW ptr;
210
3.30k
  register JDIMENSION col;
211
212
3.30k
  ptr = source->pub.buffer[0];
213
23.5k
  for (col = cinfo->image_width; col > 0; col--) {
214
20.2k
    (*source->read_pixel) (source); /* Load next pixel into tga_pixel */
215
20.2k
    t = source->tga_pixel[0];
216
20.2k
    t += source->tga_pixel[1] << 8;
217
    /* We expand 5 bit data to 8 bit sample width.
218
     * The format of the 16-bit (LSB first) input word is
219
     *     xRRRRRGGGGGBBBBB
220
     */
221
20.2k
    ptr[2] = (JSAMPLE)c5to8bits[t & 0x1F];
222
20.2k
    t >>= 5;
223
20.2k
    ptr[1] = (JSAMPLE)c5to8bits[t & 0x1F];
224
20.2k
    t >>= 5;
225
20.2k
    ptr[0] = (JSAMPLE)c5to8bits[t & 0x1F];
226
20.2k
    ptr += 3;
227
20.2k
  }
228
3.30k
  return 1;
229
3.30k
}
230
231
METHODDEF(JDIMENSION)
232
get_24bit_row(j_compress_ptr cinfo, cjpeg_source_ptr sinfo)
233
/* This version is for reading 24-bit pixels */
234
2.19k
{
235
2.19k
  tga_source_ptr source = (tga_source_ptr)sinfo;
236
2.19k
  register JSAMPROW ptr;
237
2.19k
  register JDIMENSION col;
238
239
2.19k
  ptr = source->pub.buffer[0];
240
73.4k
  for (col = cinfo->image_width; col > 0; col--) {
241
71.2k
    (*source->read_pixel) (source); /* Load next pixel into tga_pixel */
242
71.2k
    *ptr++ = (JSAMPLE)source->tga_pixel[2]; /* change BGR to RGB order */
243
71.2k
    *ptr++ = (JSAMPLE)source->tga_pixel[1];
244
71.2k
    *ptr++ = (JSAMPLE)source->tga_pixel[0];
245
71.2k
  }
246
2.19k
  return 1;
247
2.19k
}
248
249
/*
250
 * Targa also defines a 32-bit pixel format with order B,G,R,A.
251
 * We presently ignore the attribute byte, so the code for reading
252
 * these pixels is identical to the 24-bit routine above.
253
 * This works because the actual pixel length is only known to read_pixel.
254
 */
255
256
150
#define get_32bit_row  get_24bit_row
257
258
259
/*
260
 * This method is for re-reading the input data in standard top-down
261
 * row order.  The entire image has already been read into whole_image
262
 * with proper conversion of pixel format, but it's in a funny row order.
263
 */
264
265
METHODDEF(JDIMENSION)
266
get_memory_row(j_compress_ptr cinfo, cjpeg_source_ptr sinfo)
267
3.42k
{
268
3.42k
  tga_source_ptr source = (tga_source_ptr)sinfo;
269
3.42k
  JDIMENSION source_row;
270
271
  /* Compute row of source that maps to current_row of normal order */
272
  /* For now, assume image is bottom-up and not interlaced. */
273
  /* NEEDS WORK to support interlaced images! */
274
3.42k
  source_row = cinfo->image_height - source->current_row - 1;
275
276
  /* Fetch that row from virtual array */
277
3.42k
  source->pub.buffer = (*cinfo->mem->access_virt_sarray)
278
3.42k
    ((j_common_ptr)cinfo, source->whole_image,
279
3.42k
     source_row, (JDIMENSION)1, FALSE);
280
281
3.42k
  source->current_row++;
282
3.42k
  return 1;
283
3.42k
}
284
285
286
/*
287
 * This method loads the image into whole_image during the first call on
288
 * get_pixel_rows.  The get_pixel_rows pointer is then adjusted to call
289
 * get_memory_row on subsequent calls.
290
 */
291
292
METHODDEF(JDIMENSION)
293
preload_image(j_compress_ptr cinfo, cjpeg_source_ptr sinfo)
294
734
{
295
734
  tga_source_ptr source = (tga_source_ptr)sinfo;
296
734
  JDIMENSION row;
297
734
  cd_progress_ptr progress = (cd_progress_ptr)cinfo->progress;
298
299
  /* Read the data into a virtual array in input-file row order. */
300
5.96k
  for (row = 0; row < cinfo->image_height; row++) {
301
5.23k
    if (progress != NULL) {
302
0
      progress->pub.pass_counter = (long)row;
303
0
      progress->pub.pass_limit = (long)cinfo->image_height;
304
0
      (*progress->pub.progress_monitor) ((j_common_ptr)cinfo);
305
0
    }
306
5.23k
    source->pub.buffer = (*cinfo->mem->access_virt_sarray)
307
5.23k
      ((j_common_ptr)cinfo, source->whole_image, row, (JDIMENSION)1, TRUE);
308
5.23k
    (*source->get_pixel_rows) (cinfo, sinfo);
309
5.23k
  }
310
734
  if (progress != NULL)
311
0
    progress->completed_extra_passes++;
312
313
  /* Set up to read from the virtual array in unscrambled order */
314
734
  source->pub.get_pixel_rows = get_memory_row;
315
734
  source->current_row = 0;
316
  /* And read the first row */
317
734
  return get_memory_row(cinfo, sinfo);
318
734
}
319
320
321
/*
322
 * Read the file header; return image size and component count.
323
 */
324
325
METHODDEF(void)
326
start_input_tga(j_compress_ptr cinfo, cjpeg_source_ptr sinfo)
327
12.9k
{
328
12.9k
  tga_source_ptr source = (tga_source_ptr)sinfo;
329
12.9k
  unsigned char targaheader[18];
330
12.9k
  int idlen, cmaptype, subtype, flags, interlace_type, components;
331
12.9k
  unsigned int width, height, maplen;
332
12.9k
  boolean is_bottom_up;
333
334
12.9k
#define GET_2B(offset) \
335
39.3k
  ((unsigned int)(targaheader[offset]) + \
336
39.3k
   (((unsigned int)targaheader[offset + 1]) << 8))
337
338
12.9k
  if (!ReadOK(source->pub.input_file, targaheader, 18))
339
1.74k
    ERREXIT(cinfo, JERR_INPUT_EOF);
340
341
  /* Pretend "15-bit" pixels are 16-bit --- we ignore attribute bit anyway */
342
12.9k
  if (targaheader[16] == 15)
343
130
    targaheader[16] = 16;
344
345
12.9k
  idlen = targaheader[0];
346
12.9k
  cmaptype = targaheader[1];
347
12.9k
  subtype = targaheader[2];
348
12.9k
  maplen = GET_2B(5);
349
12.9k
  width = GET_2B(12);
350
12.9k
  height = GET_2B(14);
351
12.9k
  source->pixel_size = targaheader[16] >> 3;
352
12.9k
  flags = targaheader[17];      /* Image Descriptor byte */
353
354
12.9k
  is_bottom_up = ((flags & 0x20) == 0); /* bit 5 set => top-down */
355
12.9k
  interlace_type = flags >> 6;  /* bits 6/7 are interlace code */
356
357
12.9k
  if (cmaptype > 1 ||           /* cmaptype must be 0 or 1 */
358
1.56k
      source->pixel_size < 1 || source->pixel_size > 4 ||
359
1.53k
      (targaheader[16] & 7) != 0 || /* bits/pixel must be multiple of 8 */
360
1.52k
      interlace_type != 0 ||      /* currently don't allow interlaced image */
361
1.51k
      width == 0 || height == 0)  /* image width/height must be non-zero */
362
9.75k
    ERREXIT(cinfo, JERR_TGA_BADPARMS);
363
12.9k
  if (width > JPEG_MAX_DIMENSION || height > JPEG_MAX_DIMENSION)
364
16
    ERREXIT1(cinfo, JERR_IMAGE_TOO_BIG, JPEG_MAX_DIMENSION);
365
12.9k
  if (sinfo->max_pixels &&
366
1.48k
      (unsigned long long)width * height > sinfo->max_pixels)
367
134
    ERREXIT1(cinfo, JERR_IMAGE_TOO_BIG, sinfo->max_pixels);
368
369
12.9k
  if (subtype > 8) {
370
    /* It's an RLE-coded file */
371
722
    source->read_pixel = read_rle_pixel;
372
722
    source->block_count = source->dup_pixel_count = 0;
373
722
    subtype -= 8;
374
12.2k
  } else {
375
    /* Non-RLE file */
376
12.2k
    source->read_pixel = read_non_rle_pixel;
377
12.2k
  }
378
379
  /* Now should have subtype 1, 2, or 3 */
380
12.9k
  components = 3;               /* until proven different */
381
12.9k
  cinfo->in_color_space = JCS_RGB;
382
383
12.9k
  switch (subtype) {
384
302
  case 1:                       /* Colormapped image */
385
302
    if (source->pixel_size == 1 && cmaptype == 1)
386
290
      source->get_pixel_rows = get_8bit_row;
387
12
    else
388
12
      ERREXIT(cinfo, JERR_TGA_BADPARMS);
389
302
    TRACEMS2(cinfo, 1, JTRC_TGA_MAPPED, width, height);
390
302
    break;
391
560
  case 2:                       /* RGB image */
392
560
    switch (source->pixel_size) {
393
246
    case 2:
394
246
      source->get_pixel_rows = get_16bit_row;
395
246
      break;
396
158
    case 3:
397
158
      source->get_pixel_rows = get_24bit_row;
398
158
      break;
399
150
    case 4:
400
150
      source->get_pixel_rows = get_32bit_row;
401
150
      break;
402
6
    default:
403
6
      ERREXIT(cinfo, JERR_TGA_BADPARMS);
404
6
      break;
405
560
    }
406
554
    TRACEMS2(cinfo, 1, JTRC_TGA, width, height);
407
554
    break;
408
464
  case 3:                       /* Grayscale image */
409
464
    components = 1;
410
464
    cinfo->in_color_space = JCS_GRAYSCALE;
411
464
    if (source->pixel_size == 1)
412
454
      source->get_pixel_rows = get_8bit_gray_row;
413
10
    else
414
10
      ERREXIT(cinfo, JERR_TGA_BADPARMS);
415
464
    TRACEMS2(cinfo, 1, JTRC_TGA_GRAY, width, height);
416
464
    break;
417
24
  default:
418
24
    ERREXIT(cinfo, JERR_TGA_BADPARMS);
419
24
    break;
420
12.9k
  }
421
422
1.29k
  if (is_bottom_up) {
423
    /* Create a virtual array to buffer the upside-down image. */
424
954
    source->whole_image = (*cinfo->mem->request_virt_sarray)
425
954
      ((j_common_ptr)cinfo, JPOOL_IMAGE, FALSE,
426
954
       (JDIMENSION)width * components, (JDIMENSION)height, (JDIMENSION)1);
427
954
    if (cinfo->progress != NULL) {
428
0
      cd_progress_ptr progress = (cd_progress_ptr)cinfo->progress;
429
0
      progress->total_extra_passes++; /* count file input as separate pass */
430
0
    }
431
    /* source->pub.buffer will point to the virtual array. */
432
954
    source->pub.buffer_height = 1; /* in case anyone looks at it */
433
954
    source->pub.get_pixel_rows = preload_image;
434
954
  } else {
435
    /* Don't need a virtual array, but do need a one-row input buffer. */
436
344
    source->whole_image = NULL;
437
344
    source->pub.buffer = (*cinfo->mem->alloc_sarray)
438
344
      ((j_common_ptr)cinfo, JPOOL_IMAGE,
439
344
       (JDIMENSION)width * components, (JDIMENSION)1);
440
344
    source->pub.buffer_height = 1;
441
344
    source->pub.get_pixel_rows = source->get_pixel_rows;
442
344
  }
443
444
1.76k
  while (idlen--)               /* Throw away ID field */
445
462
    (void)read_byte(source);
446
447
1.29k
  if (maplen > 0) {
448
418
    if (maplen > 256 || GET_2B(3) != 0)
449
110
      ERREXIT(cinfo, JERR_TGA_BADCMAP);
450
    /* Allocate space to store the colormap */
451
418
    source->colormap = (*cinfo->mem->alloc_sarray)
452
418
      ((j_common_ptr)cinfo, JPOOL_IMAGE, (JDIMENSION)maplen, (JDIMENSION)3);
453
418
    source->cmap_length = (int)maplen;
454
    /* and read it from the file */
455
418
    read_colormap(source, (int)maplen, targaheader[7]);
456
880
  } else {
457
880
    if (cmaptype)               /* but you promised a cmap! */
458
6
      ERREXIT(cinfo, JERR_TGA_BADPARMS);
459
880
    source->colormap = NULL;
460
880
    source->cmap_length = 0;
461
880
  }
462
463
1.29k
  cinfo->input_components = components;
464
1.29k
  cinfo->data_precision = 8;
465
1.29k
  cinfo->image_width = width;
466
1.29k
  cinfo->image_height = height;
467
1.29k
}
468
469
470
METHODDEF(boolean)
471
read_icc_profile_tga(j_compress_ptr cinfo, cjpeg_source_ptr sinfo,
472
                     JOCTET **icc_data_ptr, unsigned int *icc_data_len)
473
988
{
474
988
  return FALSE;
475
988
}
476
477
478
/*
479
 * Finish up at the end of the file.
480
 */
481
482
METHODDEF(void)
483
finish_input_tga(j_compress_ptr cinfo, cjpeg_source_ptr sinfo)
484
12.9k
{
485
  /* no work */
486
12.9k
}
487
488
489
/*
490
 * The module selection routine for Targa format input.
491
 */
492
493
GLOBAL(cjpeg_source_ptr)
494
jinit_read_targa(j_compress_ptr cinfo)
495
12.9k
{
496
12.9k
  tga_source_ptr source;
497
498
12.9k
  if (cinfo->data_precision != 8)
499
0
    ERREXIT1(cinfo, JERR_BAD_PRECISION, cinfo->data_precision);
500
501
  /* Create module interface object */
502
12.9k
  source = (tga_source_ptr)
503
12.9k
    (*cinfo->mem->alloc_small) ((j_common_ptr)cinfo, JPOOL_IMAGE,
504
12.9k
                                sizeof(tga_source_struct));
505
12.9k
  source->cinfo = cinfo;        /* make back link for subroutines */
506
  /* Fill in method ptrs, except get_pixel_rows which start_input sets */
507
12.9k
  source->pub.start_input = start_input_tga;
508
12.9k
  source->pub.read_icc_profile = read_icc_profile_tga;
509
12.9k
  source->pub.finish_input = finish_input_tga;
510
12.9k
  source->pub.max_pixels = 0;
511
512
12.9k
  return (cjpeg_source_ptr)source;
513
12.9k
}
514
515
#endif /* TARGA_SUPPORTED */