Line | Count | Source |
1 | | /* Copyright 2020 Google Inc. |
2 | | |
3 | | Licensed under the Apache License, Version 2.0 (the "License"); |
4 | | you may not use this file except in compliance with the License. |
5 | | You may obtain a copy of the License at |
6 | | |
7 | | http://www.apache.org/licenses/LICENSE-2.0 |
8 | | |
9 | | Unless required by applicable law or agreed to in writing, software |
10 | | distributed under the License is distributed on an "AS IS" BASIS, |
11 | | WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
12 | | See the License for the specific language governing permissions and |
13 | | limitations under the License. |
14 | | */ |
15 | | |
16 | | #include <stddef.h> |
17 | | #include <stdint.h> |
18 | | |
19 | | #include <string> |
20 | | #include <fuzzer/FuzzedDataProvider.h> |
21 | | |
22 | | #include <libraw.h> |
23 | | |
24 | | enum InterpolationOptions { |
25 | | Linear = 0, |
26 | | Vng = 1, |
27 | | Ppg = 2, |
28 | | Ahd = 3, |
29 | | Dcb = 4, |
30 | | Dht = 11, |
31 | | AhdModified = 12 |
32 | | }; |
33 | | static const InterpolationOptions options[] = {Linear, Vng, Ppg, Ahd, Dcb, Dht, AhdModified}; |
34 | | |
35 | 23.5k | extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { |
36 | | // Input less than 15mb |
37 | 23.5k | if (size > 15000000) { |
38 | 0 | return 0; |
39 | 0 | } |
40 | | |
41 | 23.5k | FuzzedDataProvider fdp(data, size); |
42 | | |
43 | 23.5k | LibRaw lib_raw; |
44 | 23.5k | lib_raw.imgdata.rawparams.max_raw_memory_mb = 300; |
45 | | |
46 | 117k | for(int i =0; i < 4; i++) |
47 | 94.3k | lib_raw.output_params_ptr()->aber[i] = fdp.ConsumeFloatingPoint<double>(); |
48 | 117k | for(int i =0; i < 4; i++) |
49 | 94.3k | lib_raw.output_params_ptr()->user_mul[i] = fdp.ConsumeFloatingPoint<float>(); |
50 | 70.7k | for(int i =0; i < 2; i++) |
51 | 47.1k | lib_raw.output_params_ptr()->gamm[i] = fdp.ConsumeFloatingPoint<double>(); |
52 | 23.5k | lib_raw.output_params_ptr()->bright = fdp.ConsumeFloatingPoint<float>(); |
53 | 23.5k | lib_raw.output_params_ptr()->threshold = fdp.ConsumeFloatingPoint<float>(); |
54 | 23.5k | lib_raw.output_params_ptr()->use_auto_wb = fdp.ConsumeIntegral<int>(); |
55 | 23.5k | lib_raw.output_params_ptr()->output_color = fdp.ConsumeIntegralInRange<int>(0, 6); |
56 | 23.5k | lib_raw.output_params_ptr()->user_flip = fdp.ConsumeIntegralInRange<int>(0, 7); |
57 | 23.5k | lib_raw.output_params_ptr()->user_black = fdp.ConsumeIntegral<int>(); |
58 | 23.5k | lib_raw.output_params_ptr()->user_sat = fdp.ConsumeIntegral<int>(); |
59 | 23.5k | lib_raw.output_params_ptr()->auto_bright_thr = fdp.ConsumeFloatingPoint<float>(); |
60 | 23.5k | lib_raw.output_params_ptr()->adjust_maximum_thr = fdp.ConsumeFloatingPointInRange<float>(0.f, 1.f); |
61 | 23.5k | lib_raw.output_params_ptr()->fbdd_noiserd = fdp.ConsumeIntegralInRange<int>(0, 5); |
62 | | |
63 | 23.5k | std::vector<char> payload = fdp.ConsumeRemainingBytes<char>(); |
64 | 23.5k | int result = lib_raw.open_buffer(payload.data(), payload.size()); |
65 | 23.5k | if (result != LIBRAW_SUCCESS) { |
66 | 17.2k | return 0; |
67 | 17.2k | } |
68 | | |
69 | 6.30k | result = lib_raw.unpack(); |
70 | 6.30k | if (result != LIBRAW_SUCCESS) { |
71 | 3.15k | return 0; |
72 | 3.15k | } |
73 | | |
74 | 3.15k | result = lib_raw.unpack_thumb(); |
75 | 3.15k | if (result != LIBRAW_SUCCESS) { |
76 | 957 | return 0; |
77 | 957 | } |
78 | | |
79 | 2.19k | result = lib_raw.raw2image(); |
80 | 2.19k | if (result != LIBRAW_SUCCESS) { |
81 | 230 | return 0; |
82 | 230 | } |
83 | 1.96k | lib_raw.free_image(); |
84 | | |
85 | 13.7k | for (int i = 0; i < sizeof(options)/sizeof(*options); i++) { |
86 | 12.1k | lib_raw.output_params_ptr()->user_qual = static_cast<int>(options[i]); |
87 | | |
88 | 12.1k | result = lib_raw.dcraw_process(); |
89 | 12.1k | if (result != LIBRAW_SUCCESS) { |
90 | 346 | return 0; |
91 | 346 | } |
92 | 12.1k | } |
93 | | |
94 | 1.61k | return 0; |
95 | 1.96k | } |