Coverage Report

Created: 2022-10-12 06:08

/src/libwebp/tests/fuzzer/animdecoder_fuzzer.cc
Line
Count
Source (jump to first uncovered line)
1
// Copyright 2020 Google Inc.
2
//
3
// Licensed under the Apache License, Version 2.0 (the "License");
4
// you may not use this file except in compliance with the License.
5
// You may obtain a copy of the License at
6
//
7
//      http://www.apache.org/licenses/LICENSE-2.0
8
//
9
// Unless required by applicable law or agreed to in writing, software
10
// distributed under the License is distributed on an "AS IS" BASIS,
11
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12
// See the License for the specific language governing permissions and
13
// limitations under the License.
14
//
15
////////////////////////////////////////////////////////////////////////////////
16
17
#include "examples/anim_util.h"
18
#include "imageio/imageio_util.h"
19
#include "src/webp/demux.h"
20
21
5.98k
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
22
  // WebPAnimDecoderGetInfo() is too late to check the canvas size as
23
  // WebPAnimDecoderNew() will handle the allocations.
24
5.98k
  WebPBitstreamFeatures features;
25
5.98k
  if (WebPGetFeatures(data, size, &features) == VP8_STATUS_OK) {
26
5.47k
    if (!ImgIoUtilCheckSizeArgumentsOverflow(features.width * 4,
27
5.47k
                                             features.height)) {
28
50
      return 0;
29
50
    }
30
5.47k
  }
31
32
  // decode everything as an animation
33
5.93k
  WebPData webp_data = { data, size };
34
5.93k
  WebPAnimDecoder* const dec = WebPAnimDecoderNew(&webp_data, NULL);
35
5.93k
  if (dec == NULL) return 0;
36
37
4.43k
  WebPAnimInfo info;
38
4.43k
  if (!WebPAnimDecoderGetInfo(dec, &info)) goto End;
39
4.43k
  if (!ImgIoUtilCheckSizeArgumentsOverflow(info.canvas_width * 4,
40
4.43k
                                           info.canvas_height)) {
41
0
    goto End;
42
0
  }
43
44
6.22k
  while (WebPAnimDecoderHasMoreFrames(dec)) {
45
5.36k
    uint8_t* buf;
46
5.36k
    int timestamp;
47
5.36k
    if (!WebPAnimDecoderGetNext(dec, &buf, &timestamp)) break;
48
5.36k
  }
49
4.43k
 End:
50
4.43k
  WebPAnimDecoderDelete(dec);
51
4.43k
  return 0;
52
4.43k
}