/src/libwebp/tests/fuzzer/animdecoder_fuzzer.cc
Line | Count | Source (jump to first uncovered line) |
1 | | // Copyright 2020 Google Inc. |
2 | | // |
3 | | // Licensed under the Apache License, Version 2.0 (the "License"); |
4 | | // you may not use this file except in compliance with the License. |
5 | | // You may obtain a copy of the License at |
6 | | // |
7 | | // http://www.apache.org/licenses/LICENSE-2.0 |
8 | | // |
9 | | // Unless required by applicable law or agreed to in writing, software |
10 | | // distributed under the License is distributed on an "AS IS" BASIS, |
11 | | // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
12 | | // See the License for the specific language governing permissions and |
13 | | // limitations under the License. |
14 | | // |
15 | | //////////////////////////////////////////////////////////////////////////////// |
16 | | |
17 | | #include "examples/anim_util.h" |
18 | | #include "imageio/imageio_util.h" |
19 | | #include "src/webp/demux.h" |
20 | | |
21 | 5.98k | extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { |
22 | | // WebPAnimDecoderGetInfo() is too late to check the canvas size as |
23 | | // WebPAnimDecoderNew() will handle the allocations. |
24 | 5.98k | WebPBitstreamFeatures features; |
25 | 5.98k | if (WebPGetFeatures(data, size, &features) == VP8_STATUS_OK) { |
26 | 5.47k | if (!ImgIoUtilCheckSizeArgumentsOverflow(features.width * 4, |
27 | 5.47k | features.height)) { |
28 | 50 | return 0; |
29 | 50 | } |
30 | 5.47k | } |
31 | | |
32 | | // decode everything as an animation |
33 | 5.93k | WebPData webp_data = { data, size }; |
34 | 5.93k | WebPAnimDecoder* const dec = WebPAnimDecoderNew(&webp_data, NULL); |
35 | 5.93k | if (dec == NULL) return 0; |
36 | | |
37 | 4.43k | WebPAnimInfo info; |
38 | 4.43k | if (!WebPAnimDecoderGetInfo(dec, &info)) goto End; |
39 | 4.43k | if (!ImgIoUtilCheckSizeArgumentsOverflow(info.canvas_width * 4, |
40 | 4.43k | info.canvas_height)) { |
41 | 0 | goto End; |
42 | 0 | } |
43 | | |
44 | 6.22k | while (WebPAnimDecoderHasMoreFrames(dec)) { |
45 | 5.36k | uint8_t* buf; |
46 | 5.36k | int timestamp; |
47 | 5.36k | if (!WebPAnimDecoderGetNext(dec, &buf, ×tamp)) break; |
48 | 5.36k | } |
49 | 4.43k | End: |
50 | 4.43k | WebPAnimDecoderDelete(dec); |
51 | 4.43k | return 0; |
52 | 4.43k | } |