Coverage Report

Created: 2025-08-26 06:43

/src/libwebp/tests/fuzzer/huffman_fuzzer.cc
Line
Count
Source (jump to first uncovered line)
1
// Copyright 2023 Google Inc.
2
//
3
// Licensed under the Apache License, Version 2.0 (the "License");
4
// you may not use this file except in compliance with the License.
5
// You may obtain a copy of the License at
6
//
7
//      http://www.apache.org/licenses/LICENSE-2.0
8
//
9
// Unless required by applicable law or agreed to in writing, software
10
// distributed under the License is distributed on an "AS IS" BASIS,
11
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12
// See the License for the specific language governing permissions and
13
// limitations under the License.
14
//
15
////////////////////////////////////////////////////////////////////////////////
16
17
#include <cstddef>
18
#include <cstdint>
19
#include <cstring>
20
#include <string_view>
21
22
#include "./fuzz_utils.h"
23
#include "src/dec/vp8li_dec.h"
24
#include "src/utils/bit_reader_utils.h"
25
#include "src/utils/huffman_utils.h"
26
#include "src/utils/utils.h"
27
#include "src/webp/format_constants.h"
28
29
namespace {
30
31
806
void HuffmanTest(std::string_view blob) {
32
806
  const uint8_t* const data = reinterpret_cast<const uint8_t*>(blob.data());
33
806
  const size_t size = blob.size();
34
35
  // Number of bits to initialize data.
36
806
  static const int kColorCacheBitsBits = 4;
37
  // 'num_htree_groups' is contained in the RG channel, hence 16 bits.
38
806
  static const int kNumHtreeGroupsBits = 16;
39
806
  if (size * sizeof(*data) < kColorCacheBitsBits + kNumHtreeGroupsBits) {
40
34
    return;
41
34
  }
42
43
  // A non-NULL mapping brings minor changes that are tested by the normal
44
  // fuzzer.
45
772
  int* const mapping = NULL;
46
772
  HuffmanTables huffman_tables;
47
772
  memset(&huffman_tables, 0, sizeof(huffman_tables));
48
772
  HTreeGroup* htree_groups = NULL;
49
50
772
  int num_htree_groups, num_htree_groups_max, color_cache_bits;
51
772
  VP8LBitReader* br;
52
772
  VP8LDecoder* dec = VP8LNew();
53
772
  if (dec == NULL) goto Error;
54
772
  br = &dec->br;
55
772
  VP8LInitBitReader(br, data, size);
56
57
772
  color_cache_bits = VP8LReadBits(br, kColorCacheBitsBits);
58
772
  if (color_cache_bits < 1 || color_cache_bits > MAX_CACHE_BITS) goto Error;
59
60
768
  num_htree_groups = VP8LReadBits(br, kNumHtreeGroupsBits);
61
  // 'num_htree_groups' cannot be 0 as it is built from a non-empty image.
62
768
  if (num_htree_groups == 0) goto Error;
63
  // This variable is only useful when mapping is not NULL.
64
766
  num_htree_groups_max = num_htree_groups;
65
766
  (void)ReadHuffmanCodesHelper(color_cache_bits, num_htree_groups,
66
766
                               num_htree_groups_max, mapping, dec,
67
766
                               &huffman_tables, &htree_groups);
68
69
772
Error:
70
772
  WebPSafeFree(mapping);
71
772
  VP8LHtreeGroupsFree(htree_groups);
72
772
  VP8LHuffmanTablesDeallocate(&huffman_tables);
73
772
  VP8LDelete(dec);
74
772
}
75
76
}  // namespace
77
78
FUZZ_TEST(Huffman, HuffmanTest).WithDomains(fuzztest::String());