Coverage Report

Created: 2026-01-25 06:29

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/qpdf/fuzz/tiffpredictor_fuzzer.cc
Line
Count
Source
1
#include <qpdf/Pl_Discard.hh>
2
#include <qpdf/Pl_TIFFPredictor.hh>
3
#include <iostream>
4
#include <stdexcept>
5
6
class FuzzHelper
7
{
8
  public:
9
    FuzzHelper(unsigned char const* data, size_t size);
10
    void run();
11
12
  private:
13
    void doChecks();
14
15
    unsigned char const* data;
16
    size_t size;
17
};
18
19
FuzzHelper::FuzzHelper(unsigned char const* data, size_t size) :
20
326k
    data(data),
21
326k
    size(size)
22
326k
{
23
326k
}
24
25
void
26
FuzzHelper::doChecks()
27
310k
{
28
310k
    Pl_Discard discard;
29
310k
    Pl_TIFFPredictor p("decoder", &discard, Pl_TIFFPredictor::a_decode, 16, 1, 8);
30
310k
    p.write(const_cast<unsigned char*>(data), size);
31
310k
    p.finish();
32
    // Exercise with strange values for some of the parameters.
33
310k
    Pl_TIFFPredictor p2("decoder", &discard, Pl_TIFFPredictor::a_decode, 16, 2, 5);
34
310k
    p2.write(const_cast<unsigned char*>(data), size);
35
310k
    p2.finish();
36
310k
}
37
38
void
39
FuzzHelper::run()
40
37.2k
{
41
37.2k
    try {
42
37.2k
        doChecks();
43
37.2k
    } catch (std::runtime_error const& e) {
44
29.6k
        std::cerr << "runtime_error: " << e.what() << '\n';
45
29.6k
    }
46
37.2k
}
47
48
extern "C" int
49
LLVMFuzzerTestOneInput(unsigned char const* data, size_t size)
50
326k
{
51
326k
    FuzzHelper f(data, size);
52
326k
    f.run();
53
326k
    return 0;
54
326k
}