Coverage Report

Created: 2023-09-25 06:41

/src/xpdf-4.04/build/fuzz_pdfload.cc
Line
Count
Source (jump to first uncovered line)
1
/*  Copyright 2020 Google Inc.
2
3
Licensed under the Apache License, Version 2.0 (the "License");
4
you may not use this file except in compliance with the License.
5
You may obtain a copy of the License at
6
7
      http://www.apache.org/licenses/LICENSE-2.0
8
9
Unless required by applicable law or agreed to in writing, software
10
distributed under the License is distributed on an "AS IS" BASIS,
11
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12
See the License for the specific language governing permissions and
13
limitations under the License.
14
*/
15
#include <fuzzer/FuzzedDataProvider.h>
16
17
#include <vector>
18
#include <aconf.h>
19
#include <stdio.h>
20
#include <stdint.h>
21
#include <stdlib.h>
22
#include <stddef.h>
23
#include <string.h>
24
#include <png.h>
25
26
#include "gmem.h"
27
#include "gmempp.h"
28
#include "parseargs.h"
29
#include "GString.h"
30
#include "gfile.h"
31
#include "GlobalParams.h"
32
#include "Object.h"
33
#include "PDFDoc.h"
34
#include "SplashBitmap.h"
35
#include "Splash.h"
36
#include "SplashOutputDev.h"
37
#include "Stream.h"
38
#include "config.h"
39
#include "JBIG2Stream.h"
40
41
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
42
36
{
43
36
    FuzzedDataProvider fdp (data, size);
44
36
    double hdpi = fdp.ConsumeFloatingPoint<double>();
45
36
    double vdpi = fdp.ConsumeFloatingPoint<double>();
46
36
    int rotate = fdp.ConsumeIntegral<int>();
47
36
    bool useMediaBox = fdp.ConsumeBool();
48
36
    bool crop = fdp.ConsumeBool();
49
36
    bool printing = fdp.ConsumeBool();
50
36
    std::vector<char> payload = fdp.ConsumeRemainingBytes<char>();
51
52
36
    Object xpdf_obj;
53
36
    xpdf_obj.initNull();
54
36
    BaseStream *stream = new MemStream(payload.data(), 0, payload.size(), &xpdf_obj);
55
56
36
    Object info, xfa;
57
36
    Object *acroForm;
58
36
    globalParams = new GlobalParams(NULL);
59
36
    globalParams->setErrQuiet(1);
60
36
    globalParams->setupBaseFonts(NULL);
61
36
    char yes[] = "yes";
62
36
    globalParams->setEnableFreeType(yes);  // Yes, it's a string and not a bool.
63
36
    globalParams->setErrQuiet(1);
64
65
36
    PDFDoc *doc = NULL;
66
36
    try {
67
36
      PDFDoc doc(stream);
68
36
        if (doc.isOk() == gTrue)
69
0
        {
70
0
            doc.getNumPages();
71
0
            doc.getOutline();
72
0
            doc.getStructTreeRoot();
73
0
            doc.getXRef();
74
0
            doc.okToPrint(gTrue);
75
0
            doc.okToCopy(gTrue);
76
0
            doc.okToChange(gTrue);
77
0
            doc.okToAddNotes(gTrue);
78
0
            doc.isLinearized();
79
0
            doc.getPDFVersion();
80
81
0
            GString *metadata;
82
0
            if ((metadata = doc.readMetadata())) {
83
0
              (void)metadata->getCString();
84
0
            }
85
0
            delete metadata;
86
87
0
            Object info;
88
0
            doc.getDocInfo(&info);
89
0
            if (info.isDict()) {
90
0
              info.getDict();
91
0
            }
92
0
            info.free();
93
94
0
            if ((acroForm = doc.getCatalog()->getAcroForm())->isDict()) {
95
0
                acroForm->dictLookup("XFA", &xfa);
96
0
                xfa.free();
97
0
            }
98
99
0
            for (size_t i = 0; i < doc.getNumPages(); i++) {
100
0
              doc.getLinks(i);
101
0
              auto page = doc.getCatalog()->getPage(i);
102
0
              if (!page->isOk()) {
103
0
                continue;
104
0
              }
105
0
              page->getResourceDict();
106
0
              page->getMetadata();
107
0
              page->getResourceDict();
108
0
            }
109
110
0
            SplashColor paperColor = {0xff, 0xff, 0xff};
111
0
            SplashOutputDev *splashOut = new SplashOutputDev(splashModeRGB8, 1, gFalse, paperColor);
112
0
            splashOut->setNoComposite(gTrue);
113
0
            splashOut->startDoc(doc.getXRef());
114
0
            for (size_t i = 0; i <= doc.getNumPages(); ++i) {
115
0
              doc.displayPage(splashOut, i, hdpi, vdpi, rotate, useMediaBox, crop, printing);
116
0
            }
117
0
            (void)splashOut->getBitmap();
118
119
0
            delete splashOut;
120
0
        }
121
36
    } catch (...) {
122
123
0
    }
124
125
36
    delete globalParams;
126
127
36
    return 0;
128
36
}
129