// Copyright 2016 The PDFium Authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. #include #include #include "core/fxcodec/fax/faxmodule.h" #include "core/fxcodec/scanlinedecoder.h" #include "testing/fuzzers/pdfium_fuzzer_util.h" extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { static constexpr size_t kParameterSize = 21; if (size < kParameterSize) return 0; // Limit data size to prevent fuzzer timeout. static constexpr size_t kMaxDataSize = 256 * 1024; if (size > kParameterSize + kMaxDataSize) return 0; int width = GetInteger(data); int height = GetInteger(data + 4); int K = GetInteger(data + 8); int Columns = GetInteger(data + 12); int Rows = GetInteger(data + 16); bool EndOfLine = !(data[20] & 0x01); bool ByteAlign = !(data[20] & 0x02); // This controls if fxcodec::FaxDecoder::InvertBuffer() gets called. // The method is not interesting, and calling it doubles the runtime. const bool kBlackIs1 = false; data += kParameterSize; size -= kParameterSize; std::unique_ptr decoder = FaxModule::CreateDecoder({data, size}, width, height, K, EndOfLine, ByteAlign, kBlackIs1, Columns, Rows); if (decoder) { int line = 0; while (decoder->GetScanline(line)) line++; } return 0; }