// Copyright 2019 The PDFium Authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. #include "core/fxge/cfx_cliprgn.h" #include "core/fxge/dib/cfx_dibitmap.h" #include "core/fxge/fx_dib.h" #include "testing/fuzzers/pdfium_fuzzer_util.h" #include "third_party/base/ptr_util.h" namespace { constexpr FXDIB_Format kFormat[] = { FXDIB_Invalid, FXDIB_1bppRgb, FXDIB_8bppRgb, FXDIB_Rgb, FXDIB_Rgb32, FXDIB_1bppMask, FXDIB_8bppMask, FXDIB_8bppRgba, FXDIB_Rgba, FXDIB_Argb, FXDIB_1bppCmyk, FXDIB_8bppCmyk, FXDIB_Cmyk, FXDIB_8bppCmyka, FXDIB_Cmyka}; } // namespace extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { constexpr size_t kParameterSize = 33; if (size < kParameterSize) return 0; int width = GetInteger(data); int height = GetInteger(data + 4); uint32_t argb = GetInteger(data + 8); int src_left = GetInteger(data + 12); int src_top = GetInteger(data + 16); int dest_left = GetInteger(data + 20); int dest_top = GetInteger(data + 24); BlendMode blend_mode = static_cast( data[28] % (static_cast(BlendMode::kLast) + 1)); FXDIB_Format dest_format = kFormat[data[29] % FX_ArraySize(kFormat)]; FXDIB_Format src_format = kFormat[data[30] % FX_ArraySize(kFormat)]; bool is_clip = !(data[31] % 2); bool is_rgb_byte_order = !(data[32] % 2); size -= kParameterSize; data += kParameterSize; auto src_bitmap = pdfium::MakeRetain(); auto dest_bitmap = pdfium::MakeRetain(); if (!src_bitmap->Create(width, height, src_format) || !dest_bitmap->Create(width, height, dest_format)) { return 0; } if (!src_bitmap->GetBuffer() || !dest_bitmap->GetBuffer()) { return 0; } std::unique_ptr clip_rgn; if (is_clip) clip_rgn = pdfium::MakeUnique(width, height); if (src_bitmap->IsAlphaMask()) { dest_bitmap->CompositeMask(dest_left, dest_top, width, height, src_bitmap, argb, src_left, src_top, blend_mode, clip_rgn.get(), is_rgb_byte_order); } else { dest_bitmap->CompositeBitmap(dest_left, dest_top, width, height, src_bitmap, src_left, src_top, blend_mode, clip_rgn.get(), is_rgb_byte_order); } return 0; }