7ffa40cedb
This CL renames FuzzPath() to FuzzNicePath() to remind us that it's meant to create paths that a user could reasonably want to create in good faith, to pass to Skia via its API, etc. Then, add fuzz_nice_rect(), and have FuzzNicePath() use that to create its rectangles and use FuzzNiceMatrix() to create its matrices, just like we already use FuzzNiceRRect() to create rounded rectangles and FuzzNicePath() itself to create sub-paths. Using fuzz_nice_rect() should be the fix for the attached bug. Using FuzzNiceMatrix() is by analogy, more preemptive. While we're at it, rename BuildPath to FuzzEvilPath, so the contrast with FuzzNicePath is more clear. Update the assertions that we create a valid path in FuzzNicePath() to tell us where things went wrong if they do. Bug: oss-fuzz:10667, skia:8384 Change-Id: I6d802182a62815cd969c65cf0479609f64b1da55 Reviewed-on: https://skia-review.googlesource.com/156840 Reviewed-by: Kevin Lubick <kjlubick@google.com> Commit-Queue: Kevin Lubick <kjlubick@google.com> Auto-Submit: Mike Klein <mtklein@google.com>
47 lines
985 B
C++
47 lines
985 B
C++
/*
|
|
* Copyright 2018 Google Inc.
|
|
*
|
|
* Use of this source code is governed by a BSD-style license that can be
|
|
* found in the LICENSE file.
|
|
*/
|
|
|
|
#include "../Fuzz.h"
|
|
#include "../FuzzCommon.h"
|
|
#include "SkData.h"
|
|
#include "SkPath.h"
|
|
#include "SkRegion.h"
|
|
|
|
|
|
void FuzzRegionSetPath(Fuzz* fuzz) {
|
|
SkPath p;
|
|
FuzzNicePath(fuzz, &p, 1000);
|
|
SkRegion r1;
|
|
bool initR1;
|
|
fuzz->next(&initR1);
|
|
if (initR1) {
|
|
fuzz->next(&r1);
|
|
}
|
|
SkRegion r2;
|
|
fuzz->next(&r2);
|
|
|
|
r1.setPath(p, r2);
|
|
|
|
// Do some follow on computations to make sure region is well-formed.
|
|
r1.computeRegionComplexity();
|
|
r1.isComplex();
|
|
if (r1 == r2) {
|
|
r1.contains(0,0);
|
|
} else {
|
|
r1.contains(1,1);
|
|
}
|
|
}
|
|
|
|
#if defined(IS_FUZZING_WITH_LIBFUZZER)
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
|
|
sk_sp<SkData> bytes(SkData::MakeWithoutCopy(data, size));
|
|
Fuzz fuzz(bytes);
|
|
FuzzRegionSetPath(&fuzz);
|
|
return 0;
|
|
}
|
|
#endif
|