skia2/fuzz/oss_fuzz/FuzzIncrementalImage.cpp
Kevin Lubick 493f89e577 [fuzz] Standardize, document, and backport fuzzing defines.
We had several defines around the code base that were not
very descriptive. Additionally, we had a patch of extra
runtime restrictions living in oss-fuzz that were applied
when fuzzing over there for some fuzzers.

This has all be consolidated and controlled via the defines
documented in site/dev/testing/fuzz.md

As such, we can remove one of the patches that is in oss-fuzz,
taking us closer to being able to fuzz in the CI/CQ.

PS 1 renames existing fuzz defines to the new schema.
PS 2-3 backports skia.diff from oss-fuzz and changes those
definitions to have the _GREATLY modifier.
PS 5+ further condenses the defines so that there is one
define for gating the runtime checks.

Change-Id: Ia4ad96f30c1e9620a2123b510e97c6f501a2e257
Docs-Preview: https://skia.org/?cl=316443
Bug: skia:10713
Reviewed-on: https://skia-review.googlesource.com/c/skia/+/316443
Commit-Queue: Kevin Lubick <kjlubick@google.com>
Reviewed-by: Mike Klein <mtklein@google.com>
2020-09-14 13:36:10 +00:00

58 lines
1.7 KiB
C++

/*
* Copyright 2018 Google, LLC
*
* Use of this source code is governed by a BSD-style license that can be
* found in the LICENSE file.
*/
#include "include/codec/SkCodec.h"
#include "include/core/SkBitmap.h"
#include "include/core/SkData.h"
bool FuzzIncrementalImageDecode(sk_sp<SkData> bytes) {
auto codec = SkCodec::MakeFromData(bytes);
if (!codec) {
return false;
}
SkBitmap bm;
if (!bm.tryAllocPixels(codec->getInfo())) {
// May fail in memory-constrained fuzzing environments
return false;
}
auto result = codec->startIncrementalDecode(bm.info(), bm.getPixels(), bm.rowBytes());
if (result != SkCodec::kSuccess) {
return false;
}
// Deliberately uninitialized to verify that incrementalDecode initializes it when it
// returns kIncompleteInput or kErrorInInput.
int rowsDecoded;
result = codec->incrementalDecode(&rowsDecoded);
switch (result) {
case SkCodec::kIncompleteInput:
case SkCodec::kErrorInInput:
if (rowsDecoded < bm.height()) {
void* dst = SkTAddOffset<void>(bm.getPixels(), rowsDecoded * bm.rowBytes());
sk_bzero(dst, (bm.height() - rowsDecoded) * bm.rowBytes());
}
return true; // decoded a partial image
case SkCodec::kSuccess:
return true;
default:
return false;
}
}
#if defined(SK_BUILD_FOR_LIBFUZZER)
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
if (size > 10240) {
return 0;
}
auto bytes = SkData::MakeWithoutCopy(data, size);
FuzzIncrementalImageDecode(bytes);
return 0;
}
#endif