1 /*
2 * Test program, which can detect some problems with affine transformations
3 * in pixman. Testing is done by running lots of random SRC and OVER
4 * compositing operations a8r8g8b8, x8a8r8g8b8, r5g6b5 and a8 color formats
5 * with random scaled, rotated and translated transforms.
6 *
7 * Script 'fuzzer-find-diff.pl' can be used to narrow down the problem in
8 * the case of test failure.
9 */
10 #include <assert.h>
11 #include <stdlib.h>
12 #include <stdio.h>
13 #include "utils.h"
14
15 #define MAX_SRC_WIDTH 16
16 #define MAX_SRC_HEIGHT 16
17 #define MAX_DST_WIDTH 16
18 #define MAX_DST_HEIGHT 16
19 #define MAX_STRIDE 4
20
21 /*
22 * Composite operation with pseudorandom images
23 */
24 uint32_t
test_composite(int testnum,int verbose)25 test_composite (int testnum,
26 int verbose)
27 {
28 int i;
29 pixman_image_t * src_img;
30 pixman_image_t * dst_img;
31 pixman_transform_t transform;
32 pixman_region16_t clip;
33 int src_width, src_height;
34 int dst_width, dst_height;
35 int src_stride, dst_stride;
36 int src_x, src_y;
37 int dst_x, dst_y;
38 int src_bpp;
39 int dst_bpp;
40 int w, h;
41 pixman_fixed_t scale_x = 65536, scale_y = 65536;
42 pixman_fixed_t translate_x = 0, translate_y = 0;
43 pixman_op_t op;
44 pixman_repeat_t repeat = PIXMAN_REPEAT_NONE;
45 pixman_format_code_t src_fmt, dst_fmt;
46 uint32_t * srcbuf;
47 uint32_t * dstbuf;
48 uint32_t crc32;
49 FLOAT_REGS_CORRUPTION_DETECTOR_START ();
50
51 prng_srand (testnum);
52
53 src_bpp = (prng_rand_n (2) == 0) ? 2 : 4;
54 dst_bpp = (prng_rand_n (2) == 0) ? 2 : 4;
55 op = (prng_rand_n (2) == 0) ? PIXMAN_OP_SRC : PIXMAN_OP_OVER;
56
57 src_width = prng_rand_n (MAX_SRC_WIDTH) + 1;
58 src_height = prng_rand_n (MAX_SRC_HEIGHT) + 1;
59 dst_width = prng_rand_n (MAX_DST_WIDTH) + 1;
60 dst_height = prng_rand_n (MAX_DST_HEIGHT) + 1;
61 src_stride = src_width * src_bpp + prng_rand_n (MAX_STRIDE) * src_bpp;
62 dst_stride = dst_width * dst_bpp + prng_rand_n (MAX_STRIDE) * dst_bpp;
63
64 if (src_stride & 3)
65 src_stride += 2;
66
67 if (dst_stride & 3)
68 dst_stride += 2;
69
70 src_x = -(src_width / 4) + prng_rand_n (src_width * 3 / 2);
71 src_y = -(src_height / 4) + prng_rand_n (src_height * 3 / 2);
72 dst_x = -(dst_width / 4) + prng_rand_n (dst_width * 3 / 2);
73 dst_y = -(dst_height / 4) + prng_rand_n (dst_height * 3 / 2);
74 w = prng_rand_n (dst_width * 3 / 2 - dst_x);
75 h = prng_rand_n (dst_height * 3 / 2 - dst_y);
76
77 srcbuf = (uint32_t *)malloc (src_stride * src_height);
78 dstbuf = (uint32_t *)malloc (dst_stride * dst_height);
79
80 prng_randmemset (srcbuf, src_stride * src_height, 0);
81 prng_randmemset (dstbuf, dst_stride * dst_height, 0);
82
83 if (prng_rand_n (2) == 0)
84 {
85 srcbuf += (src_stride / 4) * (src_height - 1);
86 src_stride = - src_stride;
87 }
88
89 if (prng_rand_n (2) == 0)
90 {
91 dstbuf += (dst_stride / 4) * (dst_height - 1);
92 dst_stride = - dst_stride;
93 }
94
95 src_fmt = src_bpp == 4 ? (prng_rand_n (2) == 0 ?
96 PIXMAN_a8r8g8b8 : PIXMAN_x8r8g8b8) : PIXMAN_r5g6b5;
97
98 dst_fmt = dst_bpp == 4 ? (prng_rand_n (2) == 0 ?
99 PIXMAN_a8r8g8b8 : PIXMAN_x8r8g8b8) : PIXMAN_r5g6b5;
100
101 src_img = pixman_image_create_bits (
102 src_fmt, src_width, src_height, srcbuf, src_stride);
103
104 dst_img = pixman_image_create_bits (
105 dst_fmt, dst_width, dst_height, dstbuf, dst_stride);
106
107 image_endian_swap (src_img);
108 image_endian_swap (dst_img);
109
110 pixman_transform_init_identity (&transform);
111
112 if (prng_rand_n (3) > 0)
113 {
114 scale_x = -65536 * 3 + prng_rand_n (65536 * 6);
115 if (prng_rand_n (2))
116 scale_y = -65536 * 3 + prng_rand_n (65536 * 6);
117 else
118 scale_y = scale_x;
119 pixman_transform_init_scale (&transform, scale_x, scale_y);
120 }
121 if (prng_rand_n (3) > 0)
122 {
123 translate_x = -65536 * 3 + prng_rand_n (6 * 65536);
124 if (prng_rand_n (2))
125 translate_y = -65536 * 3 + prng_rand_n (6 * 65536);
126 else
127 translate_y = translate_x;
128 pixman_transform_translate (&transform, NULL, translate_x, translate_y);
129 }
130
131 if (prng_rand_n (4) > 0)
132 {
133 int c, s, tx = 0, ty = 0;
134 switch (prng_rand_n (4))
135 {
136 case 0:
137 /* 90 degrees */
138 c = 0;
139 s = pixman_fixed_1;
140 tx = pixman_int_to_fixed (MAX_SRC_HEIGHT);
141 break;
142 case 1:
143 /* 180 degrees */
144 c = -pixman_fixed_1;
145 s = 0;
146 tx = pixman_int_to_fixed (MAX_SRC_WIDTH);
147 ty = pixman_int_to_fixed (MAX_SRC_HEIGHT);
148 break;
149 case 2:
150 /* 270 degrees */
151 c = 0;
152 s = -pixman_fixed_1;
153 ty = pixman_int_to_fixed (MAX_SRC_WIDTH);
154 break;
155 default:
156 /* arbitrary rotation */
157 c = prng_rand_n (2 * 65536) - 65536;
158 s = prng_rand_n (2 * 65536) - 65536;
159 break;
160 }
161 pixman_transform_rotate (&transform, NULL, c, s);
162 pixman_transform_translate (&transform, NULL, tx, ty);
163 }
164
165 if (prng_rand_n (8) == 0)
166 {
167 /* Flip random bits */
168 int maxflipcount = 8;
169 while (maxflipcount--)
170 {
171 int i = prng_rand_n (2);
172 int j = prng_rand_n (3);
173 int bitnum = prng_rand_n (32);
174 transform.matrix[i][j] ^= 1U << bitnum;
175 if (prng_rand_n (2))
176 break;
177 }
178 }
179
180 pixman_image_set_transform (src_img, &transform);
181
182 switch (prng_rand_n (4))
183 {
184 case 0:
185 repeat = PIXMAN_REPEAT_NONE;
186 break;
187
188 case 1:
189 repeat = PIXMAN_REPEAT_NORMAL;
190 break;
191
192 case 2:
193 repeat = PIXMAN_REPEAT_PAD;
194 break;
195
196 case 3:
197 repeat = PIXMAN_REPEAT_REFLECT;
198 break;
199
200 default:
201 break;
202 }
203 pixman_image_set_repeat (src_img, repeat);
204
205 if (prng_rand_n (2))
206 pixman_image_set_filter (src_img, PIXMAN_FILTER_NEAREST, NULL, 0);
207 else
208 pixman_image_set_filter (src_img, PIXMAN_FILTER_BILINEAR, NULL, 0);
209
210 if (verbose)
211 {
212 #define M(r,c) \
213 transform.matrix[r][c]
214
215 printf ("src_fmt=%s, dst_fmt=%s\n", format_name (src_fmt), format_name (dst_fmt));
216 printf ("op=%s, repeat=%d, transform=\n",
217 operator_name (op), repeat);
218 printf (" { { { 0x%08x, 0x%08x, 0x%08x },\n"
219 " { 0x%08x, 0x%08x, 0x%08x },\n"
220 " { 0x%08x, 0x%08x, 0x%08x },\n"
221 " } };\n",
222 M(0,0), M(0,1), M(0,2),
223 M(1,0), M(1,1), M(1,2),
224 M(2,0), M(2,1), M(2,2));
225 printf ("src_width=%d, src_height=%d, dst_width=%d, dst_height=%d\n",
226 src_width, src_height, dst_width, dst_height);
227 printf ("src_x=%d, src_y=%d, dst_x=%d, dst_y=%d\n",
228 src_x, src_y, dst_x, dst_y);
229 printf ("w=%d, h=%d\n", w, h);
230 }
231
232 if (prng_rand_n (8) == 0)
233 {
234 pixman_box16_t clip_boxes[2];
235 int n = prng_rand_n (2) + 1;
236
237 for (i = 0; i < n; i++)
238 {
239 clip_boxes[i].x1 = prng_rand_n (src_width);
240 clip_boxes[i].y1 = prng_rand_n (src_height);
241 clip_boxes[i].x2 =
242 clip_boxes[i].x1 + prng_rand_n (src_width - clip_boxes[i].x1);
243 clip_boxes[i].y2 =
244 clip_boxes[i].y1 + prng_rand_n (src_height - clip_boxes[i].y1);
245
246 if (verbose)
247 {
248 printf ("source clip box: [%d,%d-%d,%d]\n",
249 clip_boxes[i].x1, clip_boxes[i].y1,
250 clip_boxes[i].x2, clip_boxes[i].y2);
251 }
252 }
253
254 pixman_region_init_rects (&clip, clip_boxes, n);
255 pixman_image_set_clip_region (src_img, &clip);
256 pixman_image_set_source_clipping (src_img, 1);
257 pixman_region_fini (&clip);
258 }
259
260 if (prng_rand_n (8) == 0)
261 {
262 pixman_box16_t clip_boxes[2];
263 int n = prng_rand_n (2) + 1;
264 for (i = 0; i < n; i++)
265 {
266 clip_boxes[i].x1 = prng_rand_n (dst_width);
267 clip_boxes[i].y1 = prng_rand_n (dst_height);
268 clip_boxes[i].x2 =
269 clip_boxes[i].x1 + prng_rand_n (dst_width - clip_boxes[i].x1);
270 clip_boxes[i].y2 =
271 clip_boxes[i].y1 + prng_rand_n (dst_height - clip_boxes[i].y1);
272
273 if (verbose)
274 {
275 printf ("destination clip box: [%d,%d-%d,%d]\n",
276 clip_boxes[i].x1, clip_boxes[i].y1,
277 clip_boxes[i].x2, clip_boxes[i].y2);
278 }
279 }
280 pixman_region_init_rects (&clip, clip_boxes, n);
281 pixman_image_set_clip_region (dst_img, &clip);
282 pixman_region_fini (&clip);
283 }
284
285 pixman_image_composite (op, src_img, NULL, dst_img,
286 src_x, src_y, 0, 0, dst_x, dst_y, w, h);
287
288 crc32 = compute_crc32_for_image (0, dst_img);
289
290 if (verbose)
291 print_image (dst_img);
292
293 pixman_image_unref (src_img);
294 pixman_image_unref (dst_img);
295
296 if (src_stride < 0)
297 srcbuf += (src_stride / 4) * (src_height - 1);
298
299 if (dst_stride < 0)
300 dstbuf += (dst_stride / 4) * (dst_height - 1);
301
302 free (srcbuf);
303 free (dstbuf);
304
305 FLOAT_REGS_CORRUPTION_DETECTOR_FINISH ();
306 return crc32;
307 }
308
309 #if BILINEAR_INTERPOLATION_BITS == 7
310 #define CHECKSUM 0xBE724CFE
311 #elif BILINEAR_INTERPOLATION_BITS == 4
312 #define CHECKSUM 0x79BBE501
313 #else
314 #define CHECKSUM 0x00000000
315 #endif
316
317 int
main(int argc,const char * argv[])318 main (int argc, const char *argv[])
319 {
320 pixman_disable_out_of_bounds_workaround ();
321
322 return fuzzer_test_main ("affine", 8000000, CHECKSUM,
323 test_composite, argc, argv);
324 }
325