56   BufState* buf_state = nullptr;  member
67     delete buf_state;  in ~PngObjectHandler()
72   BufState* buf_state = static_cast<BufState*>(png_get_io_ptr(png_ptr));  in user_read_data()  local
73   if (length > buf_state->bytes_left) {  in user_read_data()
76   memcpy(data, buf_state->data, length);  in user_read_data()
77   buf_state->bytes_left -= length;  in user_read_data()
78   buf_state->data += length;  in user_read_data()
127   png_handler.buf_state = new BufState();  in LLVMFuzzerTestOneInput()
128   png_handler.buf_state->data = data + kPngHeaderSize;  in LLVMFuzzerTestOneInput()
129   png_handler.buf_state->bytes_left = size - kPngHeaderSize;  in LLVMFuzzerTestOneInput()
130   png_set_read_fn(png_handler.png_ptr, png_handler.buf_state, user_read_data);  in LLVMFuzzerTestOneInput()