• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 // Copyright 2020 Google LLC
2 //
3 // Licensed under the Apache License, Version 2.0 (the "License");
4 // you may not use this file except in compliance with the License.
5 // You may obtain a copy of the License at
6 //
7 //      http://www.apache.org/licenses/LICENSE-2.0
8 //
9 // Unless required by applicable law or agreed to in writing, software
10 // distributed under the License is distributed on an "AS IS" BASIS,
11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 // See the License for the specific language governing permissions and
13 // limitations under the License.
14 
15 #include <stdint.h>
16 #include <gdk-pixbuf/gdk-pixbuf.h>
17 
18 #include "fuzzer_temp_file.h"
19 
LLVMFuzzerTestOneInput(const uint8_t * data,size_t size)20 int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
21     if (size < 1) {
22         return 0;
23     }
24     GdkPixbuf *pixbuf;
25     GError *error = NULL;
26 
27     char *tmpfile = fuzzer_get_tmpfile(data, size);
28     pixbuf = gdk_pixbuf_new_from_file(tmpfile, &error);
29     if (error != NULL) {
30         g_clear_error(&error);
31         fuzzer_release_tmpfile(tmpfile);
32         return 0;
33     }
34 
35     char *buf = (char *) calloc(size + 1, sizeof(char));
36     memcpy(buf, data, size);
37     buf[size] = '\0';
38 
39     gdk_pixbuf_get_width(pixbuf);
40     gdk_pixbuf_get_height(pixbuf);
41     gdk_pixbuf_get_bits_per_sample(pixbuf);
42     gdk_pixbuf_scale(pixbuf, pixbuf,
43             0, 0,
44             gdk_pixbuf_get_width(pixbuf) / 4,
45             gdk_pixbuf_get_height(pixbuf) / 4,
46             0, 0, 0.5, 0.5,
47             GDK_INTERP_NEAREST);
48     unsigned int rot_amount = ((unsigned int) data[0]) % 4;
49     pixbuf = gdk_pixbuf_rotate_simple(pixbuf, rot_amount * 90);
50     gdk_pixbuf_set_option(pixbuf, buf, buf);
51     gdk_pixbuf_get_option(pixbuf, buf);
52 
53     free(buf);
54     g_clear_object(&pixbuf);
55     fuzzer_release_tmpfile(tmpfile);
56     return 0;
57 }
58