From 7853af59c133e69f9a94dcd8e8c1a5abce080042 Mon Sep 17 00:00:00 2001
From: Alex Deymo <deymo@chromium.org>
Date: Sat, 5 Jun 2021 17:40:09 +0200
Subject: [PATCH] libjxl: New JPEG XL library project. (#5876)

libjxl is the reference implementation encoder and decoder for JPEG XL.
This patch adds the main decoder fuzzer (djxl_fuzzer) and a few other
fuzzers for internal parts of the decoder.

There's no encoder fuzzer support.
---
 projects/libjxl/Dockerfile   | 25 ++++++++++++
 projects/libjxl/build.sh     | 73 ++++++++++++++++++++++++++++++++++++
 projects/libjxl/project.yaml | 11 ++++++
 3 files changed, 109 insertions(+)
 create mode 100644 projects/libjxl/Dockerfile
 create mode 100755 projects/libjxl/build.sh
 create mode 100644 projects/libjxl/project.yaml

diff --git a/projects/libjxl/Dockerfile b/projects/libjxl/Dockerfile
new file mode 100644
index 000000000..0d52e8809
--- /dev/null
+++ b/projects/libjxl/Dockerfile
@@ -0,0 +1,25 @@
+# Copyright 2021 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+
+FROM gcr.io/oss-fuzz-base/base-builder
+RUN apt-get update && apt-get install -y cmake ninja-build pkg-config
+RUN git clone --depth 1 https://github.com/libjxl/libjxl.git
+# We only need these sub-projects for the fuzzers.
+RUN git -C libjxl submodule update --init --recommend-shallow \
+  third_party/highway third_party/lodepng third_party/skcms third_party/brotli
+
+WORKDIR libjxl
+COPY build.sh $SRC/
diff --git a/projects/libjxl/build.sh b/projects/libjxl/build.sh
new file mode 100755
index 000000000..2b807fc6e
--- /dev/null
+++ b/projects/libjxl/build.sh
@@ -0,0 +1,73 @@
+#!/bin/bash -eu
+# Copyright 2021 Google Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+################################################################################
+
+build_args=(
+  -G Ninja
+  -DBUILD_TESTING=OFF
+  -DJPEGXL_ENABLE_BENCHMARK=OFF
+  -DJPEGXL_ENABLE_DEVTOOLS=ON
+  -DJPEGXL_ENABLE_EXAMPLES=OFF
+  -DJPEGXL_ENABLE_FUZZERS=ON
+  -DJPEGXL_ENABLE_MANPAGES=OFF
+  -DJPEGXL_ENABLE_SJPEG=OFF
+  -DJPEGXL_ENABLE_VIEWERS=OFF
+  -DCMAKE_BUILD_TYPE=Release
+)
+
+# Build and generate a fuzzer corpus in release mode without instrumentation.
+# This is done in a subshell since we change the environment.
+(
+  unset CFLAGS
+  unset CXXFLAGS
+  export AFL_NOOPT=1
+
+  mkdir -p ${WORK}/libjxl-corpus
+  cd ${WORK}/libjxl-corpus
+  cmake "${build_args[@]}" "${SRC}/libjxl"
+  ninja clean
+  ninja fuzzer_corpus
+
+  # Generate a fuzzer corpus.
+  mkdir -p djxl_fuzzer_corpus
+  tools/fuzzer_corpus -r djxl_fuzzer_corpus
+  zip -j "${OUT}/djxl_fuzzer_seed_corpus.zip" djxl_fuzzer_corpus/*
+)
+
+# Build the fuzzers in release mode but force the inclusion of JXL_DASSERT()
+# checks.
+export CXXFLAGS="${CXXFLAGS} -DJXL_IS_DEBUG_BUILD=1"
+
+mkdir -p ${WORK}/libjxl-fuzzer
+cd ${WORK}/libjxl-fuzzer
+cmake \
+  "${build_args[@]}" \
+  -DJPEGXL_FUZZER_LINK_FLAGS="${LIB_FUZZING_ENGINE}" \
+  "${SRC}/libjxl"
+
+fuzzers=(
+  color_encoding_fuzzer
+  djxl_fuzzer
+  fields_fuzzer
+  icc_codec_fuzzer
+  rans_fuzzer
+)
+
+ninja clean
+ninja "${fuzzers[@]}"
+for fuzzer in "${fuzzers[@]}"; do
+  cp tools/${fuzzer} "${OUT}/"
+done
diff --git a/projects/libjxl/project.yaml b/projects/libjxl/project.yaml
new file mode 100644
index 000000000..c48a7d00d
--- /dev/null
+++ b/projects/libjxl/project.yaml
@@ -0,0 +1,11 @@
+homepage: "https://github.com/libjxl/libjxl"
+language: c++
+primary_contact: "libjxl-security@google.com"
+auto_ccs:
+  - "deymo@google.com"
+  - "veluca@google.com"
+sanitizers:
+  - address
+  - memory
+  - undefined
+main_repo: 'https://github.com/libjxl/libjxl.git'