oss-fuzz/projects/openexr/openexr_exrenvmap_fuzzer.cc

117 lines
2.9 KiB
C++

// Copyright 2020 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
#include <EnvmapImage.h>
#include <ImfEnvmap.h>
#include <ImfHeader.h>
#include <ImfStdIO.h>
#include <ImfMultiPartInputFile.h>
#include <blurImage.h>
#include <makeCubeMap.h>
#include <makeLatLongMap.h>
#include <exception>
#include <iostream>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <string>
#include <unistd.h>
#include "fuzzer_temp_file.h"
using namespace OPENEXR_IMF_NAMESPACE;
using namespace std;
static char *buf_to_file(const char *buf, size_t size) {
char *name = strdup("/tmp/fuzz-XXXXXX");
int fd = mkstemp(name);
if (fd < 0) {
perror("open");
exit(1);
}
size_t pos = 0;
while (pos < size) {
int nbytes = write(fd, &buf[pos], size - pos);
if (nbytes <= 0) {
perror("write");
exit(1);
}
pos += nbytes;
}
if (close(fd) != 0) {
perror("close");
exit(1);
}
return name;
}
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
//
// confirm file will take less than 2GiB to store entire image in memory
//
try {
StdISStream is;
std::string s(reinterpret_cast<const char*>(data), size);
is.str(s);
MultiPartInputFile inputFile(is);
Imath::Box2i dataWindow = inputFile.header(0).dataWindow();
ssize_t area = (static_cast<ssize_t>(dataWindow.max.x) + 1 - static_cast<ssize_t>(dataWindow.min.x) )
*(static_cast<ssize_t>(dataWindow.max.y) + 1 - static_cast<ssize_t>(dataWindow.min.y) );
if (area*8ll > 2048ll*1024ll*1024ll )
{
return 0;
}
}
catch (...) {
return 0;
}
FuzzerTemporaryFile tempFile(data, size);
const char *filename = tempFile.filename();
if (!filename)
return 0;
Envmap overrideInputType = NUM_ENVMAPTYPES;
LevelMode levelMode = ONE_LEVEL;
LevelRoundingMode roundingMode = ROUND_DOWN;
Compression compression = ZIP_COMPRESSION;
int mapWidth = 256;
int tileWidth = 64;
int tileHeight = 64;
int numSamples = 5;
float filterRadius = 1;
EnvmapImage image;
Header header;
RgbaChannels channels;
try {
readInputImage(filename, 0, 0, overrideInputType, false, image, header,
channels);
makeCubeMap(image, header, channels, "/dev/null", tileWidth, tileHeight,
levelMode, roundingMode, compression, mapWidth, filterRadius,
numSamples, false);
} catch (...) {
;
}
return 0;
}