ryan/mozjpeg
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fuzz: Calc. xformed buf size based on dst. subsamp

Browse Source 
(oversight from b3f0abe377)
This commit is contained in:
DRC
2024-09-12 20:55:39 -04:00
parent b3f0abe377
commit bcbca8b9bc
1 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
fuzz/transform.cc
View File

@@ -37,7 +37,7 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
tjhandle handle = NULL;
unsigned char *dstBufs[1] = { NULL };
size_t dstSizes[1] = { 0 }, maxBufSize;
int width = 0, height = 0, jpegSubsamp, i;
int width = 0, height = 0, jpegSubsamp, dstSubsamp, i;
tjtransform transforms[1];
if ((handle = tj3Init(TJINIT_TRANSFORM)) == NULL)
@@ -124,12 +124,17 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size)
transforms[0].op = TJXOP_ROT90;
transforms[0].options = TJXOPT_TRIM | TJXOPT_ARITHMETIC;
dstSubsamp = jpegSubsamp;
if (dstSubsamp == TJSAMP_422) dstSubsamp = TJSAMP_440;
else if (dstSubsamp == TJSAMP_440) dstSubsamp = TJSAMP_422;
else if (dstSubsamp == TJSAMP_411) dstSubsamp = TJSAMP_441;
else if (dstSubsamp == TJSAMP_441) dstSubsamp = TJSAMP_411;
dstBufs[0] =
(unsigned char *)tj3Alloc(tj3JPEGBufSize(height, width, jpegSubsamp));
(unsigned char *)tj3Alloc(tj3JPEGBufSize(height, width, dstSubsamp));
if (!dstBufs[0])
goto bailout;
maxBufSize = tj3JPEGBufSize(height, width, jpegSubsamp);
maxBufSize = tj3JPEGBufSize(height, width, dstSubsamp);
if (tj3Transform(handle, data, size, 1, dstBufs, dstSizes,
transforms) == 0) {