blob: 0584d31e5be29135a2f6baee9a7ed09a68a85a3a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
/*
* Copyright 2018 Google Inc.
*
* Use of this source code is governed by a BSD-style license that can be
* found in the LICENSE file.
*/
#include "SkCanvas.h"
#include "SkPaint.h"
#include "SkPath.h"
#include "SkReadBuffer.h"
#include "SkSurface.h"
void FuzzPathDeserialize(SkReadBuffer& buf) {
SkPath path;
buf.readPath(&path);
if (!buf.isValid()) {
return;
}
auto s = SkSurface::MakeRasterN32Premul(128, 128);
if (!s) {
// May return nullptr in memory-constrained fuzzing environments
return;
}
s->getCanvas()->drawPath(path, SkPaint());
}
#if defined(IS_FUZZING_WITH_LIBFUZZER)
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
if (size < 4) {
return 0;
}
uint32_t packed;
memcpy(&packed, data, 4);
unsigned version = packed & 0xFF;
if (version != 4) {
// Chrome only will produce version 4, so guide the fuzzer to
// only focus on those branches.
return 0;
}
SkReadBuffer buf(data, size);
FuzzPathDeserialize(buf);
return 0;
}
#endif
|
