commit 32e74ff81d5b29697545462b1321d2ac4be554f2
author Tom Sepez <tsepez@chromium.org> Fri May 31 22:03:38 2019 +0000
committer Chromium commit bot <commit-bot@chromium.org> Fri May 31 22:03:38 2019 +0000
tree 636d9a28db4aec907533d9258a694f137f468944
parent 7ade67c823be43c4832c3bb964ee3e917d880796

Fuzz jpx using colorspace options.

Now that the JPX interface has been simplified, we can cover
a wider range of input parameters.

Change-Id: I95fb0c923f4acf93e5ce89e83412c11a98903735
Reviewed-on: https://pdfium-review.googlesource.com/c/pdfium/+/55310
Commit-Queue: Tom Sepez <tsepez@chromium.org>
Reviewed-by: Lei Zhang <thestig@chromium.org>

testing/fuzzers/pdf_jpx_fuzzer.cc

diff --git a/testing/fuzzers/pdf_jpx_fuzzer.cc b/testing/fuzzers/pdf_jpx_fuzzer.cc
index 2d5e7d4..f926aa1 100644
--- a/testing/fuzzers/pdf_jpx_fuzzer.cc
+++ b/testing/fuzzers/pdf_jpx_fuzzer.cc
@@ -28,8 +28,12 @@
 }  // namespace
 
 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
+  if (size < 1)
+    return 0;
+
   std::unique_ptr<CJPX_Decoder> decoder = CCodec_JpxModule::CreateDecoder(
-      {data, size}, CJPX_Decoder::kNoColorSpace);
+      {data + 1, size - 1},
+      static_cast<CJPX_Decoder::ColorSpaceOption>(data[0] % 3));
   if (!decoder)
     return 0;