commit b9898333d816b1ad9087a3078bd9f77597c738fb
author Lei Zhang <thestig@chromium.org> Tue Nov 01 22:54:52 2022 +0000
committer Pdfium LUCI CQ <pdfium-scoped@luci-project-accounts.iam.gserviceaccount.com> Tue Nov 01 22:54:52 2022 +0000
tree 222316090916f4acb0a1fd475e689a3714593886
parent 6a39df1f75fbe675571d9821d533b635b1a7e2cc

Fuzz the new CJPX_Decoder::Create() parameter.

As a follow-up to https://pdfium-review.googlesource.com/99970, change
pdf_jpx_fuzzer to vary the input for the new `resolution_levels_to_skip`
parameter in CJPX_Decoder::Create().

Change-Id: I52af6c500e411c6c4f1d01067ca53ffd894017b7
Reviewed-on: https://pdfium-review.googlesource.com/c/pdfium/+/100511
Reviewed-by: Tom Sepez <tsepez@chromium.org>
Commit-Queue: Lei Zhang <thestig@chromium.org>

testing/fuzzers/pdf_jpx_fuzzer.cc

diff --git a/testing/fuzzers/pdf_jpx_fuzzer.cc b/testing/fuzzers/pdf_jpx_fuzzer.cc
index b275176..ef88c7f 100644
--- a/testing/fuzzers/pdf_jpx_fuzzer.cc
+++ b/testing/fuzzers/pdf_jpx_fuzzer.cc
@@ -26,12 +26,12 @@
 }  // namespace
 
 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
-  if (size < 1)
+  if (size < 2)
     return 0;
 
   std::unique_ptr<CJPX_Decoder> decoder = CJPX_Decoder::Create(
-      {data + 1, size - 1},
-      static_cast<CJPX_Decoder::ColorSpaceOption>(data[0] % 3), 0);
+      {data + 2, size - 2},
+      static_cast<CJPX_Decoder::ColorSpaceOption>(data[0] % 3), data[1]);
   if (!decoder)
     return 0;