Index: ui/gfx/chromeos/codec/jpeg_codec_robust_slow_unittest.cc |
diff --git a/ui/gfx/chromeos/codec/jpeg_codec_robust_slow_unittest.cc b/ui/gfx/chromeos/codec/jpeg_codec_robust_slow_unittest.cc |
new file mode 100644 |
index 0000000000000000000000000000000000000000..35e53eaa74475324fbfd7a41739fc5ec25713c87 |
--- /dev/null |
+++ b/ui/gfx/chromeos/codec/jpeg_codec_robust_slow_unittest.cc |
@@ -0,0 +1,108 @@ |
+// Copyright 2015 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#include <math.h> |
+#include <stdint.h> |
+ |
+#include "base/macros.h" |
+#include "testing/gtest/include/gtest/gtest.h" |
+#include "ui/gfx/chromeos/codec/jpeg_codec_robust_slow.h" |
+ |
+namespace { |
+ |
+// A JPEG image used by TopSitesMigrationTest, whose size is 1x1. |
+// This image causes an invalid-read error to libjpeg-turbo 1.0.1. |
+const uint8_t kTopSitesMigrationTestImage[] = |
+ "\xff\xd8\xff\xe0\x00\x10\x4a\x46\x49\x46\x00\x01\x01\x00\x00\x01" |
+ "\x00\x01\x00\x00\xff\xdb\x00\x43\x00\x03\x02\x02\x03\x02\x02\x03" |
+ "\x03\x03\x03\x04\x03\x03\x04\x05\x08\x05\x05\x04\x04\x05\x0a\x07" |
+ "\x07\x06\x08\x0c\x0a\x0c\x0c\x0b\x0a\x0b\x0b\x0d\x0e\x12\x10\x0d" |
+ "\x0e\x11\x0e\x0b\x0b\x10\x16\x10\x11\x13\x14\x15\x15\x15\x0c\x0f" |
+ "\x17\x18\x16\x14\x18\x12\x14\x15\x14\xff\xdb\x00\x43\x01\x03\x04" |
+ "\x04\x05\x04\x05\x09\x05\x05\x09\x14\x0d\x0b\x0d\x14\x14\x14\x14" |
+ "\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14" |
+ "\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14" |
+ "\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\x14\xff\xc0" |
+ "\x00\x11\x08\x00\x01\x00\x01\x03\x01\x22\x00\x02\x11\x01\x03\x11" |
+ "\x01\xff\xc4\x00\x1f\x00\x00\x01\x05\x01\x01\x01\x01\x01\x01\x00" |
+ "\x00\x00\x00\x00\x00\x00\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09" |
+ "\x0a\x0b\xff\xc4\x00\xb5\x10\x00\x02\x01\x03\x03\x02\x04\x03\x05" |
+ "\x05\x04\x04\x00\x00\x01\x7d\x01\x02\x03\x00\x04\x11\x05\x12\x21" |
+ "\x31\x41\x06\x13\x51\x61\x07\x22\x71\x14\x32\x81\x91\xa1\x08\x23" |
+ "\x42\xb1\xc1\x15\x52\xd1\xf0\x24\x33\x62\x72\x82\x09\x0a\x16\x17" |
+ "\x18\x19\x1a\x25\x26\x27\x28\x29\x2a\x34\x35\x36\x37\x38\x39\x3a" |
+ "\x43\x44\x45\x46\x47\x48\x49\x4a\x53\x54\x55\x56\x57\x58\x59\x5a" |
+ "\x63\x64\x65\x66\x67\x68\x69\x6a\x73\x74\x75\x76\x77\x78\x79\x7a" |
+ "\x83\x84\x85\x86\x87\x88\x89\x8a\x92\x93\x94\x95\x96\x97\x98\x99" |
+ "\x9a\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xb2\xb3\xb4\xb5\xb6\xb7" |
+ "\xb8\xb9\xba\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xd2\xd3\xd4\xd5" |
+ "\xd6\xd7\xd8\xd9\xda\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xf1" |
+ "\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xff\xc4\x00\x1f\x01\x00\x03" |
+ "\x01\x01\x01\x01\x01\x01\x01\x01\x01\x00\x00\x00\x00\x00\x00\x01" |
+ "\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\xff\xc4\x00\xb5\x11\x00" |
+ "\x02\x01\x02\x04\x04\x03\x04\x07\x05\x04\x04\x00\x01\x02\x77\x00" |
+ "\x01\x02\x03\x11\x04\x05\x21\x31\x06\x12\x41\x51\x07\x61\x71\x13" |
+ "\x22\x32\x81\x08\x14\x42\x91\xa1\xb1\xc1\x09\x23\x33\x52\xf0\x15" |
+ "\x62\x72\xd1\x0a\x16\x24\x34\xe1\x25\xf1\x17\x18\x19\x1a\x26\x27" |
+ "\x28\x29\x2a\x35\x36\x37\x38\x39\x3a\x43\x44\x45\x46\x47\x48\x49" |
+ "\x4a\x53\x54\x55\x56\x57\x58\x59\x5a\x63\x64\x65\x66\x67\x68\x69" |
+ "\x6a\x73\x74\x75\x76\x77\x78\x79\x7a\x82\x83\x84\x85\x86\x87\x88" |
+ "\x89\x8a\x92\x93\x94\x95\x96\x97\x98\x99\x9a\xa2\xa3\xa4\xa5\xa6" |
+ "\xa7\xa8\xa9\xaa\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xc2\xc3\xc4" |
+ "\xc5\xc6\xc7\xc8\xc9\xca\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xe2" |
+ "\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9" |
+ "\xfa\xff\xda\x00\x0c\x03\x01\x00\x02\x11\x03\x11\x00\x3f\x00\xf9" |
+ "\xd2\x8a\x28\xaf\xc3\x0f\xf5\x4c\xff\xd9"; |
+ |
+} // namespace |
+ |
+namespace gfx { |
+ |
+static void MakeRGBImage(int w, int h, std::vector<unsigned char>* dat) { |
+ dat->resize(w * h * 3); |
+ for (int y = 0; y < h; y++) { |
+ for (int x = 0; x < w; x++) { |
+ unsigned char* org_px = &(*dat)[(y * w + x) * 3]; |
+ org_px[0] = x * 3; // r |
+ org_px[1] = x * 3 + 1; // g |
+ org_px[2] = x * 3 + 2; // b |
+ } |
+ } |
+} |
+ |
+// Test that corrupted data decompression causes failures. |
+TEST(JPEGCodecRobustSlow, DecodeCorrupted) { |
+ int w = 20, h = 20; |
+ |
+ // some random data (an uncompressed image) |
+ std::vector<unsigned char> original; |
+ MakeRGBImage(w, h, &original); |
+ |
+ // it should fail when given non-JPEG compressed data |
+ std::vector<unsigned char> output; |
+ int outw, outh; |
+ ASSERT_FALSE(JPEGCodecRobustSlow::Decode(&original[0], original.size(), |
+ JPEGCodecRobustSlow::FORMAT_RGB, |
+ &output, &outw, &outh)); |
+} |
+ |
+// Test that we can decode JPEG images without invalid-read errors on valgrind. |
+// This test decodes a 1x1 JPEG image and writes the decoded RGB (or RGBA) pixel |
+// to the output buffer without OOB reads. |
+TEST(JPEGCodecRobustSlow, InvalidRead) { |
+ std::vector<unsigned char> output; |
+ int outw, outh; |
+ ASSERT_TRUE( |
+ JPEGCodecRobustSlow::Decode(kTopSitesMigrationTestImage, |
+ arraysize(kTopSitesMigrationTestImage), |
+ JPEGCodecRobustSlow::FORMAT_RGB, &output, |
+ &outw, &outh)); |
+ ASSERT_TRUE( |
+ JPEGCodecRobustSlow::Decode(kTopSitesMigrationTestImage, |
+ arraysize(kTopSitesMigrationTestImage), |
+ JPEGCodecRobustSlow::FORMAT_RGBA, &output, |
+ &outw, &outh)); |
+} |
+ |
+} // namespace gfx |