Make ICO fail on truncated data

third_party/WebKit/Source/platform/image-decoders/ico/ICOImageDecoderTest.cpp

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "platform/image-decoders/ico/ICOImageDecoder.h"
 
 #include "platform/image-decoders/ImageDecoderTestHelpers.h"
 #include "testing/gtest/include/gtest/gtest.h"
 #include "wtf/PtrUtil.h"
 #include <memory>
 
 namespace blink {
 
 namespace {
 
 std::unique_ptr<ImageDecoder> createDecoder() {
   return WTF::wrapUnique(
       new ICOImageDecoder(ImageDecoder::AlphaNotPremultiplied,
                           ColorBehavior::transformToTargetForTesting(),
                           ImageDecoder::noDecodedImageByteLimit));
 }
 }
 
+TEST(ICOImageDecoderTests, trunctedIco) {
+  RefPtr<SharedBuffer> data =
+      readFile("/LayoutTests/images/resources/png-in-ico.ico");
+  ASSERT_FALSE(data->isEmpty());
+
+  RefPtr<SharedBuffer> truncatedData =
+      SharedBuffer::create(data->data(), data->size() / 2);
+  auto decoder = createDecoder();
+
+  decoder->setData(truncatedData.get(), false);
+  decoder->frameBufferAtIndex(0);
+  EXPECT_FALSE(decoder->failed());
+
+  decoder->setData(truncatedData.get(), true);
+  decoder->frameBufferAtIndex(0);
+  EXPECT_TRUE(decoder->failed());
+}
+
 TEST(ICOImageDecoderTests, errorInPngInIco) {
   RefPtr<SharedBuffer> data =
       readFile("/LayoutTests/images/resources/png-in-ico.ico");
   ASSERT_FALSE(data->isEmpty());
 
   // Modify the file to have a broken CRC in IHDR.
   constexpr size_t crcOffset = 22 + 29;
   constexpr size_t crcSize = 4;
   RefPtr<SharedBuffer> modifiedData =
       SharedBuffer::create(data->data(), crcOffset);
@@ skipping 30 matching lines @@
       "/LayoutTests/images/resources/icon-without-and-bitmap.ico", 1u,
       cAnimationNone);
   testByteByByteDecode(&createDecoder, "/LayoutTests/images/resources/1bit.ico",
                        1u, cAnimationNone);
   testByteByByteDecode(&createDecoder,
                        "/LayoutTests/images/resources/bug653075.ico", 2u,
                        cAnimationNone);
 }
 
 }  // namespace blink