OLD | NEW |
| (Empty) |
1 /* | |
2 * Copyright (c) 2008, 2009, Google Inc. All rights reserved. | |
3 * | |
4 * Redistribution and use in source and binary forms, with or without | |
5 * modification, are permitted provided that the following conditions are | |
6 * met: | |
7 * | |
8 * * Redistributions of source code must retain the above copyright | |
9 * notice, this list of conditions and the following disclaimer. | |
10 * * Redistributions in binary form must reproduce the above | |
11 * copyright notice, this list of conditions and the following disclaimer | |
12 * in the documentation and/or other materials provided with the | |
13 * distribution. | |
14 * * Neither the name of Google Inc. nor the names of its | |
15 * contributors may be used to endorse or promote products derived from | |
16 * this software without specific prior written permission. | |
17 * | |
18 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS | |
19 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT | |
20 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR | |
21 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | |
22 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | |
23 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT | |
24 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, | |
25 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY | |
26 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | |
27 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | |
28 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | |
29 */ | |
30 | |
31 #include "config.h" | |
32 #include "core/platform/image-decoders/bmp/BMPImageReader.h" | |
33 | |
34 namespace WebCore { | |
35 | |
36 BMPImageReader::BMPImageReader(ImageDecoder* parent, size_t decodedAndHeaderOffs
et, size_t imgDataOffset, bool usesAndMask) | |
37 : m_parent(parent) | |
38 , m_buffer(0) | |
39 , m_decodedOffset(decodedAndHeaderOffset) | |
40 , m_headerOffset(decodedAndHeaderOffset) | |
41 , m_imgDataOffset(imgDataOffset) | |
42 , m_isOS21x(false) | |
43 , m_isOS22x(false) | |
44 , m_isTopDown(false) | |
45 , m_needToProcessBitmasks(false) | |
46 , m_needToProcessColorTable(false) | |
47 , m_tableSizeInBytes(0) | |
48 , m_seenNonZeroAlphaPixel(false) | |
49 , m_seenZeroAlphaPixel(false) | |
50 , m_andMaskState(usesAndMask ? NotYetDecoded : None) | |
51 { | |
52 // Clue-in decodeBMP() that we need to detect the correct info header size. | |
53 memset(&m_infoHeader, 0, sizeof(m_infoHeader)); | |
54 } | |
55 | |
56 bool BMPImageReader::decodeBMP(bool onlySize) | |
57 { | |
58 // Calculate size of info header. | |
59 if (!m_infoHeader.biSize && !readInfoHeaderSize()) | |
60 return false; | |
61 | |
62 // Read and process info header. | |
63 if ((m_decodedOffset < (m_headerOffset + m_infoHeader.biSize)) && !processIn
foHeader()) | |
64 return false; | |
65 | |
66 // processInfoHeader() set the size, so if that's all we needed, we're done. | |
67 if (onlySize) | |
68 return true; | |
69 | |
70 // Read and process the bitmasks, if needed. | |
71 if (m_needToProcessBitmasks && !processBitmasks()) | |
72 return false; | |
73 | |
74 // Read and process the color table, if needed. | |
75 if (m_needToProcessColorTable && !processColorTable()) | |
76 return false; | |
77 | |
78 // Initialize the framebuffer if needed. | |
79 ASSERT(m_buffer); // Parent should set this before asking us to decode! | |
80 if (m_buffer->status() == ImageFrame::FrameEmpty) { | |
81 if (!m_buffer->setSize(m_parent->size().width(), m_parent->size().height
())) | |
82 return m_parent->setFailed(); // Unable to allocate. | |
83 m_buffer->setStatus(ImageFrame::FramePartial); | |
84 // setSize() calls eraseARGB(), which resets the alpha flag, so we force | |
85 // it back to false here. We'll set it true below in all cases where | |
86 // these 0s could actually show through. | |
87 m_buffer->setHasAlpha(false); | |
88 | |
89 // For BMPs, the frame always fills the entire image. | |
90 m_buffer->setOriginalFrameRect(IntRect(IntPoint(), m_parent->size())); | |
91 | |
92 if (!m_isTopDown) | |
93 m_coord.setY(m_parent->size().height() - 1); | |
94 } | |
95 | |
96 // Decode the data. | |
97 if ((m_andMaskState != Decoding) && !pastEndOfImage(0)) { | |
98 if ((m_infoHeader.biCompression != RLE4) && (m_infoHeader.biCompression
!= RLE8) && (m_infoHeader.biCompression != RLE24)) { | |
99 const ProcessingResult result = processNonRLEData(false, 0); | |
100 if (result != Success) | |
101 return (result == Failure) ? m_parent->setFailed() : false; | |
102 } else if (!processRLEData()) | |
103 return false; | |
104 } | |
105 | |
106 // If the image has an AND mask and there was no alpha data, process the | |
107 // mask. | |
108 if ((m_andMaskState == NotYetDecoded) && !m_buffer->hasAlpha()) { | |
109 // Reset decoding coordinates to start of image. | |
110 m_coord.setX(0); | |
111 m_coord.setY(m_isTopDown ? 0 : (m_parent->size().height() - 1)); | |
112 | |
113 // The AND mask is stored as 1-bit data. | |
114 m_infoHeader.biBitCount = 1; | |
115 | |
116 m_andMaskState = Decoding; | |
117 } | |
118 if (m_andMaskState == Decoding) { | |
119 const ProcessingResult result = processNonRLEData(false, 0); | |
120 if (result != Success) | |
121 return (result == Failure) ? m_parent->setFailed() : false; | |
122 } | |
123 | |
124 // Done! | |
125 m_buffer->setStatus(ImageFrame::FrameComplete); | |
126 return true; | |
127 } | |
128 | |
129 bool BMPImageReader::readInfoHeaderSize() | |
130 { | |
131 // Get size of info header. | |
132 ASSERT(m_decodedOffset == m_headerOffset); | |
133 if ((m_decodedOffset > m_data->size()) || ((m_data->size() - m_decodedOffset
) < 4)) | |
134 return false; | |
135 m_infoHeader.biSize = readUint32(0); | |
136 // Don't increment m_decodedOffset here, it just makes the code in | |
137 // processInfoHeader() more confusing. | |
138 | |
139 // Don't allow the header to overflow (which would be harmless here, but | |
140 // problematic or at least confusing in other places), or to overrun the | |
141 // image data. | |
142 if (((m_headerOffset + m_infoHeader.biSize) < m_headerOffset) || (m_imgDataO
ffset && (m_imgDataOffset < (m_headerOffset + m_infoHeader.biSize)))) | |
143 return m_parent->setFailed(); | |
144 | |
145 // See if this is a header size we understand: | |
146 // OS/2 1.x: 12 | |
147 if (m_infoHeader.biSize == 12) | |
148 m_isOS21x = true; | |
149 // Windows V3: 40 | |
150 else if ((m_infoHeader.biSize == 40) || isWindowsV4Plus()) | |
151 ; | |
152 // OS/2 2.x: any multiple of 4 between 16 and 64, inclusive, or 42 or 46 | |
153 else if ((m_infoHeader.biSize >= 16) && (m_infoHeader.biSize <= 64) && (!(m_
infoHeader.biSize & 3) || (m_infoHeader.biSize == 42) || (m_infoHeader.biSize ==
46))) | |
154 m_isOS22x = true; | |
155 else | |
156 return m_parent->setFailed(); | |
157 | |
158 return true; | |
159 } | |
160 | |
161 bool BMPImageReader::processInfoHeader() | |
162 { | |
163 // Read info header. | |
164 ASSERT(m_decodedOffset == m_headerOffset); | |
165 if ((m_decodedOffset > m_data->size()) || ((m_data->size() - m_decodedOffset
) < m_infoHeader.biSize) || !readInfoHeader()) | |
166 return false; | |
167 m_decodedOffset += m_infoHeader.biSize; | |
168 | |
169 // Sanity-check header values. | |
170 if (!isInfoHeaderValid()) | |
171 return m_parent->setFailed(); | |
172 | |
173 // Set our size. | |
174 if (!m_parent->setSize(m_infoHeader.biWidth, m_infoHeader.biHeight)) | |
175 return false; | |
176 | |
177 // For paletted images, bitmaps can set biClrUsed to 0 to mean "all | |
178 // colors", so set it to the maximum number of colors for this bit depth. | |
179 // Also do this for bitmaps that put too large a value here. | |
180 if (m_infoHeader.biBitCount < 16) { | |
181 const uint32_t maxColors = static_cast<uint32_t>(1) << m_infoHeader.biBitC
ount; | |
182 if (!m_infoHeader.biClrUsed || (m_infoHeader.biClrUsed > maxColors)) | |
183 m_infoHeader.biClrUsed = maxColors; | |
184 } | |
185 | |
186 // For any bitmaps that set their BitCount to the wrong value, reset the | |
187 // counts now that we've calculated the number of necessary colors, since | |
188 // other code relies on this value being correct. | |
189 if (m_infoHeader.biCompression == RLE8) | |
190 m_infoHeader.biBitCount = 8; | |
191 else if (m_infoHeader.biCompression == RLE4) | |
192 m_infoHeader.biBitCount = 4; | |
193 | |
194 // Tell caller what still needs to be processed. | |
195 if (m_infoHeader.biBitCount >= 16) | |
196 m_needToProcessBitmasks = true; | |
197 else if (m_infoHeader.biBitCount) | |
198 m_needToProcessColorTable = true; | |
199 | |
200 return true; | |
201 } | |
202 | |
203 bool BMPImageReader::readInfoHeader() | |
204 { | |
205 // Pre-initialize some fields that not all headers set. | |
206 m_infoHeader.biCompression = RGB; | |
207 m_infoHeader.biClrUsed = 0; | |
208 | |
209 if (m_isOS21x) { | |
210 m_infoHeader.biWidth = readUint16(4); | |
211 m_infoHeader.biHeight = readUint16(6); | |
212 ASSERT(m_andMaskState == None); // ICO is a Windows format, not OS/2! | |
213 m_infoHeader.biBitCount = readUint16(10); | |
214 return true; | |
215 } | |
216 | |
217 m_infoHeader.biWidth = readUint32(4); | |
218 m_infoHeader.biHeight = readUint32(8); | |
219 if (m_andMaskState != None) | |
220 m_infoHeader.biHeight /= 2; | |
221 m_infoHeader.biBitCount = readUint16(14); | |
222 | |
223 // Read compression type, if present. | |
224 if (m_infoHeader.biSize >= 20) { | |
225 uint32_t biCompression = readUint32(16); | |
226 | |
227 // Detect OS/2 2.x-specific compression types. | |
228 if ((biCompression == 3) && (m_infoHeader.biBitCount == 1)) { | |
229 m_infoHeader.biCompression = HUFFMAN1D; | |
230 m_isOS22x = true; | |
231 } else if ((biCompression == 4) && (m_infoHeader.biBitCount == 24)) { | |
232 m_infoHeader.biCompression = RLE24; | |
233 m_isOS22x = true; | |
234 } else if (biCompression > 5) | |
235 return m_parent->setFailed(); // Some type we don't understand. | |
236 else | |
237 m_infoHeader.biCompression = static_cast<CompressionType>(biCompress
ion); | |
238 } | |
239 | |
240 // Read colors used, if present. | |
241 if (m_infoHeader.biSize >= 36) | |
242 m_infoHeader.biClrUsed = readUint32(32); | |
243 | |
244 // Windows V4+ can safely read the four bitmasks from 40-56 bytes in, so do | |
245 // that here. If the bit depth is less than 16, these values will be | |
246 // ignored by the image data decoders. If the bit depth is at least 16 but | |
247 // the compression format isn't BITFIELDS, these values will be ignored and | |
248 // overwritten* in processBitmasks(). | |
249 // NOTE: We allow alpha here. Microsoft doesn't really document this well, | |
250 // but some BMPs appear to use it. | |
251 // | |
252 // For non-Windows V4+, m_bitMasks[] et. al will be initialized later | |
253 // during processBitmasks(). | |
254 // | |
255 // *Except the alpha channel. Bizarrely, some RGB bitmaps expect decoders | |
256 // to pay attention to the alpha mask here, so there's a special case in | |
257 // processBitmasks() that doesn't always overwrite that value. | |
258 if (isWindowsV4Plus()) { | |
259 m_bitMasks[0] = readUint32(40); | |
260 m_bitMasks[1] = readUint32(44); | |
261 m_bitMasks[2] = readUint32(48); | |
262 m_bitMasks[3] = readUint32(52); | |
263 } | |
264 | |
265 // Detect top-down BMPs. | |
266 if (m_infoHeader.biHeight < 0) { | |
267 m_isTopDown = true; | |
268 m_infoHeader.biHeight = -m_infoHeader.biHeight; | |
269 } | |
270 | |
271 return true; | |
272 } | |
273 | |
274 bool BMPImageReader::isInfoHeaderValid() const | |
275 { | |
276 // Non-positive widths/heights are invalid. (We've already flipped the | |
277 // sign of the height for top-down bitmaps.) | |
278 if ((m_infoHeader.biWidth <= 0) || !m_infoHeader.biHeight) | |
279 return false; | |
280 | |
281 // Only Windows V3+ has top-down bitmaps. | |
282 if (m_isTopDown && (m_isOS21x || m_isOS22x)) | |
283 return false; | |
284 | |
285 // Only bit depths of 1, 4, 8, or 24 are universally supported. | |
286 if ((m_infoHeader.biBitCount != 1) && (m_infoHeader.biBitCount != 4) && (m_i
nfoHeader.biBitCount != 8) && (m_infoHeader.biBitCount != 24)) { | |
287 // Windows V3+ additionally supports bit depths of 0 (for embedded | |
288 // JPEG/PNG images), 16, and 32. | |
289 if (m_isOS21x || m_isOS22x || (m_infoHeader.biBitCount && (m_infoHeader.
biBitCount != 16) && (m_infoHeader.biBitCount != 32))) | |
290 return false; | |
291 } | |
292 | |
293 // Each compression type is only valid with certain bit depths (except RGB, | |
294 // which can be used with any bit depth). Also, some formats do not | |
295 // some compression types. | |
296 switch (m_infoHeader.biCompression) { | |
297 case RGB: | |
298 if (!m_infoHeader.biBitCount) | |
299 return false; | |
300 break; | |
301 | |
302 case RLE8: | |
303 // Supposedly there are undocumented formats like "BitCount = 1, | |
304 // Compression = RLE4" (which means "4 bit, but with a 2-color table"), | |
305 // so also allow the paletted RLE compression types to have too low a | |
306 // bit count; we'll correct this later. | |
307 if (!m_infoHeader.biBitCount || (m_infoHeader.biBitCount > 8)) | |
308 return false; | |
309 break; | |
310 | |
311 case RLE4: | |
312 // See comments in RLE8. | |
313 if (!m_infoHeader.biBitCount || (m_infoHeader.biBitCount > 4)) | |
314 return false; | |
315 break; | |
316 | |
317 case BITFIELDS: | |
318 // Only valid for Windows V3+. | |
319 if (m_isOS21x || m_isOS22x || ((m_infoHeader.biBitCount != 16) && (m_inf
oHeader.biBitCount != 32))) | |
320 return false; | |
321 break; | |
322 | |
323 case JPEG: | |
324 case PNG: | |
325 // Only valid for Windows V3+. | |
326 if (m_isOS21x || m_isOS22x || m_infoHeader.biBitCount) | |
327 return false; | |
328 break; | |
329 | |
330 case HUFFMAN1D: | |
331 // Only valid for OS/2 2.x. | |
332 if (!m_isOS22x || (m_infoHeader.biBitCount != 1)) | |
333 return false; | |
334 break; | |
335 | |
336 case RLE24: | |
337 // Only valid for OS/2 2.x. | |
338 if (!m_isOS22x || (m_infoHeader.biBitCount != 24)) | |
339 return false; | |
340 break; | |
341 | |
342 default: | |
343 // Some type we don't understand. This should have been caught in | |
344 // readInfoHeader(). | |
345 ASSERT_NOT_REACHED(); | |
346 return false; | |
347 } | |
348 | |
349 // Top-down bitmaps cannot be compressed; they must be RGB or BITFIELDS. | |
350 if (m_isTopDown && (m_infoHeader.biCompression != RGB) && (m_infoHeader.biCo
mpression != BITFIELDS)) | |
351 return false; | |
352 | |
353 // Reject the following valid bitmap types that we don't currently bother | |
354 // decoding. Few other people decode these either, they're unlikely to be | |
355 // in much use. | |
356 // TODO(pkasting): Consider supporting these someday. | |
357 // * Bitmaps larger than 2^16 pixels in either dimension (Windows | |
358 // probably doesn't draw these well anyway, and the decoded data would | |
359 // take a lot of memory). | |
360 if ((m_infoHeader.biWidth >= (1 << 16)) || (m_infoHeader.biHeight >= (1 << 1
6))) | |
361 return false; | |
362 // * Windows V3+ JPEG-in-BMP and PNG-in-BMP bitmaps (supposedly not found | |
363 // in the wild, only used to send data to printers?). | |
364 if ((m_infoHeader.biCompression == JPEG) || (m_infoHeader.biCompression == P
NG)) | |
365 return false; | |
366 // * OS/2 2.x Huffman-encoded monochrome bitmaps (see | |
367 // http://www.fileformat.info/mirror/egff/ch09_05.htm , re: "G31D" | |
368 // algorithm). | |
369 if (m_infoHeader.biCompression == HUFFMAN1D) | |
370 return false; | |
371 | |
372 return true; | |
373 } | |
374 | |
375 bool BMPImageReader::processBitmasks() | |
376 { | |
377 // Create m_bitMasks[] values. | |
378 if (m_infoHeader.biCompression != BITFIELDS) { | |
379 // The format doesn't actually use bitmasks. To simplify the decode | |
380 // logic later, create bitmasks for the RGB data. For Windows V4+, | |
381 // this overwrites the masks we read from the header, which are | |
382 // supposed to be ignored in non-BITFIELDS cases. | |
383 // 16 bits: MSB <- xRRRRRGG GGGBBBBB -> LSB | |
384 // 24/32 bits: MSB <- [AAAAAAAA] RRRRRRRR GGGGGGGG BBBBBBBB -> LSB | |
385 const int numBits = (m_infoHeader.biBitCount == 16) ? 5 : 8; | |
386 for (int i = 0; i <= 2; ++i) | |
387 m_bitMasks[i] = ((static_cast<uint32_t>(1) << (numBits * (3 - i))) -
1) ^ ((static_cast<uint32_t>(1) << (numBits * (2 - i))) - 1); | |
388 | |
389 // For Windows V4+ 32-bit RGB, don't overwrite the alpha mask from the | |
390 // header (see note in readInfoHeader()). | |
391 if (m_infoHeader.biBitCount < 32) | |
392 m_bitMasks[3] = 0; | |
393 else if (!isWindowsV4Plus()) | |
394 m_bitMasks[3] = static_cast<uint32_t>(0xff000000); | |
395 } else if (!isWindowsV4Plus()) { | |
396 // For Windows V4+ BITFIELDS mode bitmaps, this was already done when | |
397 // we read the info header. | |
398 | |
399 // Fail if we don't have enough file space for the bitmasks. | |
400 static const size_t SIZEOF_BITMASKS = 12; | |
401 if (((m_headerOffset + m_infoHeader.biSize + SIZEOF_BITMASKS) < (m_heade
rOffset + m_infoHeader.biSize)) || (m_imgDataOffset && (m_imgDataOffset < (m_hea
derOffset + m_infoHeader.biSize + SIZEOF_BITMASKS)))) | |
402 return m_parent->setFailed(); | |
403 | |
404 // Read bitmasks. | |
405 if ((m_data->size() - m_decodedOffset) < SIZEOF_BITMASKS) | |
406 return false; | |
407 m_bitMasks[0] = readUint32(0); | |
408 m_bitMasks[1] = readUint32(4); | |
409 m_bitMasks[2] = readUint32(8); | |
410 // No alpha in anything other than Windows V4+. | |
411 m_bitMasks[3] = 0; | |
412 | |
413 m_decodedOffset += SIZEOF_BITMASKS; | |
414 } | |
415 | |
416 // We've now decoded all the non-image data we care about. Skip anything | |
417 // else before the actual raster data. | |
418 if (m_imgDataOffset) | |
419 m_decodedOffset = m_imgDataOffset; | |
420 m_needToProcessBitmasks = false; | |
421 | |
422 // Check masks and set shift values. | |
423 for (int i = 0; i < 4; ++i) { | |
424 // Trim the mask to the allowed bit depth. Some Windows V4+ BMPs | |
425 // specify a bogus alpha channel in bits that don't exist in the pixel | |
426 // data (for example, bits 25-31 in a 24-bit RGB format). | |
427 if (m_infoHeader.biBitCount < 32) | |
428 m_bitMasks[i] &= ((static_cast<uint32_t>(1) << m_infoHeader.biBitCou
nt) - 1); | |
429 | |
430 // For empty masks (common on the alpha channel, especially after the | |
431 // trimming above), quickly clear the shifts and continue, to avoid an | |
432 // infinite loop in the counting code below. | |
433 uint32_t tempMask = m_bitMasks[i]; | |
434 if (!tempMask) { | |
435 m_bitShiftsRight[i] = m_bitShiftsLeft[i] = 0; | |
436 continue; | |
437 } | |
438 | |
439 // Make sure bitmask does not overlap any other bitmasks. | |
440 for (int j = 0; j < i; ++j) { | |
441 if (tempMask & m_bitMasks[j]) | |
442 return m_parent->setFailed(); | |
443 } | |
444 | |
445 // Count offset into pixel data. | |
446 for (m_bitShiftsRight[i] = 0; !(tempMask & 1); tempMask >>= 1) | |
447 ++m_bitShiftsRight[i]; | |
448 | |
449 // Count size of mask. | |
450 for (m_bitShiftsLeft[i] = 8; tempMask & 1; tempMask >>= 1) | |
451 --m_bitShiftsLeft[i]; | |
452 | |
453 // Make sure bitmask is contiguous. | |
454 if (tempMask) | |
455 return m_parent->setFailed(); | |
456 | |
457 // Since RGBABuffer tops out at 8 bits per channel, adjust the shift | |
458 // amounts to use the most significant 8 bits of the channel. | |
459 if (m_bitShiftsLeft[i] < 0) { | |
460 m_bitShiftsRight[i] -= m_bitShiftsLeft[i]; | |
461 m_bitShiftsLeft[i] = 0; | |
462 } | |
463 } | |
464 | |
465 return true; | |
466 } | |
467 | |
468 bool BMPImageReader::processColorTable() | |
469 { | |
470 m_tableSizeInBytes = m_infoHeader.biClrUsed * (m_isOS21x ? 3 : 4); | |
471 | |
472 // Fail if we don't have enough file space for the color table. | |
473 if (((m_headerOffset + m_infoHeader.biSize + m_tableSizeInBytes) < (m_header
Offset + m_infoHeader.biSize)) || (m_imgDataOffset && (m_imgDataOffset < (m_head
erOffset + m_infoHeader.biSize + m_tableSizeInBytes)))) | |
474 return m_parent->setFailed(); | |
475 | |
476 // Read color table. | |
477 if ((m_decodedOffset > m_data->size()) || ((m_data->size() - m_decodedOffset
) < m_tableSizeInBytes)) | |
478 return false; | |
479 m_colorTable.resize(m_infoHeader.biClrUsed); | |
480 for (size_t i = 0; i < m_infoHeader.biClrUsed; ++i) { | |
481 m_colorTable[i].rgbBlue = m_data->data()[m_decodedOffset++]; | |
482 m_colorTable[i].rgbGreen = m_data->data()[m_decodedOffset++]; | |
483 m_colorTable[i].rgbRed = m_data->data()[m_decodedOffset++]; | |
484 // Skip padding byte (not present on OS/2 1.x). | |
485 if (!m_isOS21x) | |
486 ++m_decodedOffset; | |
487 } | |
488 | |
489 // We've now decoded all the non-image data we care about. Skip anything | |
490 // else before the actual raster data. | |
491 if (m_imgDataOffset) | |
492 m_decodedOffset = m_imgDataOffset; | |
493 m_needToProcessColorTable = false; | |
494 | |
495 return true; | |
496 } | |
497 | |
498 bool BMPImageReader::processRLEData() | |
499 { | |
500 if (m_decodedOffset > m_data->size()) | |
501 return false; | |
502 | |
503 // RLE decoding is poorly specified. Two main problems: | |
504 // (1) Are EOL markers necessary? What happens when we have too many | |
505 // pixels for one row? | |
506 // http://www.fileformat.info/format/bmp/egff.htm says extra pixels | |
507 // should wrap to the next line. Real BMPs I've encountered seem to | |
508 // instead expect extra pixels to be ignored until the EOL marker is | |
509 // seen, although this has only happened in a few cases and I suspect | |
510 // those BMPs may be invalid. So we only change lines on EOL (or Delta | |
511 // with dy > 0), and fail in most cases when pixels extend past the end | |
512 // of the line. | |
513 // (2) When Delta, EOL, or EOF are seen, what happens to the "skipped" | |
514 // pixels? | |
515 // http://www.daubnet.com/formats/BMP.html says these should be filled | |
516 // with color 0. However, the "do nothing" and "don't care" comments | |
517 // of other references suggest leaving these alone, i.e. letting them | |
518 // be transparent to the background behind the image. This seems to | |
519 // match how MSPAINT treats BMPs, so we do that. Note that when we | |
520 // actually skip pixels for a case like this, we need to note on the | |
521 // framebuffer that we have alpha. | |
522 | |
523 // Impossible to decode row-at-a-time, so just do things as a stream of | |
524 // bytes. | |
525 while (true) { | |
526 // Every entry takes at least two bytes; bail if there isn't enough | |
527 // data. | |
528 if ((m_data->size() - m_decodedOffset) < 2) | |
529 return false; | |
530 | |
531 // For every entry except EOF, we'd better not have reached the end of | |
532 // the image. | |
533 const uint8_t count = m_data->data()[m_decodedOffset]; | |
534 const uint8_t code = m_data->data()[m_decodedOffset + 1]; | |
535 if ((count || (code != 1)) && pastEndOfImage(0)) | |
536 return m_parent->setFailed(); | |
537 | |
538 // Decode. | |
539 if (!count) { | |
540 switch (code) { | |
541 case 0: // Magic token: EOL | |
542 // Skip any remaining pixels in this row. | |
543 if (m_coord.x() < m_parent->size().width()) | |
544 m_buffer->setHasAlpha(true); | |
545 moveBufferToNextRow(); | |
546 | |
547 m_decodedOffset += 2; | |
548 break; | |
549 | |
550 case 1: // Magic token: EOF | |
551 // Skip any remaining pixels in the image. | |
552 if ((m_coord.x() < m_parent->size().width()) || (m_isTopDown ? (
m_coord.y() < (m_parent->size().height() - 1)) : (m_coord.y() > 0))) | |
553 m_buffer->setHasAlpha(true); | |
554 return true; | |
555 | |
556 case 2: { // Magic token: Delta | |
557 // The next two bytes specify dx and dy. Bail if there isn't | |
558 // enough data. | |
559 if ((m_data->size() - m_decodedOffset) < 4) | |
560 return false; | |
561 | |
562 // Fail if this takes us past the end of the desired row or | |
563 // past the end of the image. | |
564 const uint8_t dx = m_data->data()[m_decodedOffset + 2]; | |
565 const uint8_t dy = m_data->data()[m_decodedOffset + 3]; | |
566 if (dx || dy) | |
567 m_buffer->setHasAlpha(true); | |
568 if (((m_coord.x() + dx) > m_parent->size().width()) || pastEndOf
Image(dy)) | |
569 return m_parent->setFailed(); | |
570 | |
571 // Skip intervening pixels. | |
572 m_coord.move(dx, m_isTopDown ? dy : -dy); | |
573 | |
574 m_decodedOffset += 4; | |
575 break; | |
576 } | |
577 | |
578 default: { // Absolute mode | |
579 // |code| pixels specified as in BI_RGB, zero-padded at the end | |
580 // to a multiple of 16 bits. | |
581 // Because processNonRLEData() expects m_decodedOffset to | |
582 // point to the beginning of the pixel data, bump it past | |
583 // the escape bytes and then reset if decoding failed. | |
584 m_decodedOffset += 2; | |
585 const ProcessingResult result = processNonRLEData(true, code); | |
586 if (result == Failure) | |
587 return m_parent->setFailed(); | |
588 if (result == InsufficientData) { | |
589 m_decodedOffset -= 2; | |
590 return false; | |
591 } | |
592 break; | |
593 } | |
594 } | |
595 } else { // Encoded mode | |
596 // The following color data is repeated for |count| total pixels. | |
597 // Strangely, some BMPs seem to specify excessively large counts | |
598 // here; ignore pixels past the end of the row. | |
599 const int endX = std::min(m_coord.x() + count, m_parent->size().widt
h()); | |
600 | |
601 if (m_infoHeader.biCompression == RLE24) { | |
602 // Bail if there isn't enough data. | |
603 if ((m_data->size() - m_decodedOffset) < 4) | |
604 return false; | |
605 | |
606 // One BGR triple that we copy |count| times. | |
607 fillRGBA(endX, m_data->data()[m_decodedOffset + 3], m_data->data
()[m_decodedOffset + 2], code, 0xff); | |
608 m_decodedOffset += 4; | |
609 } else { | |
610 // RLE8 has one color index that gets repeated; RLE4 has two | |
611 // color indexes in the upper and lower 4 bits of the byte, | |
612 // which are alternated. | |
613 size_t colorIndexes[2] = {code, code}; | |
614 if (m_infoHeader.biCompression == RLE4) { | |
615 colorIndexes[0] = (colorIndexes[0] >> 4) & 0xf; | |
616 colorIndexes[1] &= 0xf; | |
617 } | |
618 if ((colorIndexes[0] >= m_infoHeader.biClrUsed) || (colorIndexes
[1] >= m_infoHeader.biClrUsed)) | |
619 return m_parent->setFailed(); | |
620 for (int which = 0; m_coord.x() < endX; ) { | |
621 setI(colorIndexes[which]); | |
622 which = !which; | |
623 } | |
624 | |
625 m_decodedOffset += 2; | |
626 } | |
627 } | |
628 } | |
629 } | |
630 | |
631 BMPImageReader::ProcessingResult BMPImageReader::processNonRLEData(bool inRLE, i
nt numPixels) | |
632 { | |
633 if (m_decodedOffset > m_data->size()) | |
634 return InsufficientData; | |
635 | |
636 if (!inRLE) | |
637 numPixels = m_parent->size().width(); | |
638 | |
639 // Fail if we're being asked to decode more pixels than remain in the row. | |
640 const int endX = m_coord.x() + numPixels; | |
641 if (endX > m_parent->size().width()) | |
642 return Failure; | |
643 | |
644 // Determine how many bytes of data the requested number of pixels | |
645 // requires. | |
646 const size_t pixelsPerByte = 8 / m_infoHeader.biBitCount; | |
647 const size_t bytesPerPixel = m_infoHeader.biBitCount / 8; | |
648 const size_t unpaddedNumBytes = (m_infoHeader.biBitCount < 16) ? ((numPixels
+ pixelsPerByte - 1) / pixelsPerByte) : (numPixels * bytesPerPixel); | |
649 // RLE runs are zero-padded at the end to a multiple of 16 bits. Non-RLE | |
650 // data is in rows and is zero-padded to a multiple of 32 bits. | |
651 const size_t alignBits = inRLE ? 1 : 3; | |
652 const size_t paddedNumBytes = (unpaddedNumBytes + alignBits) & ~alignBits; | |
653 | |
654 // Decode as many rows as we can. (For RLE, where we only want to decode | |
655 // one row, we've already checked that this condition is true.) | |
656 while (!pastEndOfImage(0)) { | |
657 // Bail if we don't have enough data for the desired number of pixels. | |
658 if ((m_data->size() - m_decodedOffset) < paddedNumBytes) | |
659 return InsufficientData; | |
660 | |
661 if (m_infoHeader.biBitCount < 16) { | |
662 // Paletted data. Pixels are stored little-endian within bytes. | |
663 // Decode pixels one byte at a time, left to right (so, starting at | |
664 // the most significant bits in the byte). | |
665 const uint8_t mask = (1 << m_infoHeader.biBitCount) - 1; | |
666 for (size_t byte = 0; byte < unpaddedNumBytes; ++byte) { | |
667 uint8_t pixelData = m_data->data()[m_decodedOffset + byte]; | |
668 for (size_t pixel = 0; (pixel < pixelsPerByte) && (m_coord.x() <
endX); ++pixel) { | |
669 const size_t colorIndex = (pixelData >> (8 - m_infoHeader.bi
BitCount)) & mask; | |
670 if (m_andMaskState == Decoding) { | |
671 // There's no way to accurately represent an AND + XOR | |
672 // operation as an RGBA image, so where the AND values | |
673 // are 1, we simply set the framebuffer pixels to fully | |
674 // transparent, on the assumption that most ICOs on the | |
675 // web will not be doing a lot of inverting. | |
676 if (colorIndex) { | |
677 setRGBA(0, 0, 0, 0); | |
678 m_buffer->setHasAlpha(true); | |
679 } else | |
680 m_coord.move(1, 0); | |
681 } else { | |
682 if (colorIndex >= m_infoHeader.biClrUsed) | |
683 return Failure; | |
684 setI(colorIndex); | |
685 } | |
686 pixelData <<= m_infoHeader.biBitCount; | |
687 } | |
688 } | |
689 } else { | |
690 // RGB data. Decode pixels one at a time, left to right. | |
691 while (m_coord.x() < endX) { | |
692 const uint32_t pixel = readCurrentPixel(bytesPerPixel); | |
693 | |
694 // Some BMPs specify an alpha channel but don't actually use it | |
695 // (it contains all 0s). To avoid displaying these images as | |
696 // fully-transparent, decode as if images are fully opaque | |
697 // until we actually see a non-zero alpha value; at that point, | |
698 // reset any previously-decoded pixels to fully transparent and | |
699 // continue decoding based on the real alpha channel values. | |
700 // As an optimization, avoid setting "hasAlpha" to true for | |
701 // images where all alpha values are 255; opaque images are | |
702 // faster to draw. | |
703 int alpha = getAlpha(pixel); | |
704 if (!m_seenNonZeroAlphaPixel && !alpha) { | |
705 m_seenZeroAlphaPixel = true; | |
706 alpha = 255; | |
707 } else { | |
708 m_seenNonZeroAlphaPixel = true; | |
709 if (m_seenZeroAlphaPixel) { | |
710 m_buffer->zeroFillPixelData(); | |
711 m_seenZeroAlphaPixel = false; | |
712 } else if (alpha != 255) | |
713 m_buffer->setHasAlpha(true); | |
714 } | |
715 | |
716 setRGBA(getComponent(pixel, 0), getComponent(pixel, 1), | |
717 getComponent(pixel, 2), alpha); | |
718 } | |
719 } | |
720 | |
721 // Success, keep going. | |
722 m_decodedOffset += paddedNumBytes; | |
723 if (inRLE) | |
724 return Success; | |
725 moveBufferToNextRow(); | |
726 } | |
727 | |
728 // Finished decoding whole image. | |
729 return Success; | |
730 } | |
731 | |
732 void BMPImageReader::moveBufferToNextRow() | |
733 { | |
734 m_coord.move(-m_coord.x(), m_isTopDown ? 1 : -1); | |
735 } | |
736 | |
737 } // namespace WebCore | |
OLD | NEW |