Add bug hunting test for CVE-2019-10024
This commit is contained in:
parent
5eeeba97eb
commit
eadd5fb97a
File diff suppressed because it is too large
Load Diff
|
@ -0,0 +1,437 @@
|
|||
//========================================================================
|
||||
//
|
||||
// Splash.h
|
||||
//
|
||||
// Copyright 2003-2013 Glyph & Cog, LLC
|
||||
//
|
||||
//========================================================================
|
||||
|
||||
#ifndef SPLASH_H
|
||||
#define SPLASH_H
|
||||
|
||||
#include <aconf.h>
|
||||
|
||||
#ifdef USE_GCC_PRAGMAS
|
||||
#pragma interface
|
||||
#endif
|
||||
|
||||
#include "SplashTypes.h"
|
||||
#include "SplashClip.h"
|
||||
|
||||
class Splash;
|
||||
class SplashBitmap;
|
||||
struct SplashGlyphBitmap;
|
||||
class SplashState;
|
||||
class SplashPattern;
|
||||
class SplashScreen;
|
||||
class SplashPath;
|
||||
class SplashXPath;
|
||||
class SplashFont;
|
||||
struct SplashPipe;
|
||||
|
||||
//------------------------------------------------------------------------
|
||||
|
||||
// Retrieves the next line of pixels in an image mask. Normally,
|
||||
// fills in *<line> and returns true. If the image stream is
|
||||
// exhausted, returns false.
|
||||
typedef GBool (*SplashImageMaskSource)(void *data, Guchar *pixel);
|
||||
|
||||
// Retrieves the next line of pixels in an image. Normally, fills in
|
||||
// *<line> and returns true. If the image stream is exhausted,
|
||||
// returns false.
|
||||
typedef GBool (*SplashImageSource)(void *data, SplashColorPtr colorLine,
|
||||
Guchar *alphaLine);
|
||||
|
||||
|
||||
//------------------------------------------------------------------------
|
||||
|
||||
enum SplashPipeResultColorCtrl {
|
||||
splashPipeResultColorNoAlphaBlendMono,
|
||||
splashPipeResultColorNoAlphaBlendRGB,
|
||||
#if SPLASH_CMYK
|
||||
splashPipeResultColorNoAlphaBlendCMYK,
|
||||
#endif
|
||||
splashPipeResultColorAlphaNoBlendMono,
|
||||
splashPipeResultColorAlphaNoBlendRGB,
|
||||
#if SPLASH_CMYK
|
||||
splashPipeResultColorAlphaNoBlendCMYK,
|
||||
#endif
|
||||
splashPipeResultColorAlphaBlendMono,
|
||||
splashPipeResultColorAlphaBlendRGB
|
||||
#if SPLASH_CMYK
|
||||
,
|
||||
splashPipeResultColorAlphaBlendCMYK
|
||||
#endif
|
||||
};
|
||||
|
||||
//------------------------------------------------------------------------
|
||||
// Splash
|
||||
//------------------------------------------------------------------------
|
||||
|
||||
class Splash {
|
||||
public:
|
||||
|
||||
// Create a new rasterizer object.
|
||||
Splash(SplashBitmap *bitmapA, GBool vectorAntialiasA,
|
||||
SplashScreenParams *screenParams = NULL);
|
||||
Splash(SplashBitmap *bitmapA, GBool vectorAntialiasA,
|
||||
SplashScreen *screenA);
|
||||
|
||||
~Splash();
|
||||
|
||||
//----- state read
|
||||
|
||||
SplashCoord *getMatrix();
|
||||
SplashPattern *getStrokePattern();
|
||||
SplashPattern *getFillPattern();
|
||||
SplashScreen *getScreen();
|
||||
SplashBlendFunc getBlendFunc();
|
||||
SplashCoord getStrokeAlpha();
|
||||
SplashCoord getFillAlpha();
|
||||
SplashCoord getLineWidth();
|
||||
int getLineCap();
|
||||
int getLineJoin();
|
||||
SplashCoord getMiterLimit();
|
||||
SplashCoord getFlatness();
|
||||
SplashCoord *getLineDash();
|
||||
int getLineDashLength();
|
||||
SplashCoord getLineDashPhase();
|
||||
SplashStrokeAdjustMode getStrokeAdjust();
|
||||
SplashClip *getClip();
|
||||
SplashBitmap *getSoftMask();
|
||||
GBool getInNonIsolatedGroup();
|
||||
GBool getInKnockoutGroup();
|
||||
|
||||
//----- state write
|
||||
|
||||
void setMatrix(SplashCoord *matrix);
|
||||
void setStrokePattern(SplashPattern *strokeColor);
|
||||
void setFillPattern(SplashPattern *fillColor);
|
||||
void setScreen(SplashScreen *screen);
|
||||
void setBlendFunc(SplashBlendFunc func);
|
||||
void setStrokeAlpha(SplashCoord alpha);
|
||||
void setFillAlpha(SplashCoord alpha);
|
||||
void setLineWidth(SplashCoord lineWidth);
|
||||
void setLineCap(int lineCap);
|
||||
void setLineJoin(int lineJoin);
|
||||
void setMiterLimit(SplashCoord miterLimit);
|
||||
void setFlatness(SplashCoord flatness);
|
||||
// the <lineDash> array will be copied
|
||||
void setLineDash(SplashCoord *lineDash, int lineDashLength,
|
||||
SplashCoord lineDashPhase);
|
||||
void setStrokeAdjust(SplashStrokeAdjustMode strokeAdjust);
|
||||
// NB: uses transformed coordinates.
|
||||
void clipResetToRect(SplashCoord x0, SplashCoord y0,
|
||||
SplashCoord x1, SplashCoord y1);
|
||||
// NB: uses transformed coordinates.
|
||||
SplashError clipToRect(SplashCoord x0, SplashCoord y0,
|
||||
SplashCoord x1, SplashCoord y1);
|
||||
// NB: uses untransformed coordinates.
|
||||
SplashError clipToPath(SplashPath *path, GBool eo);
|
||||
void setSoftMask(SplashBitmap *softMask);
|
||||
void setInTransparencyGroup(SplashBitmap *groupBackBitmapA,
|
||||
int groupBackXA, int groupBackYA,
|
||||
GBool nonIsolated, GBool knockout);
|
||||
void setTransfer(Guchar *red, Guchar *green, Guchar *blue, Guchar *gray);
|
||||
void setOverprintMask(Guint overprintMask);
|
||||
void setEnablePathSimplification(GBool en);
|
||||
|
||||
//----- state save/restore
|
||||
|
||||
void saveState();
|
||||
SplashError restoreState();
|
||||
|
||||
//----- drawing operations
|
||||
|
||||
// Fill the bitmap with <color>. This is not subject to clipping.
|
||||
void clear(SplashColorPtr color, Guchar alpha = 0x00);
|
||||
|
||||
// Stroke a path using the current stroke pattern.
|
||||
SplashError stroke(SplashPath *path);
|
||||
|
||||
// Fill a path using the current fill pattern.
|
||||
SplashError fill(SplashPath *path, GBool eo);
|
||||
|
||||
// Draw a character, using the current fill pattern.
|
||||
SplashError fillChar(SplashCoord x, SplashCoord y, int c, SplashFont *font);
|
||||
|
||||
// Draw a glyph, using the current fill pattern. This function does
|
||||
// not free any data, i.e., it ignores glyph->freeData.
|
||||
SplashError fillGlyph(SplashCoord x, SplashCoord y,
|
||||
SplashGlyphBitmap *glyph);
|
||||
|
||||
// Draws an image mask using the fill color. This will read <h>
|
||||
// lines of <w> pixels from <src>, starting with the top line. "1"
|
||||
// pixels will be drawn with the current fill color; "0" pixels are
|
||||
// transparent. The matrix:
|
||||
// [ mat[0] mat[1] 0 ]
|
||||
// [ mat[2] mat[3] 0 ]
|
||||
// [ mat[4] mat[5] 1 ]
|
||||
// maps a unit square to the desired destination for the image, in
|
||||
// PostScript style:
|
||||
// [x' y' 1] = [x y 1] * mat
|
||||
// Note that the Splash y axis points downward, and the image source
|
||||
// is assumed to produce pixels in raster order, starting from the
|
||||
// top line.
|
||||
SplashError fillImageMask(SplashImageMaskSource src, void *srcData,
|
||||
int w, int h, SplashCoord *mat,
|
||||
GBool glyphMode, GBool interpolate);
|
||||
|
||||
// Draw an image. This will read <h> lines of <w> pixels from
|
||||
// <src>, starting with the top line. These pixels are assumed to
|
||||
// be in the source mode, <srcMode>. If <srcAlpha> is true, the
|
||||
// alpha values returned by <src> are used; otherwise they are
|
||||
// ignored. The following combinations of source and target modes
|
||||
// are supported:
|
||||
// source target
|
||||
// ------ ------
|
||||
// Mono8 Mono1 -- with dithering
|
||||
// Mono8 Mono8
|
||||
// RGB8 RGB8
|
||||
// BGR8 RGB8
|
||||
// CMYK8 CMYK8
|
||||
// The matrix behaves as for fillImageMask.
|
||||
SplashError drawImage(SplashImageSource src, void *srcData,
|
||||
SplashColorMode srcMode, GBool srcAlpha,
|
||||
int w, int h, SplashCoord *mat,
|
||||
GBool interpolate);
|
||||
|
||||
// Composite a rectangular region from <src> onto this Splash
|
||||
// object.
|
||||
SplashError composite(SplashBitmap *src, int xSrc, int ySrc,
|
||||
int xDest, int yDest, int w, int h,
|
||||
GBool noClip, GBool nonIsolated);
|
||||
|
||||
// Composite this Splash object onto a background color. The
|
||||
// background alpha is assumed to be 1.
|
||||
void compositeBackground(SplashColorPtr color);
|
||||
|
||||
// Copy a rectangular region from <src> onto the bitmap belonging to
|
||||
// this Splash object. The destination alpha values are all set to
|
||||
// zero.
|
||||
SplashError blitTransparent(SplashBitmap *src, int xSrc, int ySrc,
|
||||
int xDest, int yDest, int w, int h);
|
||||
|
||||
// Copy a rectangular region from the bitmap belonging to this
|
||||
// Splash object to <dest>. The alpha values are corrected for a
|
||||
// non-isolated group.
|
||||
SplashError blitCorrectedAlpha(SplashBitmap *dest, int xSrc, int ySrc,
|
||||
int xDest, int yDest, int w, int h);
|
||||
|
||||
//----- misc
|
||||
|
||||
// Construct a path for a stroke, given the path to be stroked and
|
||||
// the line width <w>. All other stroke parameters are taken from
|
||||
// the current state. If <flatten> is true, this function will
|
||||
// first flatten the path and handle the linedash.
|
||||
SplashPath *makeStrokePath(SplashPath *path, SplashCoord w,
|
||||
int lineCap, int lineJoin,
|
||||
GBool flatten = gTrue);
|
||||
|
||||
// Reduce the size of a rectangle as much as possible by moving any
|
||||
// edges that are completely outside the clip region. Returns the
|
||||
// clipping status of the resulting rectangle.
|
||||
SplashClipResult limitRectToClipRect(int *xMin, int *yMin,
|
||||
int *xMax, int *yMax);
|
||||
|
||||
// Return the associated bitmap.
|
||||
SplashBitmap *getBitmap() { return bitmap; }
|
||||
|
||||
// Set the minimum line width.
|
||||
void setMinLineWidth(SplashCoord w) { minLineWidth = w; }
|
||||
|
||||
// Get a bounding box which includes all modifications since the
|
||||
// last call to clearModRegion.
|
||||
void getModRegion(int *xMin, int *yMin, int *xMax, int *yMax)
|
||||
{ *xMin = modXMin; *yMin = modYMin; *xMax = modXMax; *yMax = modYMax; }
|
||||
|
||||
// Clear the modified region bounding box.
|
||||
void clearModRegion();
|
||||
|
||||
// Get clipping status for the last drawing operation subject to
|
||||
// clipping.
|
||||
SplashClipResult getClipRes() { return opClipRes; }
|
||||
|
||||
// Toggle debug mode on or off.
|
||||
void setDebugMode(GBool debugModeA) { debugMode = debugModeA; }
|
||||
|
||||
#if 1 //~tmp: turn off anti-aliasing temporarily
|
||||
void setInShading(GBool sh) { inShading = sh; }
|
||||
#endif
|
||||
|
||||
|
||||
private:
|
||||
|
||||
void pipeInit(SplashPipe *pipe, SplashPattern *pattern,
|
||||
Guchar aInput, GBool usesShape,
|
||||
GBool nonIsolatedGroup);
|
||||
void pipeRun(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
void pipeRunSimpleMono1(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
void pipeRunSimpleMono8(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
void pipeRunSimpleRGB8(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
void pipeRunSimpleBGR8(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
#if SPLASH_CMYK
|
||||
void pipeRunSimpleCMYK8(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
#endif
|
||||
void pipeRunShapeMono1(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
void pipeRunShapeMono8(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
void pipeRunShapeRGB8(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
void pipeRunShapeBGR8(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
#if SPLASH_CMYK
|
||||
void pipeRunShapeCMYK8(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
#endif
|
||||
void pipeRunAAMono1(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
void pipeRunAAMono8(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
void pipeRunAARGB8(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
void pipeRunAABGR8(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
#if SPLASH_CMYK
|
||||
void pipeRunAACMYK8(SplashPipe *pipe, int x0, int x1, int y,
|
||||
Guchar *shapePtr, SplashColorPtr cSrcPtr);
|
||||
#endif
|
||||
void transform(SplashCoord *matrix, SplashCoord xi, SplashCoord yi,
|
||||
SplashCoord *xo, SplashCoord *yo);
|
||||
void updateModX(int x);
|
||||
void updateModY(int y);
|
||||
void strokeNarrow(SplashPath *path);
|
||||
void drawStrokeSpan(SplashPipe *pipe, int x0, int x1, int y, GBool noClip);
|
||||
void strokeWide(SplashPath *path, SplashCoord w,
|
||||
int lineCap, int lineJoin);
|
||||
SplashPath *flattenPath(SplashPath *path, SplashCoord *matrix,
|
||||
SplashCoord flatness);
|
||||
void flattenCurve(SplashCoord x0, SplashCoord y0,
|
||||
SplashCoord x1, SplashCoord y1,
|
||||
SplashCoord x2, SplashCoord y2,
|
||||
SplashCoord x3, SplashCoord y3,
|
||||
SplashCoord *matrix, SplashCoord flatness2,
|
||||
SplashPath *fPath);
|
||||
SplashPath *makeDashedPath(SplashPath *xPath);
|
||||
SplashError fillWithPattern(SplashPath *path, GBool eo,
|
||||
SplashPattern *pattern, SplashCoord alpha);
|
||||
SplashPath *tweakFillPath(SplashPath *path);
|
||||
GBool pathAllOutside(SplashPath *path);
|
||||
SplashError fillGlyph2(int x0, int y0, SplashGlyphBitmap *glyph);
|
||||
void getImageBounds(SplashCoord xyMin, SplashCoord xyMax,
|
||||
int *xyMinI, int *xyMaxI);
|
||||
void upscaleMask(SplashImageMaskSource src, void *srcData,
|
||||
int srcWidth, int srcHeight,
|
||||
SplashCoord *mat, GBool glyphMode,
|
||||
GBool interpolate);
|
||||
void arbitraryTransformMask(SplashImageMaskSource src, void *srcData,
|
||||
int srcWidth, int srcHeight,
|
||||
SplashCoord *mat, GBool glyphMode,
|
||||
GBool interpolate);
|
||||
SplashBitmap *scaleMask(SplashImageMaskSource src, void *srcData,
|
||||
int srcWidth, int srcHeight,
|
||||
int scaledWidth, int scaledHeight,
|
||||
GBool interpolate);
|
||||
void scaleMaskYdXd(SplashImageMaskSource src, void *srcData,
|
||||
int srcWidth, int srcHeight,
|
||||
int scaledWidth, int scaledHeight,
|
||||
SplashBitmap *dest);
|
||||
void scaleMaskYdXu(SplashImageMaskSource src, void *srcData,
|
||||
int srcWidth, int srcHeight,
|
||||
int scaledWidth, int scaledHeight,
|
||||
SplashBitmap *dest);
|
||||
void scaleMaskYuXd(SplashImageMaskSource src, void *srcData,
|
||||
int srcWidth, int srcHeight,
|
||||
int scaledWidth, int scaledHeight,
|
||||
SplashBitmap *dest);
|
||||
void scaleMaskYuXu(SplashImageMaskSource src, void *srcData,
|
||||
int srcWidth, int srcHeight,
|
||||
int scaledWidth, int scaledHeight,
|
||||
SplashBitmap *dest);
|
||||
void scaleMaskYuXuI(SplashImageMaskSource src, void *srcData,
|
||||
int srcWidth, int srcHeight,
|
||||
int scaledWidth, int scaledHeight,
|
||||
SplashBitmap *dest);
|
||||
void blitMask(SplashBitmap *src, int xDest, int yDest,
|
||||
SplashClipResult clipRes);
|
||||
void upscaleImage(SplashImageSource src, void *srcData,
|
||||
SplashColorMode srcMode, int nComps,
|
||||
GBool srcAlpha, int srcWidth, int srcHeight,
|
||||
SplashCoord *mat, GBool interpolate);
|
||||
void arbitraryTransformImage(SplashImageSource src, void *srcData,
|
||||
SplashColorMode srcMode, int nComps,
|
||||
GBool srcAlpha,
|
||||
int srcWidth, int srcHeight,
|
||||
SplashCoord *mat, GBool interpolate);
|
||||
SplashBitmap *scaleImage(SplashImageSource src, void *srcData,
|
||||
SplashColorMode srcMode, int nComps,
|
||||
GBool srcAlpha, int srcWidth, int srcHeight,
|
||||
int scaledWidth, int scaledHeight,
|
||||
GBool interpolate);
|
||||
void scaleImageYdXd(SplashImageSource src, void *srcData,
|
||||
SplashColorMode srcMode, int nComps,
|
||||
GBool srcAlpha, int srcWidth, int srcHeight,
|
||||
int scaledWidth, int scaledHeight,
|
||||
SplashBitmap *dest);
|
||||
void scaleImageYdXu(SplashImageSource src, void *srcData,
|
||||
SplashColorMode srcMode, int nComps,
|
||||
GBool srcAlpha, int srcWidth, int srcHeight,
|
||||
int scaledWidth, int scaledHeight,
|
||||
SplashBitmap *dest);
|
||||
void scaleImageYuXd(SplashImageSource src, void *srcData,
|
||||
SplashColorMode srcMode, int nComps,
|
||||
GBool srcAlpha, int srcWidth, int srcHeight,
|
||||
int scaledWidth, int scaledHeight,
|
||||
SplashBitmap *dest);
|
||||
void scaleImageYuXu(SplashImageSource src, void *srcData,
|
||||
SplashColorMode srcMode, int nComps,
|
||||
GBool srcAlpha, int srcWidth, int srcHeight,
|
||||
int scaledWidth, int scaledHeight,
|
||||
SplashBitmap *dest);
|
||||
void scaleImageYuXuI(SplashImageSource src, void *srcData,
|
||||
SplashColorMode srcMode, int nComps,
|
||||
GBool srcAlpha, int srcWidth, int srcHeight,
|
||||
int scaledWidth, int scaledHeight,
|
||||
SplashBitmap *dest);
|
||||
void vertFlipImage(SplashBitmap *img, int width, int height,
|
||||
int nComps);
|
||||
void horizFlipImage(SplashBitmap *img, int width, int height,
|
||||
int nComps);
|
||||
void blitImage(SplashBitmap *src, GBool srcAlpha, int xDest, int yDest,
|
||||
SplashClipResult clipRes);
|
||||
void blitImageClipped(SplashBitmap *src, GBool srcAlpha,
|
||||
int xSrc, int ySrc, int xDest, int yDest,
|
||||
int w, int h);
|
||||
void dumpPath(SplashPath *path);
|
||||
void dumpXPath(SplashXPath *path);
|
||||
|
||||
|
||||
static SplashPipeResultColorCtrl pipeResultColorNoAlphaBlend[];
|
||||
static SplashPipeResultColorCtrl pipeResultColorAlphaNoBlend[];
|
||||
static SplashPipeResultColorCtrl pipeResultColorAlphaBlend[];
|
||||
static int pipeNonIsoGroupCorrection[];
|
||||
|
||||
SplashBitmap *bitmap;
|
||||
int bitmapComps;
|
||||
SplashState *state;
|
||||
Guchar *scanBuf;
|
||||
Guchar *scanBuf2;
|
||||
SplashBitmap // for transparency groups, this is the bitmap
|
||||
*groupBackBitmap; // containing the alpha0/color0 values
|
||||
int groupBackX, groupBackY; // offset within groupBackBitmap
|
||||
SplashCoord minLineWidth;
|
||||
int modXMin, modYMin, modXMax, modYMax;
|
||||
SplashClipResult opClipRes;
|
||||
GBool vectorAntialias;
|
||||
GBool inShading;
|
||||
GBool debugMode;
|
||||
};
|
||||
|
||||
#endif
|
Loading…
Reference in New Issue