1 /* 2 * Test program, which can detect some problems with affine transformations 3 * in pixman. Testing is done by running lots of random SRC and OVER 4 * compositing operations a8r8g8b8, x8a8r8g8b8, r5g6b5 and a8 color formats 5 * with random scaled, rotated and translated transforms. 6 * 7 * Script 'fuzzer-find-diff.pl' can be used to narrow down the problem in 8 * the case of test failure. 9 */ 10 #include <assert.h> 11 #include <stdlib.h> 12 #include <stdio.h> 13 #include "utils.h" 14 15 #define MAX_SRC_WIDTH 16 16 #define MAX_SRC_HEIGHT 16 17 #define MAX_DST_WIDTH 16 18 #define MAX_DST_HEIGHT 16 19 #define MAX_STRIDE 4 20 21 /* 22 * Composite operation with pseudorandom images 23 */ 24 uint32_t 25 test_composite (int testnum, 26 int verbose) 27 { 28 int i; 29 pixman_image_t * src_img; 30 pixman_image_t * dst_img; 31 pixman_transform_t transform; 32 pixman_region16_t clip; 33 int src_width, src_height; 34 int dst_width, dst_height; 35 int src_stride, dst_stride; 36 int src_x, src_y; 37 int dst_x, dst_y; 38 int src_bpp; 39 int dst_bpp; 40 int w, h; 41 pixman_fixed_t scale_x = 65536, scale_y = 65536; 42 pixman_fixed_t translate_x = 0, translate_y = 0; 43 pixman_op_t op; 44 pixman_repeat_t repeat = PIXMAN_REPEAT_NONE; 45 pixman_format_code_t src_fmt, dst_fmt; 46 uint32_t * srcbuf; 47 uint32_t * dstbuf; 48 uint32_t crc32; 49 FLOAT_REGS_CORRUPTION_DETECTOR_START (); 50 51 prng_srand (testnum); 52 53 src_bpp = (prng_rand_n (2) == 0) ? 2 : 4; 54 dst_bpp = (prng_rand_n (2) == 0) ? 2 : 4; 55 op = (prng_rand_n (2) == 0) ? PIXMAN_OP_SRC : PIXMAN_OP_OVER; 56 57 src_width = prng_rand_n (MAX_SRC_WIDTH) + 1; 58 src_height = prng_rand_n (MAX_SRC_HEIGHT) + 1; 59 dst_width = prng_rand_n (MAX_DST_WIDTH) + 1; 60 dst_height = prng_rand_n (MAX_DST_HEIGHT) + 1; 61 src_stride = src_width * src_bpp + prng_rand_n (MAX_STRIDE) * src_bpp; 62 dst_stride = dst_width * dst_bpp + prng_rand_n (MAX_STRIDE) * dst_bpp; 63 64 if (src_stride & 3) 65 src_stride += 2; 66 67 if (dst_stride & 3) 68 dst_stride += 2; 69 70 src_x = -(src_width / 4) + prng_rand_n (src_width * 3 / 2); 71 src_y = -(src_height / 4) + prng_rand_n (src_height * 3 / 2); 72 dst_x = -(dst_width / 4) + prng_rand_n (dst_width * 3 / 2); 73 dst_y = -(dst_height / 4) + prng_rand_n (dst_height * 3 / 2); 74 w = prng_rand_n (dst_width * 3 / 2 - dst_x); 75 h = prng_rand_n (dst_height * 3 / 2 - dst_y); 76 77 srcbuf = (uint32_t *)malloc (src_stride * src_height); 78 dstbuf = (uint32_t *)malloc (dst_stride * dst_height); 79 80 prng_randmemset (srcbuf, src_stride * src_height, 0); 81 prng_randmemset (dstbuf, dst_stride * dst_height, 0); 82 83 src_fmt = src_bpp == 4 ? (prng_rand_n (2) == 0 ? 84 PIXMAN_a8r8g8b8 : PIXMAN_x8r8g8b8) : PIXMAN_r5g6b5; 85 86 dst_fmt = dst_bpp == 4 ? (prng_rand_n (2) == 0 ? 87 PIXMAN_a8r8g8b8 : PIXMAN_x8r8g8b8) : PIXMAN_r5g6b5; 88 89 src_img = pixman_image_create_bits ( 90 src_fmt, src_width, src_height, srcbuf, src_stride); 91 92 dst_img = pixman_image_create_bits ( 93 dst_fmt, dst_width, dst_height, dstbuf, dst_stride); 94 95 image_endian_swap (src_img); 96 image_endian_swap (dst_img); 97 98 pixman_transform_init_identity (&transform); 99 100 if (prng_rand_n (3) > 0) 101 { 102 scale_x = -65536 * 3 + prng_rand_n (65536 * 6); 103 if (prng_rand_n (2)) 104 scale_y = -65536 * 3 + prng_rand_n (65536 * 6); 105 else 106 scale_y = scale_x; 107 pixman_transform_init_scale (&transform, scale_x, scale_y); 108 } 109 if (prng_rand_n (3) > 0) 110 { 111 translate_x = -65536 * 3 + prng_rand_n (6 * 65536); 112 if (prng_rand_n (2)) 113 translate_y = -65536 * 3 + prng_rand_n (6 * 65536); 114 else 115 translate_y = translate_x; 116 pixman_transform_translate (&transform, NULL, translate_x, translate_y); 117 } 118 119 if (prng_rand_n (4) > 0) 120 { 121 int c, s, tx = 0, ty = 0; 122 switch (prng_rand_n (4)) 123 { 124 case 0: 125 /* 90 degrees */ 126 c = 0; 127 s = pixman_fixed_1; 128 tx = pixman_int_to_fixed (MAX_SRC_HEIGHT); 129 break; 130 case 1: 131 /* 180 degrees */ 132 c = -pixman_fixed_1; 133 s = 0; 134 tx = pixman_int_to_fixed (MAX_SRC_WIDTH); 135 ty = pixman_int_to_fixed (MAX_SRC_HEIGHT); 136 break; 137 case 2: 138 /* 270 degrees */ 139 c = 0; 140 s = -pixman_fixed_1; 141 ty = pixman_int_to_fixed (MAX_SRC_WIDTH); 142 break; 143 default: 144 /* arbitrary rotation */ 145 c = prng_rand_n (2 * 65536) - 65536; 146 s = prng_rand_n (2 * 65536) - 65536; 147 break; 148 } 149 pixman_transform_rotate (&transform, NULL, c, s); 150 pixman_transform_translate (&transform, NULL, tx, ty); 151 } 152 153 if (prng_rand_n (8) == 0) 154 { 155 /* Flip random bits */ 156 int maxflipcount = 8; 157 while (maxflipcount--) 158 { 159 int i = prng_rand_n (2); 160 int j = prng_rand_n (3); 161 int bitnum = prng_rand_n (32); 162 transform.matrix[i][j] ^= 1 << bitnum; 163 if (prng_rand_n (2)) 164 break; 165 } 166 } 167 168 pixman_image_set_transform (src_img, &transform); 169 170 switch (prng_rand_n (4)) 171 { 172 case 0: 173 repeat = PIXMAN_REPEAT_NONE; 174 break; 175 176 case 1: 177 repeat = PIXMAN_REPEAT_NORMAL; 178 break; 179 180 case 2: 181 repeat = PIXMAN_REPEAT_PAD; 182 break; 183 184 case 3: 185 repeat = PIXMAN_REPEAT_REFLECT; 186 break; 187 188 default: 189 break; 190 } 191 pixman_image_set_repeat (src_img, repeat); 192 193 if (prng_rand_n (2)) 194 pixman_image_set_filter (src_img, PIXMAN_FILTER_NEAREST, NULL, 0); 195 else 196 pixman_image_set_filter (src_img, PIXMAN_FILTER_BILINEAR, NULL, 0); 197 198 if (verbose) 199 { 200 #define M(r,c) \ 201 transform.matrix[r][c] 202 203 printf ("src_fmt=%s, dst_fmt=%s\n", format_name (src_fmt), format_name (dst_fmt)); 204 printf ("op=%s, repeat=%d, transform=\n", 205 operator_name (op), repeat); 206 printf (" { { { 0x%08x, 0x%08x, 0x%08x },\n" 207 " { 0x%08x, 0x%08x, 0x%08x },\n" 208 " { 0x%08x, 0x%08x, 0x%08x },\n" 209 " } };\n", 210 M(0,0), M(0,1), M(0,2), 211 M(1,0), M(1,1), M(1,2), 212 M(2,0), M(2,1), M(2,2)); 213 printf ("src_width=%d, src_height=%d, dst_width=%d, dst_height=%d\n", 214 src_width, src_height, dst_width, dst_height); 215 printf ("src_x=%d, src_y=%d, dst_x=%d, dst_y=%d\n", 216 src_x, src_y, dst_x, dst_y); 217 printf ("w=%d, h=%d\n", w, h); 218 } 219 220 if (prng_rand_n (8) == 0) 221 { 222 pixman_box16_t clip_boxes[2]; 223 int n = prng_rand_n (2) + 1; 224 225 for (i = 0; i < n; i++) 226 { 227 clip_boxes[i].x1 = prng_rand_n (src_width); 228 clip_boxes[i].y1 = prng_rand_n (src_height); 229 clip_boxes[i].x2 = 230 clip_boxes[i].x1 + prng_rand_n (src_width - clip_boxes[i].x1); 231 clip_boxes[i].y2 = 232 clip_boxes[i].y1 + prng_rand_n (src_height - clip_boxes[i].y1); 233 234 if (verbose) 235 { 236 printf ("source clip box: [%d,%d-%d,%d]\n", 237 clip_boxes[i].x1, clip_boxes[i].y1, 238 clip_boxes[i].x2, clip_boxes[i].y2); 239 } 240 } 241 242 pixman_region_init_rects (&clip, clip_boxes, n); 243 pixman_image_set_clip_region (src_img, &clip); 244 pixman_image_set_source_clipping (src_img, 1); 245 pixman_region_fini (&clip); 246 } 247 248 if (prng_rand_n (8) == 0) 249 { 250 pixman_box16_t clip_boxes[2]; 251 int n = prng_rand_n (2) + 1; 252 for (i = 0; i < n; i++) 253 { 254 clip_boxes[i].x1 = prng_rand_n (dst_width); 255 clip_boxes[i].y1 = prng_rand_n (dst_height); 256 clip_boxes[i].x2 = 257 clip_boxes[i].x1 + prng_rand_n (dst_width - clip_boxes[i].x1); 258 clip_boxes[i].y2 = 259 clip_boxes[i].y1 + prng_rand_n (dst_height - clip_boxes[i].y1); 260 261 if (verbose) 262 { 263 printf ("destination clip box: [%d,%d-%d,%d]\n", 264 clip_boxes[i].x1, clip_boxes[i].y1, 265 clip_boxes[i].x2, clip_boxes[i].y2); 266 } 267 } 268 pixman_region_init_rects (&clip, clip_boxes, n); 269 pixman_image_set_clip_region (dst_img, &clip); 270 pixman_region_fini (&clip); 271 } 272 273 pixman_image_composite (op, src_img, NULL, dst_img, 274 src_x, src_y, 0, 0, dst_x, dst_y, w, h); 275 276 if (dst_fmt == PIXMAN_x8r8g8b8) 277 { 278 /* ignore unused part */ 279 for (i = 0; i < dst_stride * dst_height / 4; i++) 280 dstbuf[i] &= 0xFFFFFF; 281 } 282 283 image_endian_swap (dst_img); 284 285 if (verbose) 286 { 287 int j; 288 289 for (i = 0; i < dst_height; i++) 290 { 291 for (j = 0; j < dst_stride; j++) 292 printf ("%02X ", *((uint8_t *)dstbuf + i * dst_stride + j)); 293 294 printf ("\n"); 295 } 296 } 297 298 pixman_image_unref (src_img); 299 pixman_image_unref (dst_img); 300 301 crc32 = compute_crc32 (0, dstbuf, dst_stride * dst_height); 302 free (srcbuf); 303 free (dstbuf); 304 305 FLOAT_REGS_CORRUPTION_DETECTOR_FINISH (); 306 return crc32; 307 } 308 309 #if BILINEAR_INTERPOLATION_BITS == 8 310 #define CHECKSUM 0x2CDF1F07 311 #elif BILINEAR_INTERPOLATION_BITS == 7 312 #define CHECKSUM 0xBC00B1DF 313 #elif BILINEAR_INTERPOLATION_BITS == 4 314 #define CHECKSUM 0xA227306B 315 #else 316 #define CHECKSUM 0x00000000 317 #endif 318 319 int 320 main (int argc, const char *argv[]) 321 { 322 pixman_disable_out_of_bounds_workaround (); 323 324 return fuzzer_test_main ("affine", 8000000, CHECKSUM, 325 test_composite, argc, argv); 326 } 327
