| // Copyright 2026 Google LLC | |
| // | |
| // Licensed under the Apache License, Version 2.0 (the "License"); | |
| // you may not use this file except in compliance with the License. | |
| // You may obtain a copy of the License at | |
| // | |
| // https://www.apache.org/licenses/LICENSE-2.0 | |
| // | |
| // Unless required by applicable law or agreed to in writing, software | |
| // distributed under the License is distributed on an "AS IS" BASIS, | |
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
| // See the License for the specific language governing permissions and | |
| // limitations under the License. | |
| // | |
| #include "formats/png/reader.h" | |
| #include <string> | |
| #include <utility> | |
| #include <vector> | |
| #include "absl/status/status.h" | |
| #include "absl/status/status_macros.h" | |
| #include "absl/status/status_matchers.h" | |
| #include "absl/status/statusor.h" | |
| #include "absl/strings/string_view.h" | |
| #include "absl/types/span.h" | |
| #include "formats/png/test_utils.h" | |
| #include "gmock/gmock.h" | |
| #include "gtest/gtest.h" | |
| #include "riegeli/bytes/reader.h" | |
| #include "riegeli/bytes/string_reader.h" | |
| namespace credentio { | |
| namespace { | |
| using ::absl_testing::IsOkAndHolds; | |
| using ::absl_testing::StatusIs; | |
| using ::testing::HasSubstr; | |
| using ::testing::IsEmpty; | |
| absl::StatusOr<std::vector<PngChunk>> GetChunks(riegeli::Reader& reader) { | |
| std::vector<PngChunk> chunks; | |
| ABSL_RETURN_IF_ERROR(IterateOverPngChunks(reader, [&](const PngChunk& chunk) { | |
| chunks.push_back(std::move(chunk)); | |
| return absl::OkStatus(); | |
| })); | |
| return chunks; | |
| } | |
| absl::StatusOr<std::vector<PngChunk>> GetChunksFromContents( | |
| absl::string_view contents) { | |
| riegeli::StringReader reader(contents); | |
| return GetChunks(reader); | |
| } | |
| using PngReaderTest = testing::Test; | |
| TEST_F(PngReaderTest, NoData) { | |
| EXPECT_THAT(GetChunksFromContents(""), IsOkAndHolds(IsEmpty())); | |
| } | |
| TEST_F(PngReaderTest, InvalidHeader) { | |
| std::string content = "abcdefghijklmnopqrstuvwxyz"; | |
| EXPECT_THAT(GetChunksFromContents(content), | |
| StatusIs(absl::StatusCode::kInvalidArgument, | |
| HasSubstr("input does not start with PNG marker"))); | |
| } | |
| TEST_F(PngReaderTest, ClosedReader) { | |
| std::string content = "abcdefghijklmnopqrstuvwxyz"; | |
| riegeli::StringReader reader(content); | |
| EXPECT_TRUE(reader.Close()); | |
| EXPECT_THAT( | |
| GetChunks(reader), | |
| StatusIs(absl::StatusCode::kInvalidArgument, | |
| HasSubstr("PNG reader does not support size, cannot iterate"))); | |
| } | |
| TEST_F(PngReaderTest, ChunkExtendsBeyondEndOfFile) { | |
| auto content_or = CreatePng({{.type = 'IDAT', .payload = "a"}}); | |
| if (!content_or.ok()) { | |
| FAIL() << "Failed to create PNG: " << content_or.status(); | |
| } | |
| std::string content = *content_or; | |
| content[11] = '\xff'; // Marks the IDAT chunk as 255 bytes long. | |
| EXPECT_THAT( | |
| GetChunksFromContents(content), | |
| StatusIs(absl::StatusCode::kInvalidArgument, | |
| HasSubstr("PNG chunk extends beyond the end of the file"))); | |
| } | |
| TEST_F(PngReaderTest, ChunkLengthOverflowPrevention) { | |
| auto content_or = CreatePng({{.type = 'IDAT', .payload = "a"}}); | |
| ASSERT_TRUE(content_or.ok()); | |
| std::string content = *content_or; | |
| content[8] = '\xff'; | |
| content[9] = '\xff'; | |
| content[10] = '\xff'; | |
| content[11] = '\xf4'; // data_length = 0xfffffff4 (-12 in 32-bit) | |
| EXPECT_THAT( | |
| GetChunksFromContents(content), | |
| StatusIs(absl::StatusCode::kInvalidArgument, | |
| HasSubstr("PNG chunk extends beyond the end of the file"))); | |
| } | |
| TEST_F(PngReaderTest, InvalidChunkType) { | |
| auto content_or = CreatePng({{.type = 'C2PA', .payload = "a"}}); | |
| ASSERT_TRUE(content_or.ok()); | |
| EXPECT_THAT(GetChunksFromContents(*content_or), | |
| StatusIs(absl::StatusCode::kInvalidArgument, | |
| HasSubstr("Invalid PNG chunk type name: C2PA"))); | |
| } | |
| } // namespace | |
| } // namespace credentio |