1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
|
# bmpsuite "bad" tests
# See ../README.mozilla for details.
# BMP: bihsize=40, 127 x 64, bpp=30000, compression=0, colors=2
# "Header indicates an absurdly large number of bits/pixel."
# [We reject it. So does Chromium.]
== wrapper.html?badbitcount.bmp about:blank
# BMP: bihsize=40, 127 x 64, bpp=1, compression=0, colors=2
# "Header incorrectly indicates that the bitmap is several GB in size."
# [We accept it. So does Chromium.]
fuzzy(0-1,0-926) == badbitssize.bmp pal1.png
# BMP: bihsize=40, 127 x 64, bpp=1, compression=0, colors=2
# BMP: bihsize=40, 127 x 64, bpp=1, compression=0, colors=2
# "Density (pixels per meter) suggests the image is much larger in one
# dimension than the other."
# [We accept them. So does Chromium.]
== baddens1.bmp pal1.png
== baddens2.bmp pal1.png
# BMP: bihsize=40, 127 x 64, bpp=1, compression=0, colors=2
# "Header incorrectly indicates that the file is several GB in size."
# [We accept it. So does Chromium.]
== badfilesize.bmp pal1.png
# BMP: <no "BMP:" output is produced for files with bad header sizes>
# "Header size is 66 bytes, which is not a valid size for any known BMP
# version."
# [We reject it. So does Chromium.]
== wrapper.html?badheadersize.bmp about:blank
# BMP: bihsize=40, 127 x 64, bpp=8, compression=0, colors=305402420
# "Header incorrectly indicates that the palette contains an absurdly large
# number of colors."
# [We reject it. Chromium accepts it but draws nothing. Rejecting seems
# preferable give that the data is clearly untrustworthy.]
fuzzy(0-245,0-8128) == wrapper.html?badpalettesize.bmp about:blank
# BMP: bihsize=40, 127 x 64, bpp=1, compression=0, colors=2
# "The 'planes' setting, which is required to be 1, is not 1."
# [We accept it. So does Chromium.]
== badplanes.bmp pal1.png
# BMP: bihsize=40, 127 x 64, bpp=4, compression=2, colors=13
# "An invalid RLE4-compressed image that tries to cause buffer overruns."
== badrle4.bmp badrle4.png
# BMP: bihsize=40, 127 x 64, bpp=4, compression=2, colors=13
# "Another invalid RLE4-compressed image that tries to cause buffer overruns."
== badrle4bis.bmp badrle4bis.png
# BMP: bihsize=40, 127 x 64, bpp=4, compression=2, colors=13
# "Another invalid RLE4-compressed image that tries to cause buffer overruns."
== badrle4ter.bmp badrle4ter.png
# BMP: bihsize=40, 127 x 64, bpp=8, compression=1, colors=253
# "An invalid RLE-compressed image that tries to cause buffer overruns."
# [We accept it, drawing the valid first part and leaving the rest black.
# Chromium accepts it, drawing the valid first part and leaving the rest
# transparent. Using black for the invalid part is arguably better because it
# makes the image edges more obvious.]
== badrle.bmp badrle.png
# BMP: bihsize=40, 127 x 64, bpp=8, compression=1, colors=253
# "8-bit version of b/badrle4bis.bmp."
== badrlebis.bmp badrlebis.png
# BMP: bihsize=40, 127 x 64, bpp=8, compression=1, colors=253
# "8-bit version of b/badrle4ter.bmp."
== badrleter.bmp badrleter.png
# BMP: bihsize=40, -127 x 64, bpp=1, compression=0, colors=2
# "The image claims to be a negative number of pixels in width."
# [We reject it. So does Chromium.]
== wrapper.html?badwidth.bmp about:blank
# BMP: bihsize=40, 127 x 64, bpp=8, compression=0, colors=101
# "Many of the palette indices used in the image are not present in the
# palette."
# [We accept it and use black for the missing colors. So does Chromium.]
== pal8badindex.bmp pal8badindex.png
# BMP: bihsize=40, 3000000 x 2000000, bpp=24, compression=0, colors=0
# "An image with a very large reported width and height."
# [We reject it. So does Chromium.]
== wrapper.html?reallybig.bmp about:blank
# BMP: bihsize=40, 127 x 64, bpp=16, compression=3, colors=0
# "A 16-bit image with a BITFIELDS segment indicating 8 red, 8 green, and 0
# blue bits. The documentation doesn’t say whether undefined channels are
# legal, or how they should be handled."
== rgb16-880.bmp rgb16-880.png
# BMP: bihsize=40, 127 x -64, bpp=8, compression=1, colors=252
# "An RLE-compressed image that tries to use top-down orientation, which isn’t
# allowed."
# [We accept it. Chromium rejects it. Accepting seems better given that we can
# decode it perfectly well.]
fuzzy(0-1,0-996) == rletopdown.bmp pal8.png
# BMP: bihsize=40, 127 x 64, bpp=1, compression=0, colors=2
# "A file that has been truncated in the middle of the bitmap."
# [We accept it, drawing the part that is present and leaving the rest black.
# Chromium draws the part that is present and leaves the rest transparent.
# Using black for the invalid part is arguably better because it makes the
# image edges more obvious.]
== shortfile.bmp shortfile.png
|
