1 /*
2 * Copyright (c) 1991-1997 Sam Leffler
3 * Copyright (c) 1991-1997 Silicon Graphics, Inc.
4 *
5 * Permission to use, copy, modify, distribute, and sell this software and
6 * its documentation for any purpose is hereby granted without fee, provided
7 * that (i) the above copyright notices and this permission notice appear in
8 * all copies of the software and related documentation, and (ii) the names of
9 * Sam Leffler and Silicon Graphics may not be used in any advertising or
10 * publicity relating to the software without the specific, prior written
11 * permission of Sam Leffler and Silicon Graphics.
12 *
13 * THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND,
14 * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY
15 * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
16 *
17 * IN NO EVENT SHALL SAM LEFFLER OR SILICON GRAPHICS BE LIABLE FOR
18 * ANY SPECIAL, INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND,
19 * OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
20 * WHETHER OR NOT ADVISED OF THE POSSIBILITY OF DAMAGE, AND ON ANY THEORY OF
21 * LIABILITY, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
22 * OF THIS SOFTWARE.
23 */
24
25 /*
26 * TIFF Library.
27 *
28 * Auxiliary Support Routines.
29 */
30 #include "tif_predict.h"
31 #include "tiffiop.h"
32 #include <float.h>
33 #include <math.h>
34
_TIFFMultiply32(TIFF * tif,uint32_t first,uint32_t second,const char * where)35 uint32_t _TIFFMultiply32(TIFF *tif, uint32_t first, uint32_t second,
36 const char *where)
37 {
38 if (second && first > UINT32_MAX / second)
39 {
40 TIFFErrorExtR(tif, where, "Integer overflow in %s", where);
41 return 0;
42 }
43
44 return first * second;
45 }
46
_TIFFMultiply64(TIFF * tif,uint64_t first,uint64_t second,const char * where)47 uint64_t _TIFFMultiply64(TIFF *tif, uint64_t first, uint64_t second,
48 const char *where)
49 {
50 if (second && first > UINT64_MAX / second)
51 {
52 TIFFErrorExtR(tif, where, "Integer overflow in %s", where);
53 return 0;
54 }
55
56 return first * second;
57 }
58
_TIFFMultiplySSize(TIFF * tif,tmsize_t first,tmsize_t second,const char * where)59 tmsize_t _TIFFMultiplySSize(TIFF *tif, tmsize_t first, tmsize_t second,
60 const char *where)
61 {
62 if (first <= 0 || second <= 0)
63 {
64 if (tif != NULL && where != NULL)
65 {
66 TIFFErrorExtR(tif, where,
67 "Invalid argument to _TIFFMultiplySSize() in %s",
68 where);
69 }
70 return 0;
71 }
72
73 if (first > TIFF_TMSIZE_T_MAX / second)
74 {
75 if (tif != NULL && where != NULL)
76 {
77 TIFFErrorExtR(tif, where, "Integer overflow in %s", where);
78 }
79 return 0;
80 }
81 return first * second;
82 }
83
_TIFFCastUInt64ToSSize(TIFF * tif,uint64_t val,const char * module)84 tmsize_t _TIFFCastUInt64ToSSize(TIFF *tif, uint64_t val, const char *module)
85 {
86 if (val > (uint64_t)TIFF_TMSIZE_T_MAX)
87 {
88 if (tif != NULL && module != NULL)
89 {
90 TIFFErrorExtR(tif, module, "Integer overflow");
91 }
92 return 0;
93 }
94 return (tmsize_t)val;
95 }
96
_TIFFCheckRealloc(TIFF * tif,void * buffer,tmsize_t nmemb,tmsize_t elem_size,const char * what)97 void *_TIFFCheckRealloc(TIFF *tif, void *buffer, tmsize_t nmemb,
98 tmsize_t elem_size, const char *what)
99 {
100 void *cp = NULL;
101 tmsize_t count = _TIFFMultiplySSize(tif, nmemb, elem_size, NULL);
102 /*
103 * Check for integer overflow.
104 */
105 if (count != 0)
106 {
107 cp = _TIFFreallocExt(tif, buffer, count);
108 }
109
110 if (cp == NULL)
111 {
112 TIFFErrorExtR(tif, tif->tif_name,
113 "Failed to allocate memory for %s "
114 "(%" TIFF_SSIZE_FORMAT " elements of %" TIFF_SSIZE_FORMAT
115 " bytes each)",
116 what, nmemb, elem_size);
117 }
118
119 return cp;
120 }
121
_TIFFCheckMalloc(TIFF * tif,tmsize_t nmemb,tmsize_t elem_size,const char * what)122 void *_TIFFCheckMalloc(TIFF *tif, tmsize_t nmemb, tmsize_t elem_size,
123 const char *what)
124 {
125 return _TIFFCheckRealloc(tif, NULL, nmemb, elem_size, what);
126 }
127
TIFFDefaultTransferFunction(TIFF * tif,TIFFDirectory * td)128 static int TIFFDefaultTransferFunction(TIFF *tif, TIFFDirectory *td)
129 {
130 uint16_t **tf = td->td_transferfunction;
131 tmsize_t i, n, nbytes;
132
133 tf[0] = tf[1] = tf[2] = 0;
134 if (td->td_bitspersample >= sizeof(tmsize_t) * 8 - 2)
135 return 0;
136
137 n = ((tmsize_t)1) << td->td_bitspersample;
138 nbytes = n * sizeof(uint16_t);
139 tf[0] = (uint16_t *)_TIFFmallocExt(tif, nbytes);
140 if (tf[0] == NULL)
141 return 0;
142 tf[0][0] = 0;
143 for (i = 1; i < n; i++)
144 {
145 double t = (double)i / ((double)n - 1.);
146 tf[0][i] = (uint16_t)floor(65535. * pow(t, 2.2) + .5);
147 }
148
149 if (td->td_samplesperpixel - td->td_extrasamples > 1)
150 {
151 tf[1] = (uint16_t *)_TIFFmallocExt(tif, nbytes);
152 if (tf[1] == NULL)
153 goto bad;
154 _TIFFmemcpy(tf[1], tf[0], nbytes);
155 tf[2] = (uint16_t *)_TIFFmallocExt(tif, nbytes);
156 if (tf[2] == NULL)
157 goto bad;
158 _TIFFmemcpy(tf[2], tf[0], nbytes);
159 }
160 return 1;
161
162 bad:
163 if (tf[0])
164 _TIFFfreeExt(tif, tf[0]);
165 if (tf[1])
166 _TIFFfreeExt(tif, tf[1]);
167 if (tf[2])
168 _TIFFfreeExt(tif, tf[2]);
169 tf[0] = tf[1] = tf[2] = 0;
170 return 0;
171 }
172
TIFFDefaultRefBlackWhite(TIFF * tif,TIFFDirectory * td)173 static int TIFFDefaultRefBlackWhite(TIFF *tif, TIFFDirectory *td)
174 {
175 int i;
176
177 td->td_refblackwhite = (float *)_TIFFmallocExt(tif, 6 * sizeof(float));
178 if (td->td_refblackwhite == NULL)
179 return 0;
180 if (td->td_photometric == PHOTOMETRIC_YCBCR)
181 {
182 /*
183 * YCbCr (Class Y) images must have the ReferenceBlackWhite
184 * tag set. Fix the broken images, which lacks that tag.
185 */
186 td->td_refblackwhite[0] = 0.0F;
187 td->td_refblackwhite[1] = td->td_refblackwhite[3] =
188 td->td_refblackwhite[5] = 255.0F;
189 td->td_refblackwhite[2] = td->td_refblackwhite[4] = 128.0F;
190 }
191 else
192 {
193 /*
194 * Assume RGB (Class R)
195 */
196 for (i = 0; i < 3; i++)
197 {
198 td->td_refblackwhite[2 * i + 0] = 0;
199 td->td_refblackwhite[2 * i + 1] =
200 (float)((1L << td->td_bitspersample) - 1L);
201 }
202 }
203 return 1;
204 }
205
206 /*
207 * Like TIFFGetField, but return any default
208 * value if the tag is not present in the directory.
209 *
210 * NB: We use the value in the directory, rather than
211 * explicit values so that defaults exist only one
212 * place in the library -- in TIFFDefaultDirectory.
213 */
TIFFVGetFieldDefaulted(TIFF * tif,uint32_t tag,va_list ap)214 int TIFFVGetFieldDefaulted(TIFF *tif, uint32_t tag, va_list ap)
215 {
216 TIFFDirectory *td = &tif->tif_dir;
217
218 if (TIFFVGetField(tif, tag, ap))
219 return (1);
220 switch (tag)
221 {
222 case TIFFTAG_SUBFILETYPE:
223 *va_arg(ap, uint32_t *) = td->td_subfiletype;
224 return (1);
225 case TIFFTAG_BITSPERSAMPLE:
226 *va_arg(ap, uint16_t *) = td->td_bitspersample;
227 return (1);
228 case TIFFTAG_THRESHHOLDING:
229 *va_arg(ap, uint16_t *) = td->td_threshholding;
230 return (1);
231 case TIFFTAG_FILLORDER:
232 *va_arg(ap, uint16_t *) = td->td_fillorder;
233 return (1);
234 case TIFFTAG_ORIENTATION:
235 *va_arg(ap, uint16_t *) = td->td_orientation;
236 return (1);
237 case TIFFTAG_SAMPLESPERPIXEL:
238 *va_arg(ap, uint16_t *) = td->td_samplesperpixel;
239 return (1);
240 case TIFFTAG_ROWSPERSTRIP:
241 *va_arg(ap, uint32_t *) = td->td_rowsperstrip;
242 return (1);
243 case TIFFTAG_MINSAMPLEVALUE:
244 *va_arg(ap, uint16_t *) = td->td_minsamplevalue;
245 return (1);
246 case TIFFTAG_MAXSAMPLEVALUE:
247 {
248 uint16_t maxsamplevalue;
249 /* td_bitspersample=1 is always set in TIFFDefaultDirectory().
250 * Therefore, td_maxsamplevalue has to be re-calculated in
251 * TIFFGetFieldDefaulted(). */
252 if (td->td_bitspersample > 0)
253 {
254 /* This shift operation into a uint16_t limits the value to
255 * 65535 even if td_bitspersamle is > 16 */
256 if (td->td_bitspersample <= 16)
257 {
258 maxsamplevalue = (1 << td->td_bitspersample) -
259 1; /* 2**(BitsPerSample) - 1 */
260 }
261 else
262 {
263 maxsamplevalue = 65535;
264 }
265 }
266 else
267 {
268 maxsamplevalue = 0;
269 }
270 *va_arg(ap, uint16_t *) = maxsamplevalue;
271 return (1);
272 }
273 case TIFFTAG_PLANARCONFIG:
274 *va_arg(ap, uint16_t *) = td->td_planarconfig;
275 return (1);
276 case TIFFTAG_RESOLUTIONUNIT:
277 *va_arg(ap, uint16_t *) = td->td_resolutionunit;
278 return (1);
279 case TIFFTAG_PREDICTOR:
280 {
281 TIFFPredictorState *sp = (TIFFPredictorState *)tif->tif_data;
282 if (sp == NULL)
283 {
284 TIFFErrorExtR(
285 tif, tif->tif_name,
286 "Cannot get \"Predictor\" tag as plugin is not configured");
287 *va_arg(ap, uint16_t *) = 0;
288 return 0;
289 }
290 *va_arg(ap, uint16_t *) = (uint16_t)sp->predictor;
291 return 1;
292 }
293 case TIFFTAG_DOTRANGE:
294 *va_arg(ap, uint16_t *) = 0;
295 *va_arg(ap, uint16_t *) = (1 << td->td_bitspersample) - 1;
296 return (1);
297 case TIFFTAG_INKSET:
298 *va_arg(ap, uint16_t *) = INKSET_CMYK;
299 return 1;
300 case TIFFTAG_NUMBEROFINKS:
301 *va_arg(ap, uint16_t *) = 4;
302 return (1);
303 case TIFFTAG_EXTRASAMPLES:
304 *va_arg(ap, uint16_t *) = td->td_extrasamples;
305 *va_arg(ap, const uint16_t **) = td->td_sampleinfo;
306 return (1);
307 case TIFFTAG_MATTEING:
308 *va_arg(ap, uint16_t *) =
309 (td->td_extrasamples == 1 &&
310 td->td_sampleinfo[0] == EXTRASAMPLE_ASSOCALPHA);
311 return (1);
312 case TIFFTAG_TILEDEPTH:
313 *va_arg(ap, uint32_t *) = td->td_tiledepth;
314 return (1);
315 case TIFFTAG_DATATYPE:
316 *va_arg(ap, uint16_t *) = td->td_sampleformat - 1;
317 return (1);
318 case TIFFTAG_SAMPLEFORMAT:
319 *va_arg(ap, uint16_t *) = td->td_sampleformat;
320 return (1);
321 case TIFFTAG_IMAGEDEPTH:
322 *va_arg(ap, uint32_t *) = td->td_imagedepth;
323 return (1);
324 case TIFFTAG_YCBCRCOEFFICIENTS:
325 {
326 /* defaults are from CCIR Recommendation 601-1 */
327 static const float ycbcrcoeffs[] = {0.299f, 0.587f, 0.114f};
328 *va_arg(ap, const float **) = ycbcrcoeffs;
329 return 1;
330 }
331 case TIFFTAG_YCBCRSUBSAMPLING:
332 *va_arg(ap, uint16_t *) = td->td_ycbcrsubsampling[0];
333 *va_arg(ap, uint16_t *) = td->td_ycbcrsubsampling[1];
334 return (1);
335 case TIFFTAG_YCBCRPOSITIONING:
336 *va_arg(ap, uint16_t *) = td->td_ycbcrpositioning;
337 return (1);
338 case TIFFTAG_WHITEPOINT:
339 {
340 /* TIFF 6.0 specification tells that it is no default
341 value for the WhitePoint, but AdobePhotoshop TIFF
342 Technical Note tells that it should be CIE D50. */
343 static const float whitepoint[] = {
344 D50_X0 / (D50_X0 + D50_Y0 + D50_Z0),
345 D50_Y0 / (D50_X0 + D50_Y0 + D50_Z0)};
346 *va_arg(ap, const float **) = whitepoint;
347 return 1;
348 }
349 case TIFFTAG_TRANSFERFUNCTION:
350 if (!td->td_transferfunction[0] &&
351 !TIFFDefaultTransferFunction(tif, td))
352 {
353 TIFFErrorExtR(tif, tif->tif_name,
354 "No space for \"TransferFunction\" tag");
355 return (0);
356 }
357 *va_arg(ap, const uint16_t **) = td->td_transferfunction[0];
358 if (td->td_samplesperpixel - td->td_extrasamples > 1)
359 {
360 *va_arg(ap, const uint16_t **) = td->td_transferfunction[1];
361 *va_arg(ap, const uint16_t **) = td->td_transferfunction[2];
362 }
363 return (1);
364 case TIFFTAG_REFERENCEBLACKWHITE:
365 if (!td->td_refblackwhite && !TIFFDefaultRefBlackWhite(tif, td))
366 return (0);
367 *va_arg(ap, const float **) = td->td_refblackwhite;
368 return (1);
369 }
370 return 0;
371 }
372
373 /*
374 * Like TIFFGetField, but return any default
375 * value if the tag is not present in the directory.
376 */
TIFFGetFieldDefaulted(TIFF * tif,uint32_t tag,...)377 int TIFFGetFieldDefaulted(TIFF *tif, uint32_t tag, ...)
378 {
379 int ok;
380 va_list ap;
381
382 va_start(ap, tag);
383 ok = TIFFVGetFieldDefaulted(tif, tag, ap);
384 va_end(ap);
385 return (ok);
386 }
387
388 struct _Int64Parts
389 {
390 int32_t low, high;
391 };
392
393 typedef union
394 {
395 struct _Int64Parts part;
396 int64_t value;
397 } _Int64;
398
_TIFFUInt64ToFloat(uint64_t ui64)399 float _TIFFUInt64ToFloat(uint64_t ui64)
400 {
401 _Int64 i;
402
403 i.value = ui64;
404 if (i.part.high >= 0)
405 {
406 return (float)i.value;
407 }
408 else
409 {
410 long double df;
411 df = (long double)i.value;
412 df += 18446744073709551616.0; /* adding 2**64 */
413 return (float)df;
414 }
415 }
416
_TIFFUInt64ToDouble(uint64_t ui64)417 double _TIFFUInt64ToDouble(uint64_t ui64)
418 {
419 _Int64 i;
420
421 i.value = ui64;
422 if (i.part.high >= 0)
423 {
424 return (double)i.value;
425 }
426 else
427 {
428 long double df;
429 df = (long double)i.value;
430 df += 18446744073709551616.0; /* adding 2**64 */
431 return (double)df;
432 }
433 }
434
_TIFFClampDoubleToFloat(double val)435 float _TIFFClampDoubleToFloat(double val)
436 {
437 if (val > FLT_MAX)
438 return FLT_MAX;
439 if (val < -FLT_MAX)
440 return -FLT_MAX;
441 return (float)val;
442 }
443
_TIFFClampDoubleToUInt32(double val)444 uint32_t _TIFFClampDoubleToUInt32(double val)
445 {
446 if (val < 0)
447 return 0;
448 if (val > 0xFFFFFFFFU || val != val)
449 return 0xFFFFFFFFU;
450 return (uint32_t)val;
451 }
452
_TIFFSeekOK(TIFF * tif,toff_t off)453 int _TIFFSeekOK(TIFF *tif, toff_t off)
454 {
455 /* Huge offsets, especially -1 / UINT64_MAX, can cause issues */
456 /* See http://bugzilla.maptools.org/show_bug.cgi?id=2726 */
457 return off <= (~(uint64_t)0) / 2 && TIFFSeekFile(tif, off, SEEK_SET) == off;
458 }
459