From cd797f81167b6b1b1229577d5764b0ca1fb0b039 Mon Sep 17 00:00:00 2001
From: Randy <randy408@protonmail.com>
Date: Mon, 11 Mar 2019 23:56:45 +0100
Subject: [PATCH 1/3] add fuzz target, dictionary, iphone png's

---
 tests/pngsuite/iphone/iphone_basi0g01.png | Bin 0 -> 384 bytes
 tests/pngsuite/iphone/iphone_basi0g02.png | Bin 0 -> 302 bytes
 tests/pngsuite/iphone/iphone_basi3p02.png | Bin 0 -> 303 bytes
 tests/pngsuite/iphone/iphone_bgwn6a08.png | Bin 0 -> 2573 bytes
 tests/pngsuite/iphone/iphone_bgyn6a16.png | Bin 0 -> 2267 bytes
 tests/pngsuite/iphone/iphone_tbyn3p08.png | Bin 0 -> 1558 bytes
 tests/pngsuite/iphone/iphone_z06n2c08.png | Bin 0 -> 2393 bytes
 tests/stb_png.dict                        |  30 ++++++++++++++++++++++
 tests/stb_png_read_fuzzer.cpp             |  19 ++++++++++++++
 tests/stb_png_read_fuzzer.options         |   2 ++
 10 files changed, 51 insertions(+)
 create mode 100644 tests/pngsuite/iphone/iphone_basi0g01.png
 create mode 100644 tests/pngsuite/iphone/iphone_basi0g02.png
 create mode 100644 tests/pngsuite/iphone/iphone_basi3p02.png
 create mode 100644 tests/pngsuite/iphone/iphone_bgwn6a08.png
 create mode 100644 tests/pngsuite/iphone/iphone_bgyn6a16.png
 create mode 100644 tests/pngsuite/iphone/iphone_tbyn3p08.png
 create mode 100644 tests/pngsuite/iphone/iphone_z06n2c08.png
 create mode 100644 tests/stb_png.dict
 create mode 100644 tests/stb_png_read_fuzzer.cpp
 create mode 100644 tests/stb_png_read_fuzzer.options

diff --git a/tests/pngsuite/iphone/iphone_basi0g01.png b/tests/pngsuite/iphone/iphone_basi0g01.png
new file mode 100644
index 0000000000000000000000000000000000000000..33db08c5b3e519239a589541910760cb3081189c
GIT binary patch
literal 384
zcmeAS@N?(olHy`uU|?}hck&EiP+-&9QJx0m^Ll!?1OaIU5awWGU|?ja^-2PASkfJR
z9T^xl_H+M9WCijWi-X*q7}lMWc?nXP>=ES4z)+>ez|hdb!0-zw)bN6Vq11qZ;Z*_y
zgVhWM2JwP9y8>;167M`+97B$VF!Hq+a6JA$|60bPnLHYcXXxInEM7AuO08Y0=zoXI
z`QUqVvp?>s5KlfLpy}D;f8>YL!?T`FV#17*x6cdf@{}$&b~3O$pyhMu-m@c)^Z&2}
zSS?B2V3$%MAezZI#aknLLek{3GnhJ7v@s<1X0*L(bY%45$xu#ZjN$!qcgve2lX`XK
zE1q6iZ+eV<%0wk!g@)_g*XnE5t}}4BD`Di2)XKA>OpU+zJEQS7!3M61vvcnHtDh5c
zcwO{pKWBhi%*&NUNhyb}p4z_k;kN1qzZlgE@A}_$?X3`Bu3fmB>1w{0_JLWe);P>w
cef{~iBj0TpdBQeq1p1u8)78&qol`;+0Lqq-JOBUy

literal 0
HcmV?d00001

diff --git a/tests/pngsuite/iphone/iphone_basi0g02.png b/tests/pngsuite/iphone/iphone_basi0g02.png
new file mode 100644
index 0000000000000000000000000000000000000000..484f46d248d08f3ed1f67e41dfc08af88e6cc83f
GIT binary patch
literal 302
zcmeAS@N?(olHy`uU|?}hck&EiP+-&9QJx0m^Ll!?1OaIU5awWGU|?ja^-2PASkfJR
z9T^xl_H+M9WCijWi-X*q7}lMWc?nXP>=ES4z)+>ez|hdb!0-zw)bN6Vq11qZ;Z*_y
zgVhWM2JwP9y8>;15_3FV97EoQFmfGG;Mn8;?WEmJtu&qEIUXg_CK5@{U#3bjERjgg
z+E%>jsD)C?gj4Eb;mdDK7gSAjEe?A7m{XwMiH&>BzYQ&{*K+^4HS3&M#Insu?48;?
zi#;v}AF6Wgt2S87{zvVTe`9^mZ@D+s24Ce~FvzYDzBlXT^U16NWq1CUFs|m#vWq|P
us%h4FaR+(lT@1e@F0o!XK0z;`^x*lu%<MuplU0H4WbkzLb6Mw<&;$V1yJsf=

literal 0
HcmV?d00001

diff --git a/tests/pngsuite/iphone/iphone_basi3p02.png b/tests/pngsuite/iphone/iphone_basi3p02.png
new file mode 100644
index 0000000000000000000000000000000000000000..1699e9af6c28e029dc68c1a525af44817681227f
GIT binary patch
literal 303
zcmeAS@N?(olHy`uU|?}hck&EiP+-!&y15?6=k@e(2?EjzAk4wWz`)2->y-rLu%tWs
zIx;Y9?C1WI$O_~$76-XIF|0c$^Ae;o*(1o8fuTx`fuW&=f#DZWsNn?zL#Y7+!>a@a
z2CEqi4B`cIb_Lo1CFXj%IEK6pzR7n$f#dQ2`dP6S?lZP;)+^+f>T_bBI-{fWyMJDl
z)b+V%ENmv7Fn6#tHi|fRxsr8?EKkMmtxh6mBXu9K)E_yRzI(x!^yfUsHO&nr^xtMY
z+InTL#C4uq=>~@d9!58;FMOHsa=~i8d;ffy&;AQt7-cih;eFH5ADkRD){j)={1Z03
s(2?_H_{Z~*MXjQ(fT`IvJvIYGeoSDJetfxE1n5u(Pgg&ebxsLQ05`{JsQ>@~

literal 0
HcmV?d00001

diff --git a/tests/pngsuite/iphone/iphone_bgwn6a08.png b/tests/pngsuite/iphone/iphone_bgwn6a08.png
new file mode 100644
index 0000000000000000000000000000000000000000..7d0ac50be96a9cd46906abf146d02288ebd44cd8
GIT binary patch
literal 2573
zcmaKu3sh8f9>>4`duQ$p^Md6K4lqri@{-9g5D^DtlJ_e407SYa`M^h`h)zcO&&5J=
zOALk7iX|UlfMc1GQvG*Vi_jEJ6NNo{*B)Y7QfX4bZhv<7?Cv?cXXl(d_uPB__kVx?
z@BjPzeD9W-c{7Z<U>yL}^u=kJGhq>;FTJ^uUmG(s()0P*GJ0qw{$IX+{cV0yEl$l%
z1rEQUAAUs5uSt3Sj5M^LHQyK=xiBL?7g#?QpjE(6{1zPmDr~@)GLX~&1UUB`pOp-F
zJeirEI@|HdxyN@^;Dc{(eXn1V{dE4-lodg5?6{J4x#*L#JEIP_zO>-O<4HN^@5!5S
zq_FwQ&c7^*dA8!(<4yCeWk(zP$o0(&%$ki=OXAJ(_na5c`>em#RU7^8!XM6D|K786
z`}LnkDyO9l-z|(uOEjkq91rg-$s8Klu9YHwrTft8UF(RCdafYHe@m4$Khm-H<C?Bg
z-`bB3TI(Njq#UYAOZ7X|G&U<Dx9;?==GpPH+IFS4E%Lr|JTpFc?D^%p9Irp-|Mk(r
zHA(*Gzpi-}9@JnbjY1C^&_D`s8w2Vd4bwG-Q6mkZA_K<JR7}8hJVUmkhinxBMVpBk
z<uE$KKvn!%ViO0{vRW1uC@Mv;8SEOH#EeX2dIjLaNDk2=Q6>8`GyNm{k!+GZ*hD&x
zBtM2y1Vc|#uoijz6>IP*lJSE$NE%dLu!*vXB~u4Z;}4jNR>2j_lBf?JASbb$xI&p8
zB@>~;{WN7kz*=5o64s3me}W7lha}czbd|T%b;6>u?D;6Fwm5IHB!{pE4>!LOwc}#j
z>cXi;CFiY!`^qM*I8k!>0?sDv-k;sJ^G4Q*6<5Drb7r2A>KZlF$SiagLg9n`I3qM@
z+$xJf8BZr+9QFuanr$klKYM_NAb=E0ZoLvkkC95Pl0*f%8!N}aXb+<V_wprGLckY@
z5wv1~+HI13>}I>SUB@QlI_WgY0W6fRBb6$}2MMHKat7FgSOVTv557ihWI)3;HOYb<
zb}!~l{jdyqLa(q*HK^lnu1BYb5=`%sV$EO>jYFln(V(QzTV&Xv%)@))kPrK_!~{m{
z8s*OV7V@62%1iLtlD>CIeAFp~V=wl8yma!5A9fXDGJdQqiS*TF9WI!ig>FRcs3~fj
zd#R{x|0g6q*w}Vud0E@s>}ALLiVl2yUqzU32FvjbI!5Id6AfHvK}n>!ScN#j<;Rv`
zBG!^lwIU(`l_n({>qx&ilMIUVVGK)(CpMCy54h_JNFo{de-Z_tSlXs`8rhRbk!HfF
zXCZi4?9hxZ6T_v5$2+)*Vmvrv9pHM&Iu=8JY^W>9%4o6C*YLd9+tvMcLEhPE_4WEp
zEGEnA>%Pk?Y$<LXe<^y-zMX3Kym@18#a~?XZp+b?M=t(wV8vVIufJAtD-eEEP5r1y
z^_2Uao7sYCGzh7ffhtsybeKgiwbR>f;F~G1AVi`M7q|<%;1ccr>=iPTukJS7f?IS7
zfkLAgs8NVJjC!(gx)g6>6K{nWp+NGI+=A@Kg6Vi_#5uV9?Pj(VnTQ*MAgW_3CNu`{
zI*hy$AF5|Igs?!asVCy72$RsDQZzQBEU|@r#xIDOxV09Q;(<pHE!hQ&I1|lWqWz89
zm;T+}yS85#SsJ<UbVlJ6Xt+hsZYnm%bVtm~oZz|R^KPf3{dx2(%X;cad;I&sS>>HA
zNBU#;y>qB-O>)RvUroZv)HT;4Hh72M<6UdDMmZcgHCw9cydonbF60-L?%mpzRapCC
zxi#*(BXvS`Q?YNv+u_}-3uk{;)7(90)<b1Y?H3)>msan;;2XOy;%e6XHFeJq9Q>OY
z&i$gMI=d(fvLurpu`$3NhG@D04{$h`AYu<B(g6brlxzY=j7~PNL?qCs5PBbm@tnXP
zm6*rieA0_VtM%H}n&#-SkM5yWCfPv8Pz_BO_qpk_eVvCaexb2hr&_kp*8KxY#kuVv
z?WgZ-ex~2m8JSRDw0hawvBzG$+4b^)<5_oqZ*KGe$0AWoLoai?58!>`f>Yz2f){yD
zFTxqZv7nWM?14;2=it|3fyODYu{4mz;+*IrEL)=4OYRc~L|J3k4^?0#N|1twU?L5o
zdlXLw-Z+7@0%MRzdIe|jzpQjt>`*B>x&ZTxm{fX$$f8Y4LvKHc95e_vy&Q_E4O%f#
zCmWdu4&WpSCwtUxqpV>L)RUV+hfZ06FrmZL2xTnolc@FRZ4wBZz(l68fWy^FZS+!A
zM(cs}vioB%e7m(P{7vg_!D(Vo;E>qMJ7Z_}t+{)<XUu8&DKq!rpIWo;^ch=L9gCcF
zI=1Cb?)<WieYHu`)_(rYZzfw}MtBRpPjaAzRwxj-rHw2T^RXQz#4Re`G=UV0gDLbY
zq=<uRdI)u-Uo$wBzDkC5$~tTmhWg-^Vp@r2nSHU*HNwrD1}mEID7=x+8*3uoz-oNQ
zd0&IS;|T{*hA(-3>_QQ)a`+$jB#XFPrlX(pc0Vyoc0Wf;Q|~J5#x<0v2BYX@l%`L3
zFZ#R9$I^c{^z`_hE35N=ET7e085woyL{rg;ab<UEniDp7{q~EvrYk??9=W=)dhPYN
z^Edu_@6>;Ss%P^CPlQp>$#`xwlt`=Cs~Qc0ZKJBGx$LE*%M7J25MT5QP7S+^Z%Buy
zG6mCucpk)I3IhIDq<qQ?KZ#_G#Y2gqEBL4hLWf|{%bsisU-L=~`LbB7Gf*A9Y(FMA
z;UqnzgSd!!wEIPiR?$)~zL{FOkV}>)RFi5k1Bs$VEswDW^TLAgIJ$)1`?-8RG?b_5
ze+Mpyh(C`Q;XeYmfD_J5lpvfFs>MVjFYd8#!I45ZwsD(pvYYTy1SjuFjyF+}6r!k|
zV5z)0hWQqpfy=<BOs4n3pHv~4SPb$hWboA2ak@&JZ3a#^jXjQk0nEh+50slQLqZ}k
pj84kGC1e#f$-XR*uHqv63>RFEyAOvHt?vc@WjgZG+tcJtzW|+~NbCRr

literal 0
HcmV?d00001

diff --git a/tests/pngsuite/iphone/iphone_bgyn6a16.png b/tests/pngsuite/iphone/iphone_bgyn6a16.png
new file mode 100644
index 0000000000000000000000000000000000000000..9046336a89ee08db49c7204c0279f74d239b86b9
GIT binary patch
literal 2267
zcmV<12qgE3P)<h;3K|Lk000C-XF^F(03ZS@)w6#9000e1NJLTq001BW001Be1^@s6
zb9#F800004XF*Lt006O%3;baP00001b5ch_0Itp)=>Px#AY({UO#lFTCIA3{ga82g
z0001h=l}q9FaQARU;qF*m;eA5aGbhPJOBU)Nl8RORLz&qN^)%%hnJfF+Ud@=WoouD
zD=kg4L@KOc7ZOGPtf+`0u%e(zISC?YAk?IpG-%eqNsT=P51~`&5T5CG`6(X{`#XU5
zRjy_a&*gou^;_!}`B!{;dwZo<1#bsWhn@~fhi-6paCLBYaCERkR|i`MYX?h*&i8*G
z6@h3pDp4JVAp%1Xf*=e+00zJh8uWn=RPcfadO!g;xWEYx=mHy9!2*2MzXiMq=m=!9
zS;=N#3X(7ZaTtRbL_voLgdqq4=m!mapn?Y!aDx-<U;_*AS4YEZ78ph#gMeWeVk|=e
z<{=NWFb!##ganMi2<R{bK?r~bKJbD9F0g|Y#IR%}YaKQVco2vnFonP}0;N((N?WiF
zMKE9q79bBZkcK3TLkx5XLjW{TK>;V&KuXqSF>F(uMTE=nm<5IqNFq=`U<-kAxh&;V
zID$Rcf;CuyC76dCq+tR^L5C3dL4|IxgOqJsQnD8~i=<?`hRgyz2!s%rKwut$bp%ck
zs8lLaxrIwOgG1Pbby$G{<RJqIh(Z|r-~k6n#eOPf=em?!^I|wBB<l!Kl09aDAOdj&
z@(2_WI6~kSfoioX)knC88#sp}*oGo3LJm?8gAn+@1yXg~N~QZq%1V(7$&2BRQ<g!q
zfP%mv0%Hiwwu%seJp?WhctoI9t4Zw@p5P9y-~_f|73N?HMqmIGkecgJs-8=!sC!%p
zmF1nKEXO448l*85vp@iW7y{D>EFrLkz!?Jf2)rUtuh*si4lnQk*KiCQP=FLfzzb4W
zUZv){m#Y7a3)zygwj?Frv>2Wk%^5HYbR#g(3L*s32rMA5hQJ{LHwZi-@Qy&E(U8U`
zyukxpzz!534jM?q`!4l?C#i*Qq#8byN@z{WfdzUaEe5fbRR$z#@BUlBjes8k9f3&%
z@(8RTu#3Ps0(S_!An=Jmv)Pp97ren8?86*{L7Lj9G$JojAGwoS>|CnRU8(3RQV!>7
z&`A<Pmu!!pd~}-yGz20DBoLTEU<rYB1db56Lf`>`Hw3;A`1$#fpKo}E1DFK)34cj5
z{w9sogVd+4q?S68YGPd~qf0dCjFf^2Vk$yTYGwf!0(}UC5g0=tjlettD+p{OaDu=!
z0uKnhA@GgB@9(ete!wQk@8q}q%)Lpo@W6#!OMUJ{YPoHxW>%y!F)!s<T1rD>V)Tb4
z>+NGoxXc1R1cC^RAdo~Lhd=>=A_Ch893yanz#Rh52z(&$=g%MEyZIr%2hZ}ee<#hI
z3u$Z|OMP`)YKujw<_l6u=cGKIBr8V<>mbv@XBKcGpdt`JKu2I4fiwbn1QrokMPLJg
z9R&6fI6z<%f&UuFpN~!XeLj$%yM1Y1>`3EyL+abBQY$V>wUC!eE-mHcxRge8CPsjf
zr7|m>W&tk({Rj*p5JO-BfeZpU1m+MZAW%SH4uMGoxPwiO;iGNx`#mW?Z*$UoC`jYF
zAoY_uQX(hSm5fy8CkX7Al*Wd{2=`02&ubQNAmBkjLm-HNj=(4a2?SCIOd*g$AdWy7
z0jhA4LO9?qo;i;1w$aa5nBIufped<eO-b!2CDrwWRF+1iJflk~5fme$F}OW!3=XqE
z4+1^}0tkc=&=H6t5JO-Dfd~Q`0`y^+R+yt2_bG@w?&OVQ`D&XrKQ(E*M5KN<BDM3F
zRCl9H4PDClu#_eP3~!%g{XJ#@I|2#<Dgqh;0R%z_gb@fKFo1v;0g^}~4C3@-ftJ{z
zDlaIE2kz#L<N0hGHr~Bbe;Sb5O-QPTVX3Tzq`VMdfNNqzRml!0679DCEzpI48vzdj
zJ_Ixb{0R6F@FAceKo)z6!w89#A`}Yr<p!;BOm$vUAP?Np3&-@{Hm$!ZQoHv_^~^7o
zEk6TXlhU+LjF^WV%FW`|WfpKDpdjEyKt(`Bz=MDb0j80{Ko}sCM~KBKl4*``SfxL=
zX^|7E^ol~c<F1}KuGhA4?a?LGOOI6cR4E&(lxDr`QHo>-U1k9r0!{?n2q*|B2y`Rh
zK!ADdVkG*QN+AYAjBHL3k2w-*k&r0Tr`xp35!HH5!Q60X_Z-_}+q`<~kjhcFl#2?x
zlp;pl%_iw&eYKed90)iOa3SDCz>WYLiG!uU!(8?=8pBMdC<7uvMrVl0JV{j`ELP~(
zby{YZsy(D|&bYfvj_<bp3o55}DX%-FH185)!YSF1!z^G$pbG&z0(Jy!2(XjcS&O>a
zOjMQwKl3@nh}4-<qYR1(vN}y%=18o0LSu=(U7>Z>sNO9KXpcKQ;uufczofinlTyJh
zM$#_Xp)Qtqt69K?fDHjF0&Jx=7DFeynZkOcvY}`!2?6GGm{F-Stzry}aWXqeY^F)B
z8Nwq^|1Qu%OH^^Ikc!;pI>))y{zau_s~A%@mU^36z=D7k0Sf}`<yKZ>JKL#?1yNx~
z^Rg!S*i<x@g#hz9$jBUGYUvD)5wd%X_)L&slY~f`KAxtPW~t^p1vSr|7C6@B_AfIs
z7Re4<dCFMK0u}^#nOJxn*x1kQtjJEbR5y#F!mj3FT_VD>K9&ZJx!up`3^2Wd43IDx
z9wA0`lB^XbG5UFomWor=6BJgGyPe{AGwolP)h%WL9*4r)%);}?$_vHDBcY2u-NCBt
zWLtHyFuK{<6xOC5HWv@egO~ZOGD3Y!u|5WgMwa`D(*Y7KK&TAT*Fjn<M0F2QU=i+k
zm}A!4zm$Lbe*$W+g(p%AD-VShHrC}9T`Y|)?Cfq1wwD%8W_Sx1ldOfCJa5rWtSSUc
piyqpmg@+<*;pM1XsO|soZ-IaA^B>!tK=J?p002ovPDHLkV1i7(uGjzo

literal 0
HcmV?d00001

diff --git a/tests/pngsuite/iphone/iphone_tbyn3p08.png b/tests/pngsuite/iphone/iphone_tbyn3p08.png
new file mode 100644
index 0000000000000000000000000000000000000000..3c224d092e41a36a81ae79b27f6b3a92bc4d283c
GIT binary patch
literal 1558
zcmV+x2I={UP)<h;3K|Lk000C-XF^F(03ZS@)w6#9000e1NJLTq001BW001Be1^@s6
zb9#F800004XF*Lt006O%3;baP00001b5ch_0Itp)=>Px#AY({UO#lFTCIA3{ga82g
z0001h=l}q9FaQARU;qF*m;eA5aGbhPJOBU%gh@m}RP9%7NR?+8e)=F$q$Ded_9G#p
z0)^l}Q4~`SCDl@M9XXMpVjp;@B=aM`mE*_pOizBF@~c{rF&5>B*4S`k%}tQ?!#2ji
z7{nG>>E^Z&DXu-&{l4!(aGo{i+MhjebKdj%`d-(4-Pe6T&r$0CHOKYn(IX5F4q{?r
z0<R79@#Dw%@b+z#mX_kkkt1+AGO>PrHR9rWQBu;6k&!3!PiAav4E_E6@OV5pcI+5Z
zQ**F$X8~5O^lGpM9c~@v=BFQ<HoYrk9z6ISFJ8Qu8zIVi@7_JMwzlH*>C<qzP6;Tp
zRjOG>xA|F)Wy=Z>9eoNRAxVKCnI%h_aP(*)E?&Hd`}gl-a&j^_89u<8Ubt`pd3kxr
z$;pvy3CfolpjUPD=@>HOuH2&<e2!!cHT<FuOLX$&NqHCF+0oG<iBZ)V1cru&P*zqZ
z59a3PO4w|zCI~_AXn;PsmyqDY+O@azy@zHzG2`JhV&$To^)4&2va%$}83cY989`N5
z6>4j1;dZ-GR8$0qqg+4<M$p{c0_5lC2g2p55CevV4P)ujQ3+nt2mIgZ&t_+5<M83b
zIB?*AcxncL(a})>uBfO$Rc#d-8XClSRORg1vvUqAnvs!#g9i^HF)<PQ_U!|^=}$dS
zT3L#9?dzbfC~WWA4sWX$&CSj5`FsIY{wfL!3nd6nxl>Y70>JU{@o+kwvzxK5t`6!0
z1vQ}KSA{*F?m<&ilXOFSdplZMT2NC{gW}@ipux_e+{GI<pndUT6h%b9v2i2fckM!D
zW##My2p0N&DAXsKz;6nXKSrXlu~C3Y;QaaX;$(h$y<RB~hZ3Wtq(o{>xzm!9@sS1{
zR0@qcj+;Rey}iA&6ChCdrEo)qp9~Utm-D0yEQkHF9r4%W;k)KTcXu~BJ3GZIBtW?j
z9XbT3mi(LWaQv(Rdvv5OT!=SALXe@aoom)$_}k&x36NcsKMLwS4gQruz$ycQ)yMkY
zb%mIg7<6@Yp{J)u1`TU2;JUuoVq%~XBzuByTD=-?L`K3976!+bEy1TF=R9AoE^DA0
zrV78PK=wk)udvm>RkEiFByr}<83A|g-;dulD6>DYXc1z!Z4=|gu39DX(;Ksba}5j(
zz*c30x}|~Yb$o4@ac|pR=?e9wL10Jo4)Fq2APG*p>DgbQ+)+_@D>haP*kgL(k|rIL
z05_1hf;fXfxsJPr0uhZ71_5?QyFq}{%p$=}inSjL4Gm<Uwt2I3K)3#0q$5q2fC&aA
zz+of=D1VJI4EdeDzNU=%@VUNjGYI(oej&k9q^GB&z;2i9@0w<#>;!h1!F$i2KMziT
z2HAalw-}8;(fQF(pXuu_bTldBy2&Vs)s`ed15$q0->t#kj*b@dW$N#z7A!yqNoaor
z1-DjKc9u*+2FV0e@apI{yg>riaB6F7lWBKj`Erq;{m$BN)+IQxVg>q41$=s}zY>A^
z`g)@aZYtQ0+F<vX?$@=KHhf3H-e{NEKoT6&4u?Yq59MdpoOtvA&Dg~O^eXkY*3{IL
z3>tPrdS<#Dy<|GxFiokINcJYngd_=WSlno+K$mGY%Yc1m?b+V11U`N76vOr+0htY)
zj(2o;bVeSBWKI&?JxPG=<~9{@n{CGu@I8MU+*(hcK1FqPHBwKcN=bx-$54Q!A_-1G
z5}@(eewiAWW0xBd&lqzCw-!4iFrsf7?MVf=8Ic61V6xtPIQ8g!&V9Dz__Js8dqU<W
z!V%2Y<hg+-Cz4>9c*;pgND$|9N2HJD72I0m<KwdV@NmM?kOZe-Qc{u}I{3GjFJJ!q
zKU8?8<N1*!I0dP|oSgno77cdp+&SqIo~U0dxV1Rj`5W;+0iUn+2Pc@AW&i*H07*qo
IM6N<$f)%&h&Hw-a

literal 0
HcmV?d00001

diff --git a/tests/pngsuite/iphone/iphone_z06n2c08.png b/tests/pngsuite/iphone/iphone_z06n2c08.png
new file mode 100644
index 0000000000000000000000000000000000000000..de5dba3437ae249650e1b73808578097f6108e09
GIT binary patch
literal 2393
zcmbW(`B#%y8o=@Qee(iINFWP@MV7Fy(y&fOgJgrmvNQ#TP1**qNRdJmM8vVY35!5v
z2mx)R=me#}P_z(0QM-giK#CZqK*6dIiWDftXz_?ME`>8^&Mf_*%K6-TpYy%v{sFg4
z5W&M^EwKOqz?^;T-2#BB@7aAgb))gS`P|5jN!{FN{f#p_KYwjw!24L?EC6V)G<=q%
zx6xpBB##YT9JN~7e3`<J3<rRGX8=Ho0N@`RSI8m&9HIfhvJe1vC;-4rRCo1l1^}Q3
zcXL_M*547Q9#hQ+9-8&};WifyzqzzIbStB#KCNhn)xDWxU;UI=@bXOdrTnvB2LT1^
zQ{UL+c1X{x2zP!zHB1TUD8o<2r<^oB6`x$Cw{SY;ltts|WI1Nw)(lU*buQGeY-gRe
z>?GlH<j)1j@h#%97^Fu;!7XDEc}w<}?qS^{EmJg4j77vPuqX}Xyo+6yYd%J<e1ufL
zwr|;W`j5s1O_E(sBW}W5wzJgNBqAIyX5hx_>y7oY`BNOVb&xvZwXE9Z8eG}ae3$va
zGBvjCTG97<&t9N1;MV{q|04UO@V4h#sxSb5&8<7UHw#MoCl~|0s!4Ra{?G*Hf>C}K
z?KAN^{&!ktW6RpG{f`ae(65NpPqO<M=*nBX-s4Hh^%hA>-ZSa7Cz^>np8>w$tH>@<
zkms%H7l6Q{is_zFN@jqrBSc|3=UJ61X1oN*;O~nPD}3f_l#S>>J;jZ_2%}7uu9~Ir
zn`@9cmoYFkO9tjJ4$=n;5tf=NB+$^m$rD&_?EH|xfmMn2g;sQ;z8+&K4L7IZbL@=E
zeBkAEa0hq>iD0@Y$r{WeoCEz|<`*uSs?3_t)*qED5ic2ZuWGMx7Afu98ZK5{V=s}q
z3_D+-{2)uP0tsO{D2W<$8vMU$ea?R<ranQOY0>C3MbRc8SvK{5>`$$#Wo24^>Nf5?
zR?Ex^Vmc{F0!%X;4Y`9SkvIQ44>8A$;<rU#&~&NCaeK&#6*_-vbY+}%WY^GyGP)wc
zG~wjppM>MKN`e6G3Y$P!uoz)8?f#SROI%T^oaVnPLyO(?F754>&xUec!S=j{Ihi!r
zO}{Ix^PEQ7?+Qgd1%1HNNEp+ZN|s@U;Jwhl^A_QVWCZ1Yc=3+#VDU{ouYK!vgoE4>
z(Cz5_ia-^7Q-AyZwN{#{zeaE28OjkNfn^AnX-_4}(0uq`*~x6M@Cg@uz-%(Aw#;Y|
z{Y~9;LPkn1=eto|D&<z`s<azQmx?NrMn`WKvD0&)3gI&ysU!lX6y`$q;ASS;%|RCX
zn(3@Tki0V^L)6|oC?WVJhw;7b2N6<WdQRHdIbI>rzp<IdD|5oOJ~TkXFa&{Ogvq2*
z2?R76F2dWl%96xb-yDUo7r|S5`K=3xY!=SK&2gUaHk*mJ*-l>*dP{mt{1%jLaG5_k
zLu;Ue^B@Lz7I+JBQIlsex}8Nc)aTgyW@$lv>zGMn`i%A%M`t=_=J?mDW9)~-2?M_e
zV_){^DAj*Zd^s>@8uLc`5%JxZz+V6!;-DtZqD3$rx&vx+`IlK&OmA<eWtJQw*KN~X
zbm%TwbeDS!d7bYrTDGq>TpUfIAHNYlGAcY^`B~IdUH>X<^aK?Ld4i{aP{c`16265#
z%DinooT<qzZZ~W_qg{cs3?x67Ub34m&oC^%*&I+mU7Cq1d8}yd%h*oY-<D8u(|sjo
zt_^B>4&uNPfP>hn2|_P)HoF!zyrM}h^!8|tpB=$vIm5n$aGno-I@%;k5FX--xy!|o
zX%>~!bkBigfBjF!rYd@q93vb=r)`;JB}N0ML2LN>H~7ccOQ?hgwEV&ekGgkfAD>XV
za06vIyh(g;Z1g*toRIG@9A4NC;iQc;H?He?BR==SfwbbN(8Pq<$soj@NmQZ*#zj}{
zCiFgyNIRr%wvPEwlwKTbD5)h*6gB9pmR(!wTgn@;SBK5rlOl;7*tnX(7OQ~w+dT?7
zAJo06jU-(r<&7ItF*10_jJ-?ts6=ko$w-<9Jr2{a^n7E=@+v(TA}6b?Tvg|XOPoEf
zdYb#B$T1x!;`XZD0|S=YLZuwby2u~o*vmC}4Qh`9fQ776`wiV}Tn})hh9Pxra|n6o
z7gL1(a#xC@w}TWDjEf!{<8sVQIVNHDDHM#fG%i@}%*fS>(9$ULMD`C9Y^5x(Sncu=
zu==CKLp6V@rQ0=qHNE5~`Tc>pZoj<IpT+01=htfK%+yg)aZ2=k$8YIjIrn}nj9u>E
z^WnmEl`iAGBVS}Pw7E7u1~b1@e}4OV)AI$?6J1cj(~g3dUq7{d0q&|ECvW_9fZf3n
J+>30X<X2R_rDOmA

literal 0
HcmV?d00001

diff --git a/tests/stb_png.dict b/tests/stb_png.dict
new file mode 100644
index 0000000..3f5e673
--- /dev/null
+++ b/tests/stb_png.dict
@@ -0,0 +1,30 @@
+header_png="\x89PNG\x0d\x0a\x1a\x0a"
+
+section_idat="IDAT"
+section_iend="IEND"
+section_ihdr="IHDR"
+section_plte="PLTE"
+section_trns="tRNS"
+section_chrm="cHRM"
+section_gama="gAMA"
+section_iccp="iCCP"
+section_sbit="sBIT"
+section_srgb="sRGB"
+section_text="tEXt"
+section_ztxt="zTXt"
+section_itxt="iTXt"
+section_bkgd="bKGD"
+section_hist="hIST"
+section_phys="pHYs"
+section_splt="sPLT"
+section_time="tIME"
+section_offs="oFFs"
+section_exif="eXIf"
+section_frac="fRAc"
+section_pcal="pCAL"
+section_scal="sCAL"
+section_ster="sTER"
+section_gifg="gIFg"
+section_gift="gIFt"
+section_gifx="gIFx"
+section_cgbi="CgBI"
diff --git a/tests/stb_png_read_fuzzer.cpp b/tests/stb_png_read_fuzzer.cpp
new file mode 100644
index 0000000..613eeb8
--- /dev/null
+++ b/tests/stb_png_read_fuzzer.cpp
@@ -0,0 +1,19 @@
+#define STB_IMAGE_IMPLEMENTATION
+#define STBI_ONLY_PNG
+#include "../stb_image.h"
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
+{
+    int x, y, channels;
+
+    if(stbi_info_from_memory(data, size, &x, &y, &channels)) return 0;
+
+    /* exit if the image is larger than ~80MB */
+    if(y && x > (80000000 / 4) / y) return 0;
+
+    unsigned char *img = stbi_load_from_memory(data, size, &x, &y, &channels, 4);
+
+    free(img);
+
+    return 0;
+}
diff --git a/tests/stb_png_read_fuzzer.options b/tests/stb_png_read_fuzzer.options
new file mode 100644
index 0000000..e0c8a84
--- /dev/null
+++ b/tests/stb_png_read_fuzzer.options
@@ -0,0 +1,2 @@
+[libfuzzer]
+dict = stb_png.dict

From af516b99ffdd3b01c7a77b1673a871aa7503d761 Mon Sep 17 00:00:00 2001
From: Randy <randy408@protonmail.com>
Date: Tue, 12 Mar 2019 00:14:16 +0100
Subject: [PATCH 2/3] fuzz: remove some chunk identifiers from stb_png.dict

these chunks are not parsed
---
 tests/stb_png.dict | 22 ----------------------
 1 file changed, 22 deletions(-)

diff --git a/tests/stb_png.dict b/tests/stb_png.dict
index 3f5e673..2a27994 100644
--- a/tests/stb_png.dict
+++ b/tests/stb_png.dict
@@ -5,26 +5,4 @@ section_iend="IEND"
 section_ihdr="IHDR"
 section_plte="PLTE"
 section_trns="tRNS"
-section_chrm="cHRM"
-section_gama="gAMA"
-section_iccp="iCCP"
-section_sbit="sBIT"
-section_srgb="sRGB"
-section_text="tEXt"
-section_ztxt="zTXt"
-section_itxt="iTXt"
-section_bkgd="bKGD"
-section_hist="hIST"
-section_phys="pHYs"
-section_splt="sPLT"
-section_time="tIME"
-section_offs="oFFs"
-section_exif="eXIf"
-section_frac="fRAc"
-section_pcal="pCAL"
-section_scal="sCAL"
-section_ster="sTER"
-section_gifg="gIFg"
-section_gift="gIFt"
-section_gifx="gIFx"
 section_cgbi="CgBI"

From 06374082843275af71e1ccc4ca28e13fe3e51ed7 Mon Sep 17 00:00:00 2001
From: Randy <randy408@protonmail.com>
Date: Tue, 12 Mar 2019 00:59:20 +0100
Subject: [PATCH 3/3] fuzz: fix error handling

---
 tests/stb_png_read_fuzzer.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/stb_png_read_fuzzer.cpp b/tests/stb_png_read_fuzzer.cpp
index 613eeb8..0e14e1b 100644
--- a/tests/stb_png_read_fuzzer.cpp
+++ b/tests/stb_png_read_fuzzer.cpp
@@ -6,7 +6,7 @@ extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size)
 {
     int x, y, channels;
 
-    if(stbi_info_from_memory(data, size, &x, &y, &channels)) return 0;
+    if(!stbi_info_from_memory(data, size, &x, &y, &channels)) return 0;
 
     /* exit if the image is larger than ~80MB */
     if(y && x > (80000000 / 4) / y) return 0;