Add XPM decoder

Author: mstoeckl

Cargo.toml

@@ -8,13 +8,15 @@ publish = false
 include = ["src", "tests/reference.rs"]
 
 [features]
-default = ["pcx", "xbm"]
+default = ["pcx", "xbm", "xpm"]
 pcx = ["dep:pcx"]
 xbm = []
+xpm = ["dep:image-x11r6colors"]
 
 [dependencies]
 image = { version = "0.25.8", default-features = false }
 pcx = { version = "0.2.4", optional = true }
+image-x11r6colors = { path = 'image-x11r6colors', version = "1.0.0", optional = true }
 
 [dev-dependencies]
 image = { version = "0.25.8", default-features = false, features = ["png"] }

README.md

@@ -7,6 +7,7 @@ Decoding support for additional image formats beyond those provided by the [`ima
 | --------- | -------------------- |
 | PCX | [Wikipedia](https://en.wikipedia.org/wiki/PCX#PCX_file_format) |
 | XBM | [Wikipedia](https://en.wikipedia.org/wiki/X_BitMap) |
+| XPM | [Wikipedia](https://en.wikipedia.org/wiki/X_PixMap) |
 
 ## New Formats
 

deny.toml

@@ -19,6 +19,7 @@ allow = [
     "BSD-2-Clause",
     "BSD-3-Clause",
     "MIT",
+    "X11",
     "MIT-0",
     "MPL-2.0",
     "Unicode-DFS-2016",

fuzz/Cargo.toml

@@ -14,7 +14,7 @@ image = { version = "0.25.8", default-features = false }
 
 [dependencies.image-extras]
 path = ".."
-features = ["xbm"]
+features = ["xbm", "xpm"]
 [dependencies.libfuzzer-sys]
 version = "0.4"
 
@@ -29,3 +29,7 @@ path = "fuzzers/fuzzer_script_pcx.rs"
 [[bin]]
 name = "fuzzer_script_xbm"
 path = "fuzzers/fuzzer_script_xbm.rs"
+
+[[bin]]
+name = "fuzzer_script_xpm"
+path = "fuzzers/fuzzer_script_xpm.rs"

fuzz/fuzzers/fuzzer_script_xpm.rs

@@ -0,0 +1,22 @@
+#![no_main]
+#[macro_use]
+extern crate libfuzzer_sys;
+
+use image::ImageDecoder;
+use std::io::Cursor;
+
+fuzz_target!(|data: &[u8]| {
+    let reader = Cursor::new(data);
+    let Ok(mut decoder) = image_extras::xpm::XpmDecoder::new(reader) else {
+        return;
+    };
+    let mut limits = image::Limits::default();
+    limits.max_alloc = Some(1024 * 1024); // 1 MiB
+    if limits.reserve(decoder.total_bytes()).is_err() {
+        return;
+    }
+    if decoder.set_limits(limits).is_err() {
+        return;
+    }
+    let _ = std::hint::black_box(image::DynamicImage::from_decoder(decoder));
+});

image-x11r6colors/Cargo.toml

@@ -0,0 +1,8 @@
+[package]
+name = "image-x11r6colors"
+version = "1.0.0"
+license = "(MIT OR Apache-2.0) AND X11"
+rust-version = "1.17.0"
+description = "Color database matching X11R6"
+readme = "README.md"
+publish = false

image-x11r6colors/LICENSE-X11

@@ -0,0 +1,23 @@
+Copyright (C) 1994 X Consortium
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
+X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
+AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNEC-
+TION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+Except as contained in this notice, the name of the X Consortium shall not
+be used in advertising or otherwise to promote the sale, use or other deal-
+ings in this Software without prior written authorization from the X Consor-
+tium.

image-x11r6colors/README.md

@@ -0,0 +1,12 @@
+## X11R6 Color names
+
+This mini-library contains the color names database (often referred to as 
+`rgb.txt`) from X11R6, as a sorted array with names case folded. It has been 
+separated out into a distinct crate because it is possible that databases of
+colors with names are copyrightable and therefore subject to the X11 license.
+Splitting out the list makes it easier for users of the `image-extras`, which
+uses this library if its `xpm` feature is enabled, to keep track of licensing
+information.
+
+Only the color database itself (from 1994) is X11 licensed; everything since
+then is offered under `MIT OR Apache-2.0`.