IMG_xcf.c
author Sam Lantinga <slouken@libsdl.org>
Fri, 06 Oct 2017 15:40:19 -0700
changeset 513 318484db0705
parent 499 d3e819a08733
child 528 7f9e88f4b45e
permissions -rw-r--r--
Fixed security vulnerability in XCF image loader (thanks Yves!)
slouken@26
     1
/*
slouken@280
     2
  SDL_image:  An example image loading library for use with SDL
slouken@496
     3
  Copyright (C) 1997-2017 Sam Lantinga <slouken@libsdl.org>
slouken@26
     4
slouken@280
     5
  This software is provided 'as-is', without any express or implied
slouken@280
     6
  warranty.  In no event will the authors be held liable for any damages
slouken@280
     7
  arising from the use of this software.
slouken@26
     8
slouken@280
     9
  Permission is granted to anyone to use this software for any purpose,
slouken@280
    10
  including commercial applications, and to alter it and redistribute it
slouken@280
    11
  freely, subject to the following restrictions:
slouken@26
    12
slouken@280
    13
  1. The origin of this software must not be misrepresented; you must not
slouken@280
    14
     claim that you wrote the original software. If you use this software
slouken@280
    15
     in a product, an acknowledgment in the product documentation would be
slouken@280
    16
     appreciated but is not required.
slouken@280
    17
  2. Altered source versions must be plainly marked as such, and must not be
slouken@280
    18
     misrepresented as being the original software.
slouken@280
    19
  3. This notice may not be removed or altered from any source distribution.
slouken@53
    20
*/
slouken@26
    21
slouken@26
    22
/* This is a XCF image file loading framework */
slouken@26
    23
slouken@26
    24
#include <stdio.h>
slouken@26
    25
#include <ctype.h>
slouken@26
    26
#include <string.h>
slouken@80
    27
#include <stdlib.h>
slouken@26
    28
slouken@80
    29
#include "SDL_endian.h"
slouken@26
    30
#include "SDL_image.h"
slouken@26
    31
slouken@26
    32
#ifdef LOAD_XCF
slouken@26
    33
slouken@80
    34
#if DEBUG
slouken@26
    35
static char prop_names [][30] = {
slouken@26
    36
  "end",
slouken@26
    37
  "colormap",
slouken@26
    38
  "active_layer",
slouken@26
    39
  "active_channel",
slouken@26
    40
  "selection",
slouken@26
    41
  "floating_selection",
slouken@26
    42
  "opacity",
slouken@26
    43
  "mode",
slouken@26
    44
  "visible",
slouken@26
    45
  "linked",
slouken@26
    46
  "preserve_transparency",
slouken@26
    47
  "apply_mask",
slouken@26
    48
  "edit_mask",
slouken@26
    49
  "show_mask",
slouken@26
    50
  "show_masked",
slouken@26
    51
  "offsets",
slouken@26
    52
  "color",
slouken@26
    53
  "compression",
slouken@26
    54
  "guides",
slouken@26
    55
  "resolution",
slouken@26
    56
  "tattoo",
slouken@26
    57
  "parasites",
slouken@26
    58
  "unit",
slouken@26
    59
  "paths",
slouken@26
    60
  "user_unit"
slouken@26
    61
};
slouken@80
    62
#endif
slouken@80
    63
slouken@26
    64
slouken@26
    65
typedef enum
slouken@26
    66
{
slouken@26
    67
  PROP_END = 0,
slouken@26
    68
  PROP_COLORMAP = 1,
slouken@26
    69
  PROP_ACTIVE_LAYER = 2,
slouken@26
    70
  PROP_ACTIVE_CHANNEL = 3,
slouken@26
    71
  PROP_SELECTION = 4,
slouken@26
    72
  PROP_FLOATING_SELECTION = 5,
slouken@26
    73
  PROP_OPACITY = 6,
slouken@26
    74
  PROP_MODE = 7,
slouken@26
    75
  PROP_VISIBLE = 8,
slouken@26
    76
  PROP_LINKED = 9,
slouken@26
    77
  PROP_PRESERVE_TRANSPARENCY = 10,
slouken@26
    78
  PROP_APPLY_MASK = 11,
slouken@26
    79
  PROP_EDIT_MASK = 12,
slouken@26
    80
  PROP_SHOW_MASK = 13,
slouken@26
    81
  PROP_SHOW_MASKED = 14,
slouken@26
    82
  PROP_OFFSETS = 15,
slouken@26
    83
  PROP_COLOR = 16,
slouken@26
    84
  PROP_COMPRESSION = 17,
slouken@26
    85
  PROP_GUIDES = 18,
slouken@26
    86
  PROP_RESOLUTION = 19,
slouken@26
    87
  PROP_TATTOO = 20,
slouken@26
    88
  PROP_PARASITES = 21,
slouken@26
    89
  PROP_UNIT = 22,
slouken@26
    90
  PROP_PATHS = 23,
slouken@26
    91
  PROP_USER_UNIT = 24
slouken@26
    92
} xcf_prop_type;
slouken@26
    93
slouken@26
    94
typedef enum {
slouken@26
    95
  COMPR_NONE    = 0,
slouken@26
    96
  COMPR_RLE     = 1,
slouken@26
    97
  COMPR_ZLIB    = 2,
slouken@26
    98
  COMPR_FRACTAL = 3
slouken@26
    99
} xcf_compr_type;
slouken@26
   100
slouken@26
   101
typedef enum {
slouken@26
   102
  IMAGE_RGB       = 0,
slouken@26
   103
  IMAGE_GREYSCALE = 1,
slouken@26
   104
  IMAGE_INDEXED   = 2
slouken@26
   105
} xcf_image_type;
slouken@26
   106
slouken@26
   107
typedef struct {
slouken@26
   108
  Uint32 id;
slouken@26
   109
  Uint32 length;
slouken@26
   110
  union {
slouken@26
   111
    struct {
slouken@26
   112
      Uint32 num;
slouken@26
   113
      char * cmap;
slouken@26
   114
    } colormap; // 1
slouken@26
   115
    struct {
slouken@26
   116
      Uint32 drawable_offset;
slouken@26
   117
    } floating_selection; // 5
slouken@26
   118
    Sint32 opacity;
slouken@26
   119
    Sint32 mode;
slouken@26
   120
    int    visible;
slouken@26
   121
    int    linked;
slouken@26
   122
    int    preserve_transparency;
slouken@26
   123
    int    apply_mask;
slouken@26
   124
    int    show_mask;
slouken@26
   125
    struct {
slouken@26
   126
      Sint32 x;
slouken@26
   127
      Sint32 y;
slouken@26
   128
    } offset;
slouken@26
   129
    unsigned char color [3];
slouken@26
   130
    Uint8 compression;
slouken@26
   131
    struct {
slouken@26
   132
      Sint32 x;
slouken@26
   133
      Sint32 y;
slouken@26
   134
    } resolution;
slouken@26
   135
    struct {
slouken@26
   136
      char * name;
slouken@26
   137
      Uint32 flags;
slouken@26
   138
      Uint32 size;
slouken@26
   139
      char * data;
slouken@26
   140
    } parasite;
slouken@26
   141
  } data;
slouken@26
   142
} xcf_prop;
slouken@26
   143
slouken@26
   144
typedef struct {
slouken@26
   145
  char   sign [14];
slouken@26
   146
  Uint32 width;
slouken@26
   147
  Uint32 height;
slouken@26
   148
  Sint32 image_type;
slouken@26
   149
  xcf_prop * properties;
slouken@26
   150
slouken@26
   151
  Uint32 * layer_file_offsets;
slouken@26
   152
  Uint32 * channel_file_offsets;
slouken@26
   153
slouken@26
   154
  xcf_compr_type compr;
slouken@26
   155
  Uint32         cm_num;
slouken@26
   156
  unsigned char * cm_map;
slouken@26
   157
} xcf_header;
slouken@26
   158
slouken@26
   159
typedef struct {
slouken@26
   160
  Uint32 width;
slouken@26
   161
  Uint32 height;
slouken@26
   162
  Sint32 layer_type;
slouken@26
   163
  char * name;
slouken@26
   164
  xcf_prop * properties;
slouken@26
   165
slouken@26
   166
  Uint32 hierarchy_file_offset;
slouken@26
   167
  Uint32 layer_mask_offset;
slouken@26
   168
slouken@26
   169
  Uint32 offset_x;
slouken@26
   170
  Uint32 offset_y;
slouken@70
   171
  int visible;
slouken@26
   172
} xcf_layer;
slouken@26
   173
slouken@26
   174
typedef struct {
slouken@26
   175
  Uint32 width;
slouken@26
   176
  Uint32 height;
slouken@26
   177
  char * name;
slouken@26
   178
  xcf_prop * properties;
slouken@26
   179
slouken@26
   180
  Uint32 hierarchy_file_offset;
slouken@26
   181
slouken@26
   182
  Uint32 color;
slouken@26
   183
  Uint32 opacity;
slouken@70
   184
  int selection;
slouken@70
   185
  int visible;
slouken@26
   186
} xcf_channel;
slouken@26
   187
slouken@26
   188
typedef struct {
slouken@26
   189
  Uint32 width;
slouken@26
   190
  Uint32 height;
slouken@26
   191
  Uint32 bpp;
slouken@26
   192
slouken@26
   193
  Uint32 * level_file_offsets;
slouken@26
   194
} xcf_hierarchy;
slouken@26
   195
slouken@26
   196
typedef struct {
slouken@26
   197
  Uint32 width;
slouken@26
   198
  Uint32 height;
slouken@26
   199
slouken@26
   200
  Uint32 * tile_file_offsets;
slouken@26
   201
} xcf_level;
slouken@26
   202
slouken@26
   203
typedef unsigned char * xcf_tile;
slouken@26
   204
slouken@26
   205
typedef unsigned char * (* load_tile_type) (SDL_RWops *, Uint32, int, int, int);
slouken@26
   206
slouken@26
   207
slouken@26
   208
/* See if an image is contained in a data source */
slouken@117
   209
int IMG_isXCF(SDL_RWops *src)
slouken@117
   210
{
slouken@368
   211
    Sint64 start;
slouken@368
   212
    int is_XCF;
slouken@368
   213
    char magic[14];
slouken@26
   214
slouken@368
   215
    if ( !src )
slouken@368
   216
        return 0;
slouken@368
   217
    start = SDL_RWtell(src);
slouken@368
   218
    is_XCF = 0;
slouken@368
   219
    if ( SDL_RWread(src, magic, sizeof(magic), 1) ) {
slouken@368
   220
        if (SDL_strncmp(magic, "gimp xcf ", 9) == 0) {
slouken@368
   221
            is_XCF = 1;
slouken@368
   222
        }
slouken@368
   223
    }
slouken@368
   224
    SDL_RWseek(src, start, RW_SEEK_SET);
slouken@368
   225
    return(is_XCF);
slouken@26
   226
}
slouken@26
   227
slouken@26
   228
static char * read_string (SDL_RWops * src) {
slouken@26
   229
  Uint32 tmp;
slouken@26
   230
  char * data;
slouken@26
   231
slouken@26
   232
  tmp = SDL_ReadBE32 (src);
slouken@26
   233
  if (tmp > 0) {
slouken@367
   234
    data = (char *) SDL_malloc (sizeof (char) * tmp);
slouken@26
   235
    SDL_RWread (src, data, tmp, 1);
slouken@26
   236
  }
slouken@26
   237
  else {
slouken@26
   238
    data = NULL;
slouken@26
   239
  }
slouken@26
   240
slouken@26
   241
  return data;
slouken@26
   242
}
slouken@26
   243
slouken@26
   244
slouken@26
   245
static Uint32 Swap32 (Uint32 v) {
slouken@26
   246
  return
slouken@26
   247
    ((v & 0x000000FF) << 16)
slouken@26
   248
    |  ((v & 0x0000FF00))
slouken@26
   249
    |  ((v & 0x00FF0000) >> 16)
slouken@26
   250
    |  ((v & 0xFF000000));
slouken@26
   251
}
slouken@26
   252
slouken@204
   253
static void xcf_read_property (SDL_RWops * src, xcf_prop * prop) {
slouken@513
   254
  Uint32 len;
slouken@26
   255
  prop->id = SDL_ReadBE32 (src);
slouken@26
   256
  prop->length = SDL_ReadBE32 (src);
slouken@26
   257
slouken@80
   258
#if DEBUG
slouken@26
   259
  printf ("%.8X: %s: %d\n", SDL_RWtell (src), prop->id < 25 ? prop_names [prop->id] : "unknown", prop->length);
slouken@70
   260
#endif
slouken@26
   261
slouken@26
   262
  switch (prop->id) {
slouken@26
   263
  case PROP_COLORMAP:
slouken@26
   264
    prop->data.colormap.num = SDL_ReadBE32 (src);
slouken@367
   265
    prop->data.colormap.cmap = (char *) SDL_malloc (sizeof (char) * prop->data.colormap.num * 3);
slouken@26
   266
    SDL_RWread (src, prop->data.colormap.cmap, prop->data.colormap.num*3, 1);
slouken@26
   267
    break;
slouken@26
   268
slouken@26
   269
  case PROP_OFFSETS:
slouken@26
   270
    prop->data.offset.x = SDL_ReadBE32 (src);
slouken@26
   271
    prop->data.offset.y = SDL_ReadBE32 (src);
slouken@26
   272
    break;
slouken@26
   273
  case PROP_OPACITY:
slouken@26
   274
    prop->data.opacity = SDL_ReadBE32 (src);
slouken@26
   275
    break;
slouken@26
   276
  case PROP_COMPRESSION:
slouken@26
   277
  case PROP_COLOR:
slouken@513
   278
    if (prop->length > sizeof(prop->data)) {
slouken@513
   279
        len = sizeof(prop->data);
slouken@513
   280
    } else {
slouken@513
   281
        len = prop->length;
slouken@513
   282
    }
slouken@513
   283
    SDL_RWread(src, &prop->data, len, 1);
slouken@26
   284
    break;
slouken@70
   285
  case PROP_VISIBLE:
slouken@70
   286
    prop->data.visible = SDL_ReadBE32 (src);
slouken@70
   287
    break;
slouken@26
   288
  default:
slouken@26
   289
    //    SDL_RWread (src, &prop->data, prop->length, 1);
slouken@236
   290
    SDL_RWseek (src, prop->length, RW_SEEK_CUR);
slouken@26
   291
  }
slouken@26
   292
}
slouken@26
   293
slouken@204
   294
static void free_xcf_header (xcf_header * h) {
slouken@26
   295
  if (h->cm_num)
slouken@367
   296
    SDL_free (h->cm_map);
slouken@415
   297
  if (h->layer_file_offsets)
slouken@419
   298
    SDL_free (h->layer_file_offsets);
slouken@367
   299
  SDL_free (h);
slouken@26
   300
}
slouken@26
   301
slouken@204
   302
static xcf_header * read_xcf_header (SDL_RWops * src) {
slouken@26
   303
  xcf_header * h;
slouken@26
   304
  xcf_prop prop;
slouken@26
   305
slouken@367
   306
  h = (xcf_header *) SDL_malloc (sizeof (xcf_header));
slouken@499
   307
  if (!h) {
slouken@499
   308
    return NULL;
slouken@499
   309
  }
slouken@26
   310
  SDL_RWread (src, h->sign, 14, 1);
slouken@26
   311
  h->width       = SDL_ReadBE32 (src);
slouken@26
   312
  h->height      = SDL_ReadBE32 (src);
slouken@26
   313
  h->image_type  = SDL_ReadBE32 (src);
slouken@26
   314
slouken@26
   315
  h->properties = NULL;
slouken@415
   316
  h->layer_file_offsets = NULL;
slouken@26
   317
  h->compr      = COMPR_NONE;
slouken@26
   318
  h->cm_num = 0;
slouken@26
   319
  h->cm_map = NULL;
slouken@26
   320
slouken@26
   321
  // Just read, don't save
slouken@26
   322
  do {
slouken@26
   323
    xcf_read_property (src, &prop);
slouken@26
   324
    if (prop.id == PROP_COMPRESSION)
aschiffler@343
   325
      h->compr = (xcf_compr_type)prop.data.compression;
slouken@26
   326
    else if (prop.id == PROP_COLORMAP) {
slouken@80
   327
      // unused var: int i;
slouken@499
   328
      Uint32 cm_num;
slouken@499
   329
      unsigned char *cm_map;
slouken@26
   330
slouken@499
   331
      cm_num = prop.data.colormap.num;
slouken@499
   332
      cm_map = (unsigned char *) SDL_realloc(h->cm_map, sizeof (unsigned char) * 3 * cm_num);
slouken@499
   333
      if (cm_map) {
slouken@499
   334
        h->cm_num = cm_num;
slouken@499
   335
        h->cm_map = cm_map;
slouken@499
   336
        SDL_memcpy (h->cm_map, prop.data.colormap.cmap, 3*sizeof (char)*h->cm_num);
slouken@499
   337
      }
slouken@367
   338
      SDL_free (prop.data.colormap.cmap);
slouken@499
   339
slouken@499
   340
      if (!cm_map) {
slouken@499
   341
        free_xcf_header(h);
slouken@499
   342
        return NULL;
slouken@499
   343
      }
slouken@26
   344
    }
slouken@26
   345
  } while (prop.id != PROP_END);
slouken@26
   346
slouken@26
   347
  return h;
slouken@26
   348
}
slouken@26
   349
slouken@204
   350
static void free_xcf_layer (xcf_layer * l) {
slouken@367
   351
  SDL_free (l->name);
slouken@367
   352
  SDL_free (l);
slouken@26
   353
}
slouken@26
   354
slouken@204
   355
static xcf_layer * read_xcf_layer (SDL_RWops * src) {
slouken@26
   356
  xcf_layer * l;
slouken@26
   357
  xcf_prop    prop;
slouken@26
   358
slouken@367
   359
  l = (xcf_layer *) SDL_malloc (sizeof (xcf_layer));
slouken@26
   360
  l->width  = SDL_ReadBE32 (src);
slouken@26
   361
  l->height = SDL_ReadBE32 (src);
slouken@26
   362
  l->layer_type = SDL_ReadBE32 (src);
slouken@26
   363
slouken@26
   364
  l->name = read_string (src);
slouken@26
   365
slouken@26
   366
  do {
slouken@26
   367
    xcf_read_property (src, &prop);
slouken@26
   368
    if (prop.id == PROP_OFFSETS) {
slouken@26
   369
      l->offset_x = prop.data.offset.x;
slouken@26
   370
      l->offset_y = prop.data.offset.y;
slouken@70
   371
    } else if (prop.id == PROP_VISIBLE) {
slouken@70
   372
      l->visible = prop.data.visible ? 1 : 0;
slouken@26
   373
    }
slouken@26
   374
  } while (prop.id != PROP_END);
slouken@26
   375
slouken@26
   376
  l->hierarchy_file_offset = SDL_ReadBE32 (src);
slouken@26
   377
  l->layer_mask_offset     = SDL_ReadBE32 (src);
slouken@26
   378
slouken@26
   379
  return l;
slouken@26
   380
}
slouken@26
   381
slouken@204
   382
static void free_xcf_channel (xcf_channel * c) {
slouken@367
   383
  SDL_free (c->name);
slouken@367
   384
  SDL_free (c);
slouken@26
   385
}
slouken@26
   386
slouken@204
   387
static xcf_channel * read_xcf_channel (SDL_RWops * src) {
slouken@26
   388
  xcf_channel * l;
slouken@26
   389
  xcf_prop    prop;
slouken@26
   390
aschiffler@343
   391
  l = (xcf_channel *) SDL_malloc (sizeof (xcf_channel));
slouken@26
   392
  l->width  = SDL_ReadBE32 (src);
slouken@26
   393
  l->height = SDL_ReadBE32 (src);
slouken@26
   394
slouken@26
   395
  l->name = read_string (src);
slouken@26
   396
slouken@26
   397
  l->selection = 0;
slouken@26
   398
  do {
slouken@26
   399
    xcf_read_property (src, &prop);
slouken@26
   400
    switch (prop.id) {
slouken@26
   401
    case PROP_OPACITY:
slouken@26
   402
      l->opacity = prop.data.opacity << 24;
slouken@26
   403
      break;
slouken@26
   404
    case PROP_COLOR:
slouken@26
   405
      l->color = ((Uint32) prop.data.color[0] << 16)
slouken@368
   406
    | ((Uint32) prop.data.color[1] << 8)
slouken@368
   407
    | ((Uint32) prop.data.color[2]);
slouken@26
   408
      break;
slouken@26
   409
    case PROP_SELECTION:
slouken@26
   410
      l->selection = 1;
slouken@26
   411
      break;
slouken@70
   412
    case PROP_VISIBLE:
slouken@70
   413
      l->visible = prop.data.visible ? 1 : 0;
slouken@70
   414
      break;
slouken@26
   415
    default:
slouken@80
   416
        ;
slouken@26
   417
    }
slouken@26
   418
  } while (prop.id != PROP_END);
slouken@26
   419
slouken@26
   420
  l->hierarchy_file_offset = SDL_ReadBE32 (src);
slouken@26
   421
slouken@26
   422
  return l;
slouken@26
   423
}
slouken@26
   424
slouken@204
   425
static void free_xcf_hierarchy (xcf_hierarchy * h) {
slouken@367
   426
  SDL_free (h->level_file_offsets);
slouken@367
   427
  SDL_free (h);
slouken@26
   428
}
slouken@26
   429
slouken@204
   430
static xcf_hierarchy * read_xcf_hierarchy (SDL_RWops * src) {
slouken@26
   431
  xcf_hierarchy * h;
slouken@26
   432
  int i;
slouken@26
   433
slouken@367
   434
  h = (xcf_hierarchy *) SDL_malloc (sizeof (xcf_hierarchy));
slouken@26
   435
  h->width  = SDL_ReadBE32 (src);
slouken@26
   436
  h->height = SDL_ReadBE32 (src);
slouken@26
   437
  h->bpp    = SDL_ReadBE32 (src);
slouken@26
   438
slouken@26
   439
  h->level_file_offsets = NULL;
slouken@26
   440
  i = 0;
slouken@26
   441
  do {
slouken@415
   442
    h->level_file_offsets = (Uint32 *) SDL_realloc (h->level_file_offsets, sizeof (Uint32) * (i+1));
slouken@26
   443
    h->level_file_offsets [i] = SDL_ReadBE32 (src);
slouken@26
   444
  } while (h->level_file_offsets [i++]);
slouken@26
   445
slouken@26
   446
  return h;
slouken@26
   447
}
slouken@26
   448
slouken@204
   449
static void free_xcf_level (xcf_level * l) {
slouken@367
   450
  SDL_free (l->tile_file_offsets);
slouken@367
   451
  SDL_free (l);
slouken@26
   452
}
slouken@26
   453
slouken@204
   454
static xcf_level * read_xcf_level (SDL_RWops * src) {
slouken@26
   455
  xcf_level * l;
slouken@26
   456
  int i;
slouken@26
   457
aschiffler@343
   458
  l = (xcf_level *) SDL_malloc (sizeof (xcf_level));
slouken@26
   459
  l->width  = SDL_ReadBE32 (src);
slouken@26
   460
  l->height = SDL_ReadBE32 (src);
slouken@26
   461
slouken@26
   462
  l->tile_file_offsets = NULL;
slouken@26
   463
  i = 0;
slouken@26
   464
  do {
aschiffler@343
   465
    l->tile_file_offsets = (Uint32 *) SDL_realloc (l->tile_file_offsets, sizeof (Uint32) * (i+1));
slouken@26
   466
    l->tile_file_offsets [i] = SDL_ReadBE32 (src);
slouken@26
   467
  } while (l->tile_file_offsets [i++]);
slouken@26
   468
slouken@26
   469
  return l;
slouken@26
   470
}
slouken@26
   471
slouken@204
   472
static void free_xcf_tile (unsigned char * t) {
slouken@367
   473
  SDL_free (t);
slouken@26
   474
}
slouken@26
   475
slouken@204
   476
static unsigned char * load_xcf_tile_none (SDL_RWops * src, Uint32 len, int bpp, int x, int y) {
slouken@26
   477
  unsigned char * load;
slouken@26
   478
aschiffler@343
   479
  load = (unsigned char *) SDL_malloc (len); // expect this is okay
slouken@26
   480
  SDL_RWread (src, load, len, 1);
slouken@26
   481
slouken@26
   482
  return load;
slouken@26
   483
}
slouken@26
   484
slouken@204
   485
static unsigned char * load_xcf_tile_rle (SDL_RWops * src, Uint32 len, int bpp, int x, int y) {
slouken@26
   486
  unsigned char * load, * t, * data, * d;
slouken@26
   487
  Uint32 reallen;
slouken@26
   488
  int i, size, count, j, length;
slouken@26
   489
  unsigned char val;
slouken@26
   490
aschiffler@343
   491
  t = load = (unsigned char *) SDL_malloc (len);
slouken@26
   492
  reallen = SDL_RWread (src, t, 1, len);
slouken@26
   493
slouken@367
   494
  data = (unsigned char *) SDL_malloc (x*y*bpp);
slouken@26
   495
  for (i = 0; i < bpp; i++) {
slouken@26
   496
    d    = data + i;
slouken@26
   497
    size = x*y;
slouken@26
   498
    count = 0;
slouken@368
   499
slouken@26
   500
    while (size > 0) {
slouken@26
   501
      val = *t++;
slouken@26
   502
slouken@26
   503
      length = val;
slouken@26
   504
      if (length >= 128) {
slouken@368
   505
    length = 255 - (length - 1);
slouken@368
   506
    if (length == 128) {
slouken@368
   507
      length = (*t << 8) + t[1];
slouken@368
   508
      t += 2;
slouken@368
   509
    }
slouken@26
   510
slouken@368
   511
    count += length;
slouken@368
   512
    size -= length;
slouken@26
   513
slouken@368
   514
    while (length-- > 0) {
slouken@368
   515
      *d = *t++;
slouken@368
   516
      d += bpp;
slouken@368
   517
    }
slouken@26
   518
      }
slouken@26
   519
      else {
slouken@368
   520
    length += 1;
slouken@368
   521
    if (length == 128) {
slouken@368
   522
      length = (*t << 8) + t[1];
slouken@368
   523
      t += 2;
slouken@368
   524
    }
slouken@26
   525
slouken@368
   526
    count += length;
slouken@368
   527
    size -= length;
slouken@26
   528
slouken@368
   529
    val = *t++;
slouken@26
   530
slouken@368
   531
    for (j = 0; j < length; j++) {
slouken@368
   532
      *d = val;
slouken@368
   533
      d += bpp;
slouken@368
   534
    }
slouken@26
   535
      }
slouken@26
   536
    }
slouken@26
   537
  }
slouken@26
   538
aschiffler@343
   539
  SDL_free (load);
slouken@26
   540
  return (data);
slouken@26
   541
}
slouken@26
   542
slouken@26
   543
static Uint32 rgb2grey (Uint32 a) {
slouken@26
   544
  Uint8 l;
slouken@365
   545
  l = (Uint8)(0.2990 * ((a & 0x00FF0000) >> 16)
slouken@365
   546
    + 0.5870 * ((a & 0x0000FF00) >>  8)
slouken@365
   547
    + 0.1140 * ((a & 0x000000FF)));
slouken@26
   548
slouken@26
   549
  return (l << 16) | (l << 8) | l;
slouken@26
   550
}
slouken@26
   551
slouken@204
   552
static void create_channel_surface (SDL_Surface * surf, xcf_image_type itype, Uint32 color, Uint32 opacity) {
slouken@80
   553
  Uint32 c = 0;
slouken@26
   554
slouken@26
   555
  switch (itype) {
slouken@26
   556
  case IMAGE_RGB:
slouken@26
   557
  case IMAGE_INDEXED:
slouken@26
   558
    c = opacity | color;
slouken@26
   559
    break;
slouken@26
   560
  case IMAGE_GREYSCALE:
slouken@26
   561
    c = opacity | rgb2grey (color);
slouken@26
   562
    break;
slouken@26
   563
  }
slouken@26
   564
  SDL_FillRect (surf, NULL, c);
slouken@26
   565
}
slouken@26
   566
slouken@499
   567
static int 
slouken@499
   568
do_layer_surface(SDL_Surface * surface, SDL_RWops * src, xcf_header * head, xcf_layer * layer, load_tile_type load_tile)
slouken@499
   569
{
slouken@499
   570
    xcf_hierarchy  *hierarchy;
slouken@499
   571
    xcf_level      *level;
slouken@499
   572
    unsigned char  *tile;
slouken@499
   573
    Uint8          *p8;
slouken@499
   574
    Uint16         *p16;
slouken@499
   575
    Uint32         *p;
slouken@499
   576
    int            i, j;
slouken@499
   577
    Uint32         x, y, tx, ty, ox, oy;
slouken@499
   578
    Uint32         *row;
slouken@26
   579
slouken@499
   580
    SDL_RWseek(src, layer->hierarchy_file_offset, RW_SEEK_SET);
slouken@499
   581
    hierarchy = read_xcf_hierarchy(src);
slouken@26
   582
slouken@499
   583
    level = NULL;
slouken@499
   584
    for (i = 0; hierarchy->level_file_offsets[i]; i++) {
slouken@499
   585
        SDL_RWseek(src, hierarchy->level_file_offsets[i], RW_SEEK_SET);
slouken@499
   586
        level = read_xcf_level(src);
slouken@26
   587
slouken@499
   588
        ty = tx = 0;
slouken@499
   589
        for (j = 0; level->tile_file_offsets[j]; j++) {
slouken@499
   590
            SDL_RWseek(src, level->tile_file_offsets[j], RW_SEEK_SET);
slouken@499
   591
            ox = tx + 64 > level->width ? level->width % 64 : 64;
slouken@499
   592
            oy = ty + 64 > level->height ? level->height % 64 : 64;
slouken@26
   593
slouken@499
   594
            if (level->tile_file_offsets[j + 1]) {
slouken@499
   595
                tile = load_tile(src, level->tile_file_offsets[j + 1] - level->tile_file_offsets[j], hierarchy->bpp, ox, oy);
slouken@499
   596
            } else {
slouken@499
   597
                tile = load_tile(src, ox * oy * 6, hierarchy->bpp, ox, oy);
slouken@499
   598
            }
slouken@26
   599
slouken@499
   600
            p8 = tile;
slouken@499
   601
            p16 = (Uint16 *) p8;
slouken@499
   602
            p = (Uint32 *) p8;
slouken@499
   603
            for (y = ty; y < ty + oy; y++) {
slouken@499
   604
                row = (Uint32 *) ((Uint8 *) surface->pixels + y * surface->pitch + tx * 4);
slouken@499
   605
                switch (hierarchy->bpp) {
slouken@499
   606
                case 4:
slouken@499
   607
                    for (x = tx; x < tx + ox; x++)
slouken@499
   608
                        *row++ = Swap32(*p++);
slouken@499
   609
                    break;
slouken@499
   610
                case 3:
slouken@499
   611
                    for (x = tx; x < tx + ox; x++) {
slouken@499
   612
                        *row = 0xFF000000;
slouken@499
   613
                        *row |= ((Uint32)*p8++ << 16);
slouken@499
   614
                        *row |= ((Uint32)*p8++ << 8);
slouken@499
   615
                        *row |= ((Uint32)*p8++ << 0);
slouken@499
   616
                        row++;
slouken@499
   617
                    }
slouken@499
   618
                    break;
slouken@499
   619
                case 2:
slouken@499
   620
                    /* Indexed / Greyscale + Alpha */
slouken@499
   621
                    switch (head->image_type) {
slouken@499
   622
                    case IMAGE_INDEXED:
slouken@499
   623
                        for (x = tx; x < tx + ox; x++) {
slouken@499
   624
                            *row = ((Uint32)(head->cm_map[*p8 * 3]) << 16);
slouken@499
   625
                            *row |= ((Uint32)(head->cm_map[*p8 * 3 + 1]) << 8);
slouken@499
   626
                            *row |= ((Uint32)(head->cm_map[*p8++ * 3 + 2]) << 0);
slouken@499
   627
                            *row |= ((Uint32)*p8++ << 24);
slouken@499
   628
                            row++;
slouken@499
   629
                        }
slouken@499
   630
                        break;
slouken@499
   631
                    case IMAGE_GREYSCALE:
slouken@499
   632
                        for (x = tx; x < tx + ox; x++) {
slouken@499
   633
                            *row = ((Uint32)*p8 << 16);
slouken@499
   634
                            *row |= ((Uint32)*p8 << 8);
slouken@499
   635
                            *row |= ((Uint32)*p8++ << 0);
slouken@499
   636
                            *row |= ((Uint32)*p8++ << 24);
slouken@499
   637
                            row++;
slouken@499
   638
                        }
slouken@499
   639
                        break;
slouken@499
   640
                    default:
slouken@499
   641
                        fprintf(stderr, "Unknown Gimp image type (%d)\n", head->image_type);
slouken@499
   642
                        if (hierarchy) {
slouken@499
   643
                            if (hierarchy->level_file_offsets)
slouken@499
   644
                                SDL_free(hierarchy->level_file_offsets);
slouken@499
   645
slouken@499
   646
                            free_xcf_hierarchy(hierarchy);
slouken@499
   647
                        }
slouken@499
   648
                        if (level)
slouken@499
   649
                            free_xcf_level(level);
slouken@499
   650
                        return 1;
slouken@499
   651
                    }
slouken@499
   652
                    break;
slouken@499
   653
                case 1:
slouken@499
   654
                    /* Indexed / Greyscale */
slouken@499
   655
					switch (head->image_type) {
slouken@499
   656
                    case IMAGE_INDEXED:
slouken@499
   657
                        for (x = tx; x < tx + ox; x++) {
slouken@499
   658
                            *row++ = 0xFF000000
slouken@499
   659
                                | ((Uint32)(head->cm_map[*p8 * 3]) << 16)
slouken@499
   660
                                | ((Uint32)(head->cm_map[*p8 * 3 + 1]) << 8)
slouken@499
   661
                                | ((Uint32)(head->cm_map[*p8 * 3 + 2]) << 0);
slouken@499
   662
                            p8++;
slouken@499
   663
                        }
slouken@499
   664
                        break;
slouken@499
   665
                    case IMAGE_GREYSCALE:
slouken@499
   666
                        for (x = tx; x < tx + ox; x++) {
slouken@499
   667
                            *row++ = 0xFF000000
slouken@499
   668
                                | (((Uint32)(*p8)) << 16)
slouken@499
   669
                                | (((Uint32)(*p8)) << 8)
slouken@499
   670
                                | (((Uint32)(*p8)) << 0);
slouken@499
   671
                            ++p8;
slouken@499
   672
                        }
slouken@499
   673
                        break;
slouken@499
   674
                    default:
slouken@499
   675
                        fprintf(stderr, "Unknown Gimp image type (%d)\n", head->image_type);
slouken@499
   676
                        if (tile)
slouken@499
   677
                            free_xcf_tile(tile);
slouken@499
   678
                        if (level)
slouken@499
   679
                            free_xcf_level(level);
slouken@499
   680
                        if (hierarchy)
slouken@499
   681
                            free_xcf_hierarchy(hierarchy);
slouken@499
   682
                        return 1;
slouken@499
   683
                    }
slouken@499
   684
                    break;
slouken@499
   685
                }
slouken@499
   686
            }
slouken@499
   687
            free_xcf_tile(tile);
slouken@499
   688
slouken@499
   689
            tx += 64;
slouken@499
   690
            if (tx >= level->width) {
slouken@499
   691
                tx = 0;
slouken@499
   692
                ty += 64;
slouken@499
   693
            }
slouken@499
   694
            if (ty >= level->height) {
slouken@499
   695
                break;
slouken@499
   696
            }
slouken@368
   697
        }
slouken@499
   698
        free_xcf_level(level);
slouken@368
   699
    }
slouken@26
   700
slouken@499
   701
    free_xcf_hierarchy(hierarchy);
slouken@26
   702
slouken@499
   703
    return 0;
slouken@26
   704
}
slouken@26
   705
slouken@118
   706
SDL_Surface *IMG_LoadXCF_RW(SDL_RWops *src)
slouken@118
   707
{
aschiffler@343
   708
  Sint64 start;
slouken@118
   709
  const char *error = NULL;
slouken@26
   710
  SDL_Surface *surface, *lays;
slouken@26
   711
  xcf_header * head;
slouken@26
   712
  xcf_layer  * layer;
slouken@26
   713
  xcf_channel ** channel;
slouken@118
   714
  int chnls, i, offsets;
aschiffler@343
   715
  Sint64 offset, fp;
slouken@26
   716
slouken@26
   717
  unsigned char * (* load_tile) (SDL_RWops *, Uint32, int, int, int);
slouken@26
   718
slouken@499
   719
  if (!src) {
slouken@98
   720
    /* The error message has been set in SDL_RWFromFile */
slouken@98
   721
    return NULL;
slouken@98
   722
  }
slouken@118
   723
  start = SDL_RWtell(src);
slouken@98
   724
slouken@26
   725
  /* Initialize the data we will clean up when we're done */
slouken@26
   726
  surface = NULL;
slouken@26
   727
slouken@499
   728
  head = read_xcf_header(src);
slouken@499
   729
  if (!head) {
slouken@499
   730
    return NULL;
slouken@499
   731
  }
slouken@26
   732
slouken@26
   733
  switch (head->compr) {
slouken@26
   734
  case COMPR_NONE:
slouken@26
   735
    load_tile = load_xcf_tile_none;
slouken@26
   736
    break;
slouken@26
   737
  case COMPR_RLE:
slouken@26
   738
    load_tile = load_xcf_tile_rle;
slouken@26
   739
    break;
slouken@26
   740
  default:
slouken@26
   741
    fprintf (stderr, "Unsupported Compression.\n");
slouken@26
   742
    free_xcf_header (head);
slouken@26
   743
    return NULL;
slouken@26
   744
  }
slouken@26
   745
slouken@26
   746
  /* Create the surface of the appropriate type */
slouken@320
   747
  surface = SDL_CreateRGBSurface(SDL_SWSURFACE, head->width, head->height, 32,
slouken@368
   748
                 0x00FF0000,0x0000FF00,0x000000FF,0xFF000000);
slouken@26
   749
slouken@26
   750
  if ( surface == NULL ) {
slouken@118
   751
    error = "Out of memory";
slouken@26
   752
    goto done;
slouken@26
   753
  }
slouken@26
   754
slouken@26
   755
  offsets = 0;
slouken@26
   756
slouken@82
   757
  while ((offset = SDL_ReadBE32 (src))) {
slouken@415
   758
    head->layer_file_offsets = (Uint32 *) SDL_realloc (head->layer_file_offsets, sizeof (Uint32) * (offsets+1));
aschiffler@343
   759
    head->layer_file_offsets [offsets] = (Uint32)offset;
slouken@26
   760
    offsets++;
slouken@26
   761
  }
slouken@26
   762
  fp = SDL_RWtell (src);
slouken@368
   763
slouken@320
   764
  lays = SDL_CreateRGBSurface(SDL_SWSURFACE, head->width, head->height, 32,
slouken@368
   765
              0x00FF0000,0x0000FF00,0x000000FF,0xFF000000);
slouken@26
   766
slouken@26
   767
  if ( lays == NULL ) {
slouken@118
   768
    error = "Out of memory";
slouken@26
   769
    goto done;
slouken@26
   770
  }
slouken@26
   771
slouken@26
   772
  // Blit layers backwards, because Gimp saves them highest first
slouken@26
   773
  for (i = offsets; i > 0; i--) {
slouken@26
   774
    SDL_Rect rs, rd;
slouken@236
   775
    SDL_RWseek (src, head->layer_file_offsets [i-1], RW_SEEK_SET);
slouken@26
   776
slouken@26
   777
    layer = read_xcf_layer (src);
slouken@26
   778
    do_layer_surface (lays, src, head, layer, load_tile);
slouken@26
   779
    rs.x = 0;
slouken@26
   780
    rs.y = 0;
slouken@26
   781
    rs.w = layer->width;
slouken@26
   782
    rs.h = layer->height;
slouken@26
   783
    rd.x = layer->offset_x;
slouken@26
   784
    rd.y = layer->offset_y;
slouken@26
   785
    rd.w = layer->width;
slouken@26
   786
    rd.h = layer->height;
slouken@70
   787
slouken@70
   788
    if (layer->visible)
slouken@70
   789
      SDL_BlitSurface (lays, &rs, surface, &rd);
slouken@26
   790
    free_xcf_layer (layer);
slouken@26
   791
  }
slouken@26
   792
slouken@26
   793
  SDL_FreeSurface (lays);
slouken@26
   794
slouken@236
   795
  SDL_RWseek (src, fp, RW_SEEK_SET);
slouken@26
   796
slouken@26
   797
  // read channels
slouken@26
   798
  channel = NULL;
slouken@26
   799
  chnls   = 0;
slouken@82
   800
  while ((offset = SDL_ReadBE32 (src))) {
aschiffler@343
   801
    channel = (xcf_channel **) SDL_realloc (channel, sizeof (xcf_channel *) * (chnls+1));
slouken@26
   802
    fp = SDL_RWtell (src);
slouken@236
   803
    SDL_RWseek (src, offset, RW_SEEK_SET);
slouken@26
   804
    channel [chnls++] = (read_xcf_channel (src));
slouken@368
   805
    SDL_RWseek (src, fp, RW_SEEK_SET);
slouken@26
   806
  }
slouken@26
   807
slouken@26
   808
  if (chnls) {
slouken@26
   809
    SDL_Surface * chs;
slouken@26
   810
slouken@320
   811
    chs = SDL_CreateRGBSurface(SDL_SWSURFACE, head->width, head->height, 32,
slouken@368
   812
               0x00FF0000,0x0000FF00,0x000000FF,0xFF000000);
slouken@26
   813
slouken@26
   814
    if (chs == NULL) {
slouken@118
   815
      error = "Out of memory";
slouken@26
   816
      goto done;
slouken@26
   817
    }
slouken@26
   818
    for (i = 0; i < chnls; i++) {
slouken@26
   819
      //      printf ("CNLBLT %i\n", i);
slouken@70
   820
      if (!channel [i]->selection && channel [i]->visible) {
slouken@368
   821
    create_channel_surface (chs, (xcf_image_type)head->image_type, channel [i]->color, channel [i]->opacity);
slouken@368
   822
    SDL_BlitSurface (chs, NULL, surface, NULL);
slouken@26
   823
      }
slouken@26
   824
      free_xcf_channel (channel [i]);
slouken@26
   825
    }
slouken@26
   826
slouken@26
   827
    SDL_FreeSurface (chs);
slouken@26
   828
  }
slouken@26
   829
slouken@118
   830
done:
slouken@26
   831
  free_xcf_header (head);
slouken@118
   832
  if ( error ) {
slouken@236
   833
    SDL_RWseek(src, start, RW_SEEK_SET);
slouken@118
   834
    if ( surface ) {
slouken@118
   835
      SDL_FreeSurface(surface);
slouken@118
   836
      surface = NULL;
slouken@118
   837
    }
slouken@451
   838
    IMG_SetError("%s", error);
slouken@26
   839
  }
slouken@26
   840
slouken@26
   841
  return(surface);
slouken@26
   842
}
slouken@26
   843
slouken@26
   844
#else
slouken@26
   845
slouken@26
   846
/* See if an image is contained in a data source */
slouken@26
   847
int IMG_isXCF(SDL_RWops *src)
slouken@26
   848
{
slouken@26
   849
  return(0);
slouken@26
   850
}
slouken@26
   851
slouken@26
   852
/* Load a XCF type image from an SDL datasource */
slouken@26
   853
SDL_Surface *IMG_LoadXCF_RW(SDL_RWops *src)
slouken@26
   854
{
slouken@26
   855
  return(NULL);
slouken@26
   856
}
slouken@26
   857
slouken@26
   858
#endif /* LOAD_XCF */