emf 0.1.2 → 0.2.0

data/lib/emf/wmf/binary.rb

@@ -1,9 +1,158 @@
 # frozen_string_literal: true
 
-# Placeholder until TODO.impl/07-wmf-wire-domain-parser.md.
+require "emf/wmf/text_codec"
+require "emf/wmf/palette_codec"
+require "emf/wmf/region_codec"
+require "emf/wmf/brush_codec"
+require "emf/wmf/bitmap_codec"
+require "emf/wmf/geometry_codec"
+require "emf/wmf/dc_escape_codec"
+
 module Emf
   module Wmf
     module Binary
+      PLACEABLE_KEY = 0x9AC6CDD7
+      HEADER_BYTES = 18
+      PLACEABLE_BYTES = 22
+      MAX_INPUT_BYTES = 200 * 1024 * 1024
+      MAX_RECORDS = 1_000_000
+
+      FIXED_RECORDS = {
+        0x14 => Model::Wmf::Records::MoveTo,
+        0x13 => Model::Wmf::Records::LineTo,
+        0x0B => Model::Wmf::Records::SetWindowOrg,
+        0x0C => Model::Wmf::Records::SetWindowExt,
+        0x0D => Model::Wmf::Records::SetViewportOrg,
+        0x0E => Model::Wmf::Records::SetViewportExt,
+        0x0F => Model::Wmf::Records::OffsetWindowOrg,
+        0x11 => Model::Wmf::Records::OffsetViewportOrg,
+        0x17 => Model::Wmf::Records::Arc,
+        0x18 => Model::Wmf::Records::Ellipse,
+        0x1A => Model::Wmf::Records::Pie,
+        0x1B => Model::Wmf::Records::Rectangle,
+        0x1C => Model::Wmf::Records::RoundRect,
+        0x30 => Model::Wmf::Records::Chord
+      }.freeze
+      FIXED_FUNCTIONS = FIXED_RECORDS.invert.freeze
+
+      POINT_ARRAY_RECORDS = {
+        0x24 => Model::Wmf::Records::Polygon,
+        0x25 => Model::Wmf::Records::Polyline,
+        0x38 => Model::Wmf::Records::PolyPolygon
+      }.freeze
+      POINT_ARRAY_FUNCTIONS = POINT_ARRAY_RECORDS.invert.freeze
+
+      STATE_RECORDS = {
+        0x01 => Model::Wmf::Records::SetBkColor,
+        0x02 => Model::Wmf::Records::SetBkMode,
+        0x03 => Model::Wmf::Records::SetMapMode,
+        0x31 => Model::Wmf::Records::SetMapperFlags,
+        0x06 => Model::Wmf::Records::SetPolyFillMode,
+        0x04 => Model::Wmf::Records::SetRop2,
+        0x07 => Model::Wmf::Records::SetStretchBltMode,
+        0x2E => Model::Wmf::Records::SetTextAlign,
+        0x08 => Model::Wmf::Records::SetTextCharExtra,
+        0x09 => Model::Wmf::Records::SetTextColor,
+        0x0A => Model::Wmf::Records::SetTextJustification,
+        0x49 => Model::Wmf::Records::SetLayout
+      }.freeze
+      STATE_FUNCTIONS = STATE_RECORDS.invert.freeze
+      PREFIX_FUNCTIONS = ([0xFB] + STATE_RECORDS.keys + PaletteCodec::RECORDS.keys + RegionCodec::RECORDS.keys +
+                          BrushCodec::RECORDS.keys + BitmapCodec::RECORDS.keys + GeometryCodec::RECORDS.keys +
+                          DcEscapeCodec::RECORDS.keys).freeze
+
+      OBJECT_RECORDS = {
+        0xFA => Model::Wmf::Records::CreatePenIndirect,
+        0xFC => Model::Wmf::Records::CreateBrushIndirect,
+        0x2D => Model::Wmf::Records::SelectObject,
+        0xF0 => Model::Wmf::Records::DeleteObject
+      }.freeze
+      OBJECT_FUNCTIONS = OBJECT_RECORDS.invert.freeze
+      # Opaque creators still consume the lowest available object-table slot.
+      OBJECT_CREATORS = [0xFA, 0xFC, 0xFB, 0xF7, 0xF9, 0xFF, 0x42].freeze
+      TEXT_FUNCTIONS = [0x21, 0x32].freeze
+      TYPED_FUNCTIONS = (FIXED_RECORDS.keys + POINT_ARRAY_RECORDS.keys + OBJECT_RECORDS.keys + STATE_RECORDS.keys +
+                         TEXT_FUNCTIONS + PaletteCodec::RECORDS.keys + RegionCodec::RECORDS.keys + BrushCodec::RECORDS.keys +
+                         BitmapCodec::RECORDS.keys + GeometryCodec::RECORDS.keys + DcEscapeCodec::RECORDS.keys + [0xFB]).freeze
+
+      module_function
+
+      def prefix_codec(record)
+        [PaletteCodec, RegionCodec, BrushCodec, BitmapCodec, GeometryCodec, DcEscapeCodec]
+          .find { |codec| codec::FUNCTIONS.key?(record.class) }
+      end
+
+      def checksum(bytes)
+        bytes.unpack("v10").reduce(0, :^)
+      end
+
+      def integer(value, range, name)
+        return value if value.is_a?(Integer) && range.cover?(value)
+
+        raise SerializeError, "WMF #{name} out of range: #{value.inspect}"
+      end
+
+      def uint8(value, name)
+        integer(value, 0..0xFF, name)
+      end
+
+      def uint16(value, name)
+        integer(value, 0..0xFFFF, name)
+      end
+
+      def uint32(value, name)
+        integer(value, 0..0xFFFFFFFF, name)
+      end
+
+      # Yields (record, message) for a table violation the parser cannot recover from. A reference to no live object
+      # (1702) or, for a clip, paint or invert record, to a non-region (1704) is recovered: the reference is ignored,
+      # the record kept, and `recovered` (if given) is called with (record, reason, index).
+      def validate_objects(records, capacity, recovered: nil)
+        slots = Array.new(capacity, false)
+        records.each do |record|
+          function = record.type_id & 0xFF
+          if OBJECT_CREATORS.include?(function)
+            index = slots.index(false)
+            yield record, "object table capacity exceeded" unless index
+            slots[index] = function
+          elsif record.is_a?(Model::Wmf::Records::FillRegion)
+            validate_region_references(record, slots) { |message| yield record, message }
+          elsif record.is_a?(Model::Wmf::Records::ObjectReference)
+            validate_object_reference(record, capacity, slots, recovered && lambda { |reason, index|
+              recovered.call(record, reason, index)
+            }) do |message|
+              yield record, message
+            end
+          end
+        end
+      end
+
+      def validate_object_reference(record, capacity, slots, recovered)
+        index = record.object_index
+        # Preserve high-bit stock selectors without interpreting their numeric ID.
+        return if record.is_a?(Model::Wmf::Records::SelectObject) && index.anybits?(0x8000)
+        return recovered&.call(1702, index) unless index < capacity && slots[index]
+
+        yield "object reference #{index} is not a palette" if record.is_a?(Model::Wmf::Records::SelectPalette) && slots[index] != 0xF7
+        return recovered&.call(1704, index) if not_region?(record, slots[index])
+
+        slots[index] = false if record.is_a?(Model::Wmf::Records::DeleteObject)
+      end
+
+      def not_region?(record, slot) = record.is_a?(Model::Wmf::Records::RegionReference) && slot != 0xFF
+
+      def validate_region_references(record, slots)
+        region = record.region_index
+        brush = record.brush_index
+        yield "invalid region reference #{region}" unless region < slots.length && slots[region]
+        yield "object reference #{region} is not a region" unless slots[region] == 0xFF
+        yield "invalid brush reference #{brush}" unless brush < slots.length && slots[brush]
+        yield "object reference #{brush} is not a brush" unless [0xFC, 0xF9, 0x42].include?(slots[brush])
+      end
+
+      def int16(value, name)
+        integer(value, -0x8000..0x7FFF, name)
+      end
     end
   end
 end

data/lib/emf/wmf/bitmap_codec.rb

@@ -0,0 +1,118 @@
+# frozen_string_literal: true
+
+module Emf
+  module Wmf
+    module BitmapCodec
+      RECORDS = { 0x22 => Model::Wmf::Records::BitBlt, 0x40 => Model::Wmf::Records::DibBitBlt,
+                  0x23 => Model::Wmf::Records::StretchBlt, 0x41 => Model::Wmf::Records::DibStretchBlt,
+                  0x33 => Model::Wmf::Records::SetDibToDev, 0x43 => Model::Wmf::Records::StretchDib }.freeze
+      FUNCTIONS = RECORDS.invert.freeze
+      BLT_FIELDS = %i[raster_operation source_y source_x height width destination_y destination_x reserved].freeze
+      STRETCH_FIELDS = %i[raster_operation source_height source_width source_y source_x destination_height destination_width
+                          destination_y destination_x reserved].freeze
+      SET_FIELDS = %i[color_usage scan_count start_scan source_y source_x height width destination_y destination_x].freeze
+      DIB_FIELDS = (STRETCH_FIELDS[0, 1] + [:color_usage] + STRETCH_FIELDS[1, 8]).freeze
+      FIELDS = { 0x22 => BLT_FIELDS, 0x40 => BLT_FIELDS, 0x23 => STRETCH_FIELDS, 0x41 => STRETCH_FIELDS,
+                 0x33 => SET_FIELDS, 0x43 => DIB_FIELDS }.freeze
+
+      FORMATS = { uint32: "V", uint16: "v", int16: "s<" }.freeze
+
+      module_function
+
+      def optional?(kind)
+        [0x22, 0x40, 0x23, 0x41].include?(kind)
+      end
+
+      def field_type(kind, field)
+        return :uint32 if field == :raster_operation
+        return :uint16 if kind == 0x33 || %i[color_usage reserved].include?(field)
+
+        :int16
+      end
+
+      def wire_fields(kind, absent)
+        fields = FIELDS.fetch(kind).reject { |field| field == :reserved }
+        fields.insert(fields.index([0x22, 0x40].include?(kind) ? :height : :destination_height), :reserved) if absent
+        fields
+      end
+
+      def format_for(kind, fields)
+        fields.map { |field| FORMATS.fetch(field_type(kind, field)) }.join
+      end
+
+      def decode(raw, function, offset)
+        kind = function & 0xFF
+        absent = optional?(kind) && (raw.bytesize - 6) / 2 == function >> 8
+        names = wire_fields(kind, absent)
+        format = format_for(kind, names)
+        length = names.sum { |field| field == :raster_operation ? 4 : 2 }
+        yield "truncated bitmap transfer prefix" if raw.bytesize < 6 + length
+        fields = names.zip(raw.byteslice(6, length).unpack(format)).to_h
+        fields[:reserved] ||= 0 if optional?(kind)
+        if absent
+          fields[:bitmap] = nil
+          fields[:suffix] = raw.byteslice((6 + length)..)
+        else
+          yield "empty bitmap transfer source" unless raw.bytesize > 6 + length
+          fields[:bitmap] = raw.byteslice((6 + length)..)
+          fields[:suffix] = "".b
+        end
+        RECORDS.fetch(kind).new(**fields, type_id: function, offset: offset)
+      end
+
+      def byte_size(record)
+        kind = FUNCTIONS.fetch(record.class)
+        prefix = wire_fields(kind, optional?(kind) && record.bitmap.nil?).sum { |field| field == :raster_operation ? 4 : 2 }
+        6 + prefix + (record.bitmap&.bytesize || 0) + record.suffix.bytesize
+      end
+
+      def encode(record)
+        function = Binary.uint16(record.type_id, "RecordFunction")
+        kind = FUNCTIONS.fetch(record.class)
+        raise SerializeError, "WMF bitmap RecordFunction mismatch" unless function & 0xFF == kind
+
+        fields = FIELDS.fetch(kind).to_h { |field| [field, record.public_send(field)] }
+        fields[:bitmap] = record.bitmap
+        fields[:suffix] = record.suffix
+        body = encode_fields(fields, function)
+        [3 + (body.bytesize / 2), function].pack("Vv") + body
+      end
+
+      def encode_fields(fields, function)
+        kind = function & 0xFF
+        FIELDS.fetch(kind).each { |field| Binary.public_send(field_type(kind, field), fields.fetch(field), field) }
+        absent = optional?(kind) && fields[:bitmap].nil?
+        image, suffix = source_bytes(fields, kind, absent)
+        names = wire_fields(kind, absent)
+        size = names.sum { |field| field == :raster_operation ? 4 : 2 } + image.bytesize + suffix.bytesize
+        validate_layout(kind, absent, size, function)
+
+        names.map { |field| fields.fetch(field) }.pack(format_for(kind, names)) + image.b + suffix.b
+      end
+
+      def source_bytes(fields, kind, absent)
+        suffix = fields.fetch(:suffix, "".b)
+        validate_bytes(suffix)
+        raise SerializeError, "WMF bitmap suffix requires absent source" unless absent || suffix.empty?
+        raise SerializeError, "WMF present bitmap reserved word must be zero" if optional?(kind) && !absent && fields[:reserved] != 0
+
+        image = absent ? "".b : fields[:bitmap]
+        validate_bytes(image)
+        raise SerializeError, "empty WMF bitmap source" if !absent && image.empty?
+
+        [image, suffix]
+      end
+
+      def validate_layout(kind, absent, size, function)
+        raise SerializeError, "WMF bitmap too large" if size > Binary::MAX_INPUT_BYTES - 6
+        raise SerializeError, "ambiguous WMF bitmap source layout" if optional?(kind) && absent != (size / 2 == function >> 8)
+      end
+
+      def validate_bytes(value)
+        return if value.is_a?(String) && value.bytesize.even? && value.bytesize <= Binary::MAX_INPUT_BYTES - 6
+
+        raise SerializeError, "invalid WMF bitmap bytes"
+      end
+    end
+  end
+end

data/lib/emf/wmf/brush_codec.rb

@@ -0,0 +1,102 @@
+# frozen_string_literal: true
+
+module Emf
+  module Wmf
+    module BrushCodec
+      RECORDS = { 0xF9 => Model::Wmf::Records::CreatePatternBrush, 0x42 => Model::Wmf::Records::DibCreatePatternBrush }.freeze
+      FUNCTIONS = RECORDS.invert.freeze
+      SIGNED_FIELDS = %i[bitmap_type width height width_bytes].freeze
+      BYTE_FIELDS = %i[planes bits_pixel].freeze
+
+      module_function
+
+      def decode(raw, function, offset)
+        fields = { type_id: function, offset: offset }
+        if function & 0xFF == 0xF9
+          yield "truncated pattern brush prefix" if raw.bytesize < 38
+          values = raw.byteslice(6, 10).unpack("s<4C2")
+          fields.merge!((SIGNED_FIELDS + BYTE_FIELDS).zip(values).to_h)
+          length = pattern_length(fields[:width], fields[:height], fields[:planes], fields[:bits_pixel])
+          yield "invalid pattern brush extent" unless length && length <= raw.bytesize - 38
+          fields.merge!(bits: raw.byteslice(16, 4), reserved: raw.byteslice(20, 18),
+                        pattern: raw.byteslice(38, length), suffix: raw.byteslice((38 + length)..))
+        else
+          yield "truncated DIB brush prefix" if raw.bytesize < 12
+          style, usage = raw.byteslice(6, 4).unpack("v2")
+          yield "invalid DIB brush color usage" unless style == 3 || usage <= 2
+          fields.merge!(style: style, color_usage: usage, target: raw.byteslice(10..))
+        end
+        RECORDS.fetch(function & 0xFF).new(**fields)
+      end
+
+      def pattern_length(width, height, planes, bits_pixel)
+        return unless width.positive? && height.positive? && planes == 1 && bits_pixel.positive?
+
+        (((width * bits_pixel) + 15) / 16) * 2 * height
+      end
+
+      def byte_size(record)
+        if record.is_a?(Model::Wmf::Records::CreatePatternBrush)
+          38 + record.pattern.bytesize + record.suffix.bytesize
+        else
+          10 + record.target.bytesize
+        end
+      end
+
+      def encode(record)
+        function = Binary.uint16(record.type_id, "RecordFunction")
+        raise SerializeError, "WMF brush RecordFunction mismatch" unless function & 0xFF == FUNCTIONS[record.class]
+
+        payload = encode_payload(record)
+        if record.is_a?(Model::Wmf::Records::CreatePatternBrush)
+          validate_string(record.suffix, "suffix", even: true)
+          validate_size(payload.bytesize + record.suffix.bytesize)
+          payload += record.suffix.b
+        end
+        validate_size(payload.bytesize)
+
+        [3 + (payload.bytesize / 2), function].pack("Vv") + payload
+      end
+
+      def encode_payload(record)
+        if record.is_a?(Model::Wmf::Records::CreatePatternBrush)
+          pattern_payload(record)
+        else
+          style = Binary.uint16(record.style, "style")
+          usage = Binary.uint16(record.color_usage, "color_usage")
+          raise SerializeError, "invalid WMF DIB brush color usage" unless style == 3 || usage <= 2
+
+          validate_string(record.target, "target", even: true)
+          raise SerializeError, "empty WMF DIB brush target" if record.target.empty?
+
+          validate_size(4 + record.target.bytesize)
+          [style, usage].pack("v2") + record.target.b
+        end
+      end
+
+      def pattern_payload(record)
+        signed = SIGNED_FIELDS.map { |field| Binary.int16(record.public_send(field), field) }
+        bytes = BYTE_FIELDS.map { |field| Binary.uint8(record.public_send(field), field) }
+        length = pattern_length(record.width, record.height, record.planes, record.bits_pixel)
+        validate_string(record.bits, "bits", length: 4)
+        validate_string(record.reserved, "reserved", length: 18)
+        validate_string(record.pattern, "pattern", even: true)
+        raise SerializeError, "invalid WMF pattern brush extent" unless length && length == record.pattern.bytesize
+
+        validate_size(32 + record.pattern.bytesize)
+        [*signed, *bytes].pack("s<4C2") + record.bits.b + record.reserved.b + record.pattern.b
+      end
+
+      def validate_size(size)
+        raise SerializeError, "WMF brush too large" if size > Binary::MAX_INPUT_BYTES - 6
+      end
+
+      def validate_string(value, name, length: nil, even: false)
+        return if value.is_a?(String) && (!length || value.bytesize == length) && (!even || value.bytesize.even?) &&
+                  value.bytesize <= Binary::MAX_INPUT_BYTES - 6
+
+        raise SerializeError, "invalid WMF brush #{name} bytes"
+      end
+    end
+  end
+end

data/lib/emf/wmf/dc_escape_codec.rb

@@ -0,0 +1,75 @@
+# frozen_string_literal: true
+
+module Emf
+  module Wmf
+    module DcEscapeCodec
+      RECORDS = {
+        0x1E => Model::Wmf::Records::SaveDc,
+        0x27 => Model::Wmf::Records::RestoreDc,
+        0x05 => Model::Wmf::Records::SetRelAbs,
+        0x26 => Model::Wmf::Records::Escape
+      }.freeze
+      FUNCTIONS = RECORDS.invert.freeze
+
+      module_function
+
+      def decode(raw, function, offset)
+        klass = RECORDS.fetch(function & 0xFF)
+        fields = { type_id: function, offset: offset }
+        prefix = 6
+        if klass == Model::Wmf::Records::RestoreDc
+          prefix = 8
+          yield "truncated RestoreDc prefix" if raw.bytesize < prefix
+          fields[:saved_dc] = raw.byteslice(6, 2).unpack1("s<")
+        elsif klass == Model::Wmf::Records::Escape
+          yield "truncated Escape prefix" if raw.bytesize < 10
+          fields[:escape_function], count = raw.byteslice(6, 4).unpack("v2")
+          prefix = 10 + count + (count % 2)
+          yield "truncated Escape data or padding" if raw.bytesize < prefix
+          fields[:data] = raw.byteslice(10, count)
+          fields[:padding] = raw.getbyte(10 + count) if count.odd?
+        end
+        klass.new(**fields, suffix: raw.byteslice(prefix..))
+      end
+
+      def byte_size(record)
+        prefix = case record
+                 when Model::Wmf::Records::RestoreDc then 8
+                 when Model::Wmf::Records::Escape then 10 + record.data.bytesize + (record.data.bytesize % 2)
+                 else 6
+                 end
+        prefix + record.suffix.bytesize
+      end
+
+      def encode(record)
+        function = Binary.uint16(record.type_id, "RecordFunction")
+        raise SerializeError, "WMF DC/Escape RecordFunction mismatch" unless function & 0xFF == FUNCTIONS[record.class]
+        unless record.suffix.is_a?(String) && record.suffix.bytesize.even?
+          raise SerializeError, "WMF DC/Escape suffix must be a String with even length"
+        end
+
+        payload = case record
+                  when Model::Wmf::Records::RestoreDc then [Binary.int16(record.saved_dc, "saved_dc")].pack("s<")
+                  when Model::Wmf::Records::Escape then encode_escape(record)
+                  else "".b
+                  end
+        payload += record.suffix.b
+        [3 + (payload.bytesize / 2), function].pack("Vv") + payload
+      end
+
+      def encode_escape(record)
+        raise SerializeError, "WMF Escape data must be a byte string" unless record.data.is_a?(String)
+
+        count = Binary.uint16(record.data.bytesize, "Escape ByteCount")
+        function = Binary.uint16(record.escape_function, "EscapeFunction")
+        padding = "".b
+        if count.odd?
+          padding = [Binary.uint8(record.padding, "Escape padding")].pack("C")
+        elsif !record.padding.nil?
+          raise SerializeError, "WMF even Escape data must not have padding"
+        end
+        [function, count].pack("v2") + record.data.b + padding
+      end
+    end
+  end
+end

data/lib/emf/wmf/dib.rb

@@ -0,0 +1,187 @@
+# frozen_string_literal: true
+
+module Emf
+  module Wmf
+    # Read-only views of the packed bitmap interiors retained by WMF records.
+    # The raw bytes on the record stay authoritative; compressed pixels, header
+    # extensions and padding are kept verbatim and nothing is decoded or converted.
+    # Malformed or unsupported layouts return nil, as in the Rust views.
+    module Dib
+      CoreHeader = Struct.new(:width, :height, :planes, :bit_count, keyword_init: true)
+      InfoHeader = Struct.new(:width, :height, :planes, :bit_count, :compression, :image_size, :x_pels_per_meter,
+                              :y_pels_per_meter, :colors_used, :colors_important, :extension, keyword_init: true)
+      # kind is :none, :rgb_triples, :rgb_quads or :palette_indices.
+      ColorTable = Struct.new(:kind, :rows, keyword_init: true)
+      Image = Struct.new(:header, :bitfield_masks, :colors, :pixels, :trailing, keyword_init: true)
+      Layout = Struct.new(:header, :masks, :color_count, :entry_size, :pixel_start, :pixel_size, keyword_init: true)
+
+      COMPRESSIONS = [0, 1, 2, 3, 4, 5, 11, 12, 13].freeze
+      BIT_COUNTS = [0, 1, 4, 8, 16, 24, 32].freeze
+      RLE_BITS = { 1 => 8, 12 => 8, 2 => 4, 13 => 4 }.freeze
+      PROFILE_SIGNATURES = [0x4C494E4B, 0x4D424544].freeze
+
+      module_function
+
+      def parse(bytes, color_usage = 0)
+        bytes = bytes.b
+        layout = layout(bytes, color_usage) or return
+        header = layout.header
+        Image.new(header: header_view(bytes, header),
+                  bitfield_masks: layout.masks.positive? ? bytes.byteslice(header, 12).unpack("V3") : nil,
+                  colors: color_table(bytes, layout, color_usage),
+                  pixels: bytes.byteslice(layout.pixel_start, layout.pixel_size),
+                  trailing: bytes.byteslice((layout.pixel_start + layout.pixel_size)..))
+      end
+
+      def header_view(bytes, size)
+        if size == 12
+          width, height, planes, bits = bytes.unpack("@4v4")
+          return CoreHeader.new(width: width, height: height, planes: planes, bit_count: bits)
+        end
+        width, height, planes, bits, compression, image_size, x_pels, y_pels, used, important = bytes.unpack("@4l<2v2V2l<2V2")
+        InfoHeader.new(width: width, height: height, planes: planes, bit_count: bits, compression: compression,
+                       image_size: image_size, x_pels_per_meter: x_pels, y_pels_per_meter: y_pels, colors_used: used,
+                       colors_important: important, extension: bytes.byteslice(40, size - 40))
+      end
+
+      def color_table(bytes, layout, color_usage)
+        return ColorTable.new(kind: :none, rows: []) if color_usage == 2
+
+        raw = bytes.byteslice(layout.header + layout.masks, layout.pixel_start - layout.header - layout.masks)
+        case layout.entry_size
+        when 2 then ColorTable.new(kind: :palette_indices, rows: raw.unpack("v*"))
+        when 3 then ColorTable.new(kind: :rgb_triples, rows: raw.bytes.each_slice(3).to_a)
+        else ColorTable.new(kind: :rgb_quads, rows: raw.bytes.each_slice(4).to_a)
+        end
+      end
+
+      def layout(bytes, usage)
+        header = header_size(bytes, usage) or return
+
+        width, height, planes, bits, compression, image_size, used = header_fields(bytes, header)
+        return unless valid_shape?(width, height, planes, bits) && valid_compression?(compression, bits, height)
+
+        masks = mask_bytes(compression, header)
+        colors = color_count(bits, used, usage)
+        size = pixel_size(compression, width, bits, height, image_size)
+        return unless masks && colors && size
+
+        build_layout(bytes, header, masks, colors, usage, size)
+      end
+
+      def header_size(bytes, usage)
+        return unless bytes.bytesize >= 4 && usage.between?(0, 2)
+
+        size = bytes.unpack1("V")
+        size unless (size != 12 && size < 40) || size > bytes.bytesize
+      end
+
+      def build_layout(bytes, header, masks, colors, usage, size)
+        entry_size = color_entry_size(header, usage)
+        start = header + masks + (colors * entry_size)
+        return unless start + size <= bytes.bytesize && valid_profile?(bytes, header, start + size)
+
+        Layout.new(header: header, masks: masks, color_count: colors, entry_size: entry_size, pixel_start: start, pixel_size: size)
+      end
+
+      def color_entry_size(header, usage)
+        return 2 if usage == 1
+
+        header == 12 ? 3 : 4
+      end
+
+      def header_fields(bytes, header)
+        return bytes.unpack("@4v4") + [0, 0, 0] if header == 12
+
+        width, height, planes, bits, compression, image_size = bytes.unpack("@4l<2v2V2")
+        [width, height, planes, bits, compression, image_size, bytes.unpack1("@32V")]
+      end
+
+      def valid_shape?(width, height, planes, bits)
+        width.positive? && !height.zero? && planes == 1 && BIT_COUNTS.include?(bits)
+      end
+
+      def valid_compression?(compression, bits, height)
+        return false unless COMPRESSIONS.include?(compression)
+        return false if height.negative? && ![0, 3].include?(compression)
+        return false if bits.zero? && ![4, 5].include?(compression)
+
+        RLE_BITS.fetch(compression, bits) == bits && (compression != 3 || [16, 32].include?(bits))
+      end
+
+      # Embedded masks occupy the extension in V4/V5 and later headers.
+      def mask_bytes(compression, header)
+        return 0 unless compression == 3
+        return 12 if header == 40
+
+        0 if header >= 52
+      end
+
+      def color_count(bits, used, usage)
+        max_colors = bits.between?(1, 8) ? 1 << bits : 0
+        return 0 if usage == 2
+        return max_colors if used.zero?
+        return if max_colors.positive? && used > max_colors
+
+        used
+      end
+
+      def pixel_size(compression, width, bits, height, image_size)
+        return (((width * bits) + 31) / 32 * 4) * height.abs if [0, 3, 11].include?(compression)
+
+        image_size unless image_size.zero?
+      end
+
+      # A packed V5 profile may follow pixels, but may not overlap header/table/pixels.
+      def valid_profile?(bytes, header, pixel_end)
+        return true unless header >= 124 && PROFILE_SIGNATURES.include?(bytes.unpack1("@56V"))
+
+        profile, profile_size = bytes.unpack("@112V2")
+        profile_size.zero? || (profile >= pixel_end && profile + profile_size <= bytes.bytesize)
+      end
+    end
+
+    module Bitmap16
+      Image = Struct.new(:bitmap_type, :width, :height, :width_bytes, :planes, :bits_pixel, :pixels, :trailing,
+                         keyword_init: true)
+
+      module_function
+
+      # The extent derives from Width and BitsPixel, independent of WidthBytes, which is
+      # preserved verbatim even when inconsistent with that stride.
+      def parse(bytes)
+        bytes = bytes.b
+        return unless bytes.bytesize >= 10
+
+        type, width, height, width_bytes, planes, bits = bytes.unpack("s<4C2")
+        return unless width.positive? && height.positive? && planes == 1 && bits.positive?
+
+        size = ((((width * bits) + 15) / 16) * 2) * height
+        return unless 10 + size <= bytes.bytesize
+
+        Image.new(bitmap_type: type, width: width, height: height, width_bytes: width_bytes, planes: planes,
+                  bits_pixel: bits, pixels: bytes.byteslice(10, size), trailing: bytes.byteslice((10 + size)..))
+      end
+    end
+
+    # Typed interior of a bitmap transfer record: a Bitmap16::Image, a Dib::Image,
+    # ABSENT for an optional source that is not present, or nil when malformed.
+    module BitmapImage
+      Absent = Class.new { def inspect = "#<Emf::Wmf::BitmapImage::ABSENT>" }
+      ABSENT = Absent.new.freeze
+
+      module_function
+
+      def of(record)
+        bitmap = record.bitmap
+        return ABSENT if bitmap.nil?
+
+        case record
+        when Model::Wmf::Records::BitBlt, Model::Wmf::Records::StretchBlt then Bitmap16.parse(bitmap)
+        when Model::Wmf::Records::DibBitBlt, Model::Wmf::Records::DibStretchBlt then Dib.parse(bitmap, 0)
+        else Dib.parse(bitmap, record.color_usage)
+        end
+      end
+    end
+  end
+end