components/cast_channel/cast_message_fuzzer.cc

   1 // Copyright 2018 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #include <stddef.h>
   6 #include <stdint.h>
   7
   8 #include <memory>
   9
  10 #include "base/memory/ref_counted.h"
  11 #include "components/cast_channel/cast_channel_enum.h"
  12 #include "components/cast_channel/cast_framer.h"
  13 #include "components/cast_channel/proto/cast_channel.pb.h"
  14 #include "net/base/io_buffer.h"
  15 #include "third_party/protobuf/src/google/protobuf/stubs/logging.h"
  16
  17 // Silence logging from the protobuf library.
  18 google::protobuf::LogSilencer log_silencer;
  19
  20 namespace cast_channel {
  21
  22 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
  23   if (size > MessageFramer::MessageHeader::max_message_size())
  24     return 0;
  25
  26   scoped_refptr<net::GrowableIOBuffer> buffer =
  27       base::MakeRefCounted<net::GrowableIOBuffer>();
  28   buffer->SetCapacity(MessageFramer::MessageHeader::max_message_size());
  29   memcpy(buffer->StartOfBuffer(), data, size);
  30
  31   std::unique_ptr<MessageFramer> framer =
  32       std::make_unique<MessageFramer>(buffer.get());
  33   size_t bytes_ingested = 0u;
  34   size_t bytes_to_read =
  35       std::min(framer->BytesRequested(), size - bytes_ingested);
  36   while (bytes_to_read > 0u && bytes_ingested < size) {
  37     ChannelError unused_error;
  38     size_t unused_message_length;
  39     std::unique_ptr<CastMessage> unused_cast_message =
  40         framer->Ingest(bytes_to_read, &unused_message_length, &unused_error);
  41     bytes_ingested += bytes_to_read;
  42     bytes_to_read = std::min(framer->BytesRequested(), size - bytes_ingested);
  43   }
  44
  45   return 0;
  46 }
  47
  48 }  // namespace cast_channel