OLD | NEW |
1 // Copyright 2016 The Chromium Authors. All rights reserved. | 1 // Copyright 2016 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include <memory> | 5 #include <memory> |
6 #include <string> | 6 #include <string> |
7 | 7 |
8 #include "base/memory/ptr_util.h" | 8 #include "base/memory/ptr_util.h" |
9 #include "base/memory/singleton.h" | 9 #include "base/memory/singleton.h" |
10 #include "base/run_loop.h" | 10 #include "base/run_loop.h" |
(...skipping 12 matching lines...) Expand all Loading... |
23 | 23 |
24 // This class tests creating and reading to completion a URLRequest with fuzzed | 24 // This class tests creating and reading to completion a URLRequest with fuzzed |
25 // input. The fuzzer provides a data: URL and optionally generates custom Range | 25 // input. The fuzzer provides a data: URL and optionally generates custom Range |
26 // headers. The amount of data read in each Read call is also fuzzed, as is | 26 // headers. The amount of data read in each Read call is also fuzzed, as is |
27 // the size of the IOBuffer to read data into. | 27 // the size of the IOBuffer to read data into. |
28 class URLRequestDataJobFuzzerHarness : public net::URLRequest::Delegate { | 28 class URLRequestDataJobFuzzerHarness : public net::URLRequest::Delegate { |
29 public: | 29 public: |
30 URLRequestDataJobFuzzerHarness() | 30 URLRequestDataJobFuzzerHarness() |
31 : context_(true), task_runner_(base::ThreadTaskRunnerHandle::Get()) { | 31 : context_(true), task_runner_(base::ThreadTaskRunnerHandle::Get()) { |
32 job_factory_.SetProtocolHandler( | 32 job_factory_.SetProtocolHandler( |
33 "data", base::WrapUnique(new net::DataProtocolHandler())); | 33 "data", base::MakeUnique<net::DataProtocolHandler>()); |
34 context_.set_job_factory(&job_factory_); | 34 context_.set_job_factory(&job_factory_); |
35 context_.Init(); | 35 context_.Init(); |
36 } | 36 } |
37 | 37 |
38 static URLRequestDataJobFuzzerHarness* GetInstance() { | 38 static URLRequestDataJobFuzzerHarness* GetInstance() { |
39 return base::Singleton<URLRequestDataJobFuzzerHarness>::get(); | 39 return base::Singleton<URLRequestDataJobFuzzerHarness>::get(); |
40 } | 40 } |
41 | 41 |
42 int CreateAndReadFromDataURLRequest(const uint8_t* data, size_t size) { | 42 int CreateAndReadFromDataURLRequest(const uint8_t* data, size_t size) { |
43 base::FuzzedDataProvider provider(data, size); | 43 base::FuzzedDataProvider provider(data, size); |
(...skipping 118 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
162 base::RunLoop* read_loop_; | 162 base::RunLoop* read_loop_; |
163 | 163 |
164 DISALLOW_COPY_AND_ASSIGN(URLRequestDataJobFuzzerHarness); | 164 DISALLOW_COPY_AND_ASSIGN(URLRequestDataJobFuzzerHarness); |
165 }; | 165 }; |
166 | 166 |
167 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { | 167 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { |
168 // Using a static singleton test harness lets the test run ~3-4x faster. | 168 // Using a static singleton test harness lets the test run ~3-4x faster. |
169 return URLRequestDataJobFuzzerHarness::GetInstance() | 169 return URLRequestDataJobFuzzerHarness::GetInstance() |
170 ->CreateAndReadFromDataURLRequest(data, size); | 170 ->CreateAndReadFromDataURLRequest(data, size); |
171 } | 171 } |
OLD | NEW |