Add fuzzer for icc codec

testing/libfuzzer/pdf_codec_icc_fuzzer.cc

Index: testing/libfuzzer/pdf_codec_icc_fuzzer.cc
diff --git a/testing/libfuzzer/pdf_codec_icc_fuzzer.cc b/testing/libfuzzer/pdf_codec_icc_fuzzer.cc
new file mode 100644
index 0000000000000000000000000000000000000000..317282527eb6766e0b472acca162eadd7f7caedf
--- /dev/null
+++ b/testing/libfuzzer/pdf_codec_icc_fuzzer.cc
@@ -0,0 +1,25 @@
+// Copyright 2016 The PDFium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include <cstdint>
+
+#include "core/fxcodec/codec/ccodec_iccmodule.h"
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
+  CCodec_IccModule icc_module;
+  uint32_t nComponent = 0;
+  void* transform = icc_module.CreateTransform_sRGB(data, size, nComponent);
+
+  if (transform) {
+    FX_FLOAT src[4];
+    FX_FLOAT dst[4];
+    for (int i = 0; i < nComponent; i++)

[Tom Sepez, 2016/09/22 16:46:48]

Nit:  we could just set all 4 to 0.5, that way if somehow we got back N > 4,
asan would trip inside the translate call, rather than in this driver.

[kcwu, 2016/09/22 17:13:51]

Done.

+      src[i] = 0.5;

[Tom Sepez, 2016/09/22 16:46:48]

nit: If I were really picky, I'd say 0.5f, but as you like.

[kcwu, 2016/09/22 17:13:50]

Done.

+    icc_module.SetComponents(nComponent);
+    icc_module.Translate(transform, src, dst);
+  }
+
+  icc_module.DestroyTransform(transform);

[Tom Sepez, 2016/09/22 16:46:48]

nit: maybe we save a few cycles per test case if this moves inside the if
(transform) { block.

[kcwu, 2016/09/22 17:13:51]

Done.

+  return 0;
+}