Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(99)

Unified Diff: third_party/WebKit/Source/bindings/core/v8/BUILD.gn

Issue 2402503002: Add a fuzzer for V8ScriptValueDeserializer. (Closed)
Patch Set: take flags out of line using StringHasher, and update corpus Created 4 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/Source/bindings/core/v8/BUILD.gn
diff --git a/third_party/WebKit/Source/bindings/core/v8/BUILD.gn b/third_party/WebKit/Source/bindings/core/v8/BUILD.gn
index 488ea4ad0f41de52ccbec31d9a7cf470456851e8..76cedceefdfc7ace986be25e9a19146d351d33ba 100644
--- a/third_party/WebKit/Source/bindings/core/v8/BUILD.gn
+++ b/third_party/WebKit/Source/bindings/core/v8/BUILD.gn
@@ -2,6 +2,7 @@
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
+import("//testing/libfuzzer/fuzzer_test.gni")
import("//third_party/WebKit/Source/bindings/bindings.gni")
import("//third_party/WebKit/Source/bindings/scripts/scripts.gni")
import("//third_party/WebKit/Source/core/core.gni")
@@ -303,3 +304,14 @@ source_set("testing") {
"//v8",
]
}
+
+fuzzer_test("v8_serialized_script_value_fuzzer") {
+ sources = [
+ "serialization/SerializedScriptValueFuzzer.cpp",
+ ]
+ seed_corpus = "serialization/fuzz_corpus"
+ deps = [
+ "//third_party/WebKit/Source/core",
+ "//third_party/WebKit/Source/platform:blink_fuzzer_test_support",
+ ]
+}

Powered by Google App Engine
This is Rietveld 408576698