Add a fuzzer for the feature policy string parser.

third_party/WebKit/Source/platform/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
 import("//testing/libfuzzer/fuzzer_test.gni")
 import("//testing/test.gni")
 import("//third_party/WebKit/Source/build/scripts/scripts.gni")
 import("//third_party/WebKit/Source/config.gni")
@@ skipping 1934 matching lines @@
   sources = [
     "json/JSONParserFuzzer.cpp",
   ]
   deps = [
     ":blink_fuzzer_test_support",
     ":platform",
   ]
   dict = "//testing/libfuzzer/fuzzers/dicts/json.dict"
 }
 
+# Fuzzer for blink::FeaturePolicy.
+fuzzer_test("feature_policy_fuzzer") {
+  sources = [
+    "feature_policy/FeaturePolicyFuzzer.cpp",
+  ]
+  deps = [
+    ":blink_fuzzer_test_support",
+    ":platform",
+  ]
+  dict = "//testing/libfuzzer/fuzzers/dicts/feature_policy.dict"
+  seed_corpus = "//testing/libfuzzer/fuzzers/feature_policy_corpus"
+}
+
 # NOTE: These are legacy unit tests and tests that require a Platform
 # object. Do not add more unless the test requires a Platform object.
 # These tests are a part of the webkit_unit_tests binary.
 source_set("unit_tests") {
   testonly = true
   visibility = []
   visibility = [ "//third_party/WebKit/Source/*" ]
   sources = [
     "graphics/Canvas2DLayerBridgeTest.cpp",
     "graphics/CanvasSurfaceLayerBridgeTest.cpp",
@@ skipping 13 matching lines @@
     "//third_party/WebKit/Source:inside_blink",
   ]
 
   deps = [
     ":test_support",
     "//cc/surfaces:surface_id",
     "//testing/gmock",
     "//testing/gtest",
   ]
 }