Add a fuzzer for GzipSourceStream

net/filter/fuzzed_source_stream.h

Index: net/filter/fuzzed_source_stream.h
diff --git a/net/filter/fuzzed_source_stream.h b/net/filter/fuzzed_source_stream.h
new file mode 100644
index 0000000000000000000000000000000000000000..79810eb06afd315ac6f16208755a7cce29c5aca7
--- /dev/null
+++ b/net/filter/fuzzed_source_stream.h
@@ -0,0 +1,54 @@
+// Copyright 2016 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef NET_FILTER_FUZZED_SOURCE_STREAM_H_
+#define NET_FILTER_FUZZED_SOURCE_STREAM_H_
+
+#include "base/macros.h"
+#include "net/base/completion_callback.h"
+#include "net/filter/source_stream.h"
+
+namespace base {
+class FuzzedDataProvider;
+}  // namespace base
+
+namespace net {
+
+class IOBuffer;
+
+// A SourceStream implementation used in tests. This allows tests to specify
+// what data to return for each Read() call.
+class FuzzedSourceStream : public SourceStream {
+ public:
+  // |data_provider| is used to determine behavior of the FuzzedSourceStream.
+  // It must remain valid until after the FuzzedSocket is destroyed.
+  explicit FuzzedSourceStream(base::FuzzedDataProvider* data_provider);
+  ~FuzzedSourceStream() override;
+
+  // SourceStream implementation
+  int Read(IOBuffer* dest_buffer,
+           int buffer_size,
+           const CompletionCallback& callback) override;
+  std::string Description() const override;
+
+ private:
+  void OnReadComplete(const CompletionCallback& callback,
+                      const std::string& fuzzed_data,

[mmenke, 2016/10/31 14:59:52]

Should probably include <string> here instead of the CC file.

[xunjieli, 2016/10/31 15:14:56]

Done. Thanks for point that out. I recently learned about "git cl lint" which
will identify problems like this. I will make sure to run it in the future.

+                      scoped_refptr<IOBuffer> read_buf,

[mmenke, 2016/10/31 14:59:52]

include base/memory/ref_counted.h

[xunjieli, 2016/10/31 15:14:56]

Done.

+                      int result);
+
+  base::FuzzedDataProvider* data_provider_;
+
+  // Whether there is a pending Read().
+  bool read_pending_;
+
+  // Last result returned by Read() is an error or 0.
+  bool end_returned_;
+
+  DISALLOW_COPY_AND_ASSIGN(FuzzedSourceStream);
+};
+
+}  // namespace net
+
+#endif  // NET_FILTER_FUZZED_SOURCE_STREAM_H_