Migrate static transport security state fuzzer to LibFuzzer.

net/http/transport_security_state_static_fuzzer.cc

Index: net/http/transport_security_state_static_fuzzer.cc
diff --git a/net/http/transport_security_state_static_fuzzer.cc b/net/http/transport_security_state_static_fuzzer.cc
new file mode 100644
index 0000000000000000000000000000000000000000..4fa8c73bac1bf802e79ed8be49667220a6040ac2
--- /dev/null
+++ b/net/http/transport_security_state_static_fuzzer.cc
@@ -0,0 +1,49 @@
+// Copyright 2016 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include <string>
+
+#include "net/http/transport_security_state.h"
+
+namespace net {
+
+class TransportSecurityStateStaticFuzzer {
+ public:
+  bool FuzzStaticDomainState(TransportSecurityState* state,
+                             const std::string& input) {
+    state->enable_static_pins_ = true;
+    TransportSecurityState::STSState sts_result;
+    TransportSecurityState::PKPState pkp_result;
+    return state->GetStaticDomainState(input, &sts_result, &pkp_result);
+  }
+
+  bool FuzzStaticExpectCTState(TransportSecurityState* state,
+                               const std::string& input) {
+    state->enable_static_expect_ct_ = true;
+    TransportSecurityState::ExpectCTState result;
+    return state->GetStaticExpectCTState(input, &result);
+  }
+
+  bool FuzzStaticExpectStapleState(TransportSecurityState* state,
+                                   const std::string& input) {
+    state->enable_static_expect_staple_ = true;
+    TransportSecurityState::ExpectStapleState result;
+    return state->GetStaticExpectStapleState(input, &result);
+  }
+};
+
+}  // namespace net
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
+  std::string input(data, data + size);

[Ryan Sleevi, 2016/12/29 00:16:51]

This doesn't give casting errors? uint8_t* is a different type than char* - I
would expect a reinterpret_cast<> needed here.

[martijnc, 2016/12/29 00:30:11]

You're right. Done.

I noticed the Linux compiler doesn't always complain about this but the Windows
compiler does.

+
+  net::TransportSecurityStateStaticFuzzer helper;
+  net::TransportSecurityState state;
+
+  helper.FuzzStaticDomainState(&state, input);
+  helper.FuzzStaticExpectCTState(&state, input);
+  helper.FuzzStaticExpectStapleState(&state, input);
+
+  return 0;
+}