Add fuzzer for (A)PNG decoder

third_party/WebKit/Source/platform/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
 import("//testing/libfuzzer/fuzzer_test.gni")
 import("//testing/test.gni")
 import("//third_party/WebKit/public/public_features.gni")
 import("//third_party/WebKit/Source/build/scripts/scripts.gni")
@@ skipping 2002 matching lines @@
   sources = [
     "WebIconSizesFuzzer.cpp",
   ]
   deps = [
     ":blink_fuzzer_test_support",
     ":platform",
   ]
   dict = "//testing/libfuzzer/fuzzers/dicts/web_icon_sizes.dict"
 }
 
+fuzzer_test("blink_png_decoder_fuzzer") {
+  sources = [
+    "PngFuzzer.cpp",
+  ]
+  deps = [
+    ":blink_fuzzer_test_support",
+    ":platform",
+    "//third_party/libpng",
+  ]
+  dict = "//testing/libfuzzer/fuzzers/dicts/png.dict"
+  seed_corpus = "//third_party/WebKit/LayoutTests/images/resources/pngfuzz"

[mmoroz, 2017/01/04 08:37:54]

I like your idea to have multiple seed corpus directories, but we do not support
it at the moment. Though it would be easy to implement. I'll do it and update
this config file then (filed: crbug.com/678181)

+}
+
 # Fuzzer for blink::JSONParser.
 fuzzer_test("blink_json_parser_fuzzer") {
   sources = [
     "json/JSONParserFuzzer.cpp",
   ]
   deps = [
     ":blink_fuzzer_test_support",
     ":platform",
   ]
   dict = "//testing/libfuzzer/fuzzers/dicts/json.dict"
@@ skipping 37 matching lines @@
     "//third_party/WebKit/Source:config",
     "//third_party/WebKit/Source:inside_blink",
   ]
 
   deps = [
     ":test_support",
     "//testing/gmock",
     "//testing/gtest",
   ]
 }