Initial fuzzer for SpdySession

net/BUILD.gn

Index: net/BUILD.gn
diff --git a/net/BUILD.gn b/net/BUILD.gn
index 928d1af83dcbf8f870f59b487989fa3cc2708cd9..33ae23d8c4f37b7d1105687fb9872a01d0e33757 100644
--- a/net/BUILD.gn
+++ b/net/BUILD.gn
@@ -2355,6 +2355,8 @@ static_library("test_support") {
     "proxy/proxy_config_service_common_unittest.h",
     "socket/socket_test_util.cc",
     "socket/socket_test_util.h",
+    "spdy/spdy_test_util_common.cc",
+    "spdy/spdy_test_util_common.h",
     "test/cert_test_util.cc",
     "test/cert_test_util.h",
     "test/cert_test_util_nss.cc",
@@ -4656,8 +4658,6 @@ test("net_unittests") {
     "spdy/spdy_stream_test_util.cc",
     "spdy/spdy_stream_test_util.h",
     "spdy/spdy_stream_unittest.cc",
-    "spdy/spdy_test_util_common.cc",
-    "spdy/spdy_test_util_common.h",
     "spdy/spdy_test_utils.cc",
     "spdy/spdy_test_utils.h",
     "spdy/spdy_write_queue_unittest.cc",
@@ -5666,6 +5666,20 @@ fuzzer_test("net_http_server_fuzzer") {
   seed_corpus = "data/fuzzer_data/http_server_requests/"
 }
 
+fuzzer_test("net_spdy_session_fuzzer") {
+  sources = [
+    "spdy/spdy_session_fuzzer.cc",
+  ]
+  deps = [
+    ":net_fuzzer_test_support",
+    ":test_support",
+    "//base",
+    "//net",
+  ]
+  dict = "data/fuzzer_dictionaries/net_spdy_session_fuzzer.dict"
+  seed_corpus = "data/fuzzer_data/net_spdy_session_fuzzer/"
+}
+
 if (host_toolchain == current_toolchain && !is_proto_quic) {
   executable("transport_security_state_generator") {
     sources = [