Add a fuzzer for png_process_data

testing/libfuzzer/fuzzers/BUILD.gn

 # Copyright 2015 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # Individual libfuzzer tests that didn't find their home yet.
 
 import("//build/config/features.gni")
 import("//media/media_options.gni")
 import("//testing/libfuzzer/fuzzer_test.gni")
 
@@ skipping 145 matching lines @@
 
 fuzzer_test("base_json_reader_fuzzer") {
   sources = [
     "base_json_reader_fuzzer.cc",
   ]
   deps = [
     "//base",
   ]
 }
 
+libpng_seed_corpuses = [

[mmoroz, 2017/03/06 19:37:30]

Nice! Maybe even rename it to "png_seed_corpus", but up to you.

+  "//cc/test/data",
+  "//third_party/WebKit/LayoutTests/images/png-suite/samples",
+  "//third_party/WebKit/LayoutTests/images/resources/pngfuzz",
+]
+
 fuzzer_test("gfx_png_image_fuzzer") {
   sources = [
     "gfx_png_image_fuzzer.cc",
   ]
   deps = [
     "//base",
     "//ui/gfx",
   ]
   dict = "dicts/png.dict"
-  seed_corpuses = [
-    "//cc/test/data",
-    "//third_party/WebKit/LayoutTests/images/png-suite/samples",
-    "//third_party/WebKit/LayoutTests/images/resources/pngfuzz",
-  ]
+  seed_corpuses = libpng_seed_corpuses
 }
 
 fuzzer_test("zlib_uncompress_fuzzer") {
   sources = [
     "zlib_uncompress_fuzzer.cc",
   ]
   deps = [
     "//third_party/zlib",
   ]
 }
@@ skipping 10 matching lines @@
 
 fuzzer_test("libpng_read_fuzzer") {
   sources = [
     "libpng_read_fuzzer.cc",
   ]
   deps = [
     "//base",
     "//third_party/libpng",
   ]
   dict = "dicts/png.dict"
-  seed_corpuses = [
-    "//cc/test/data",
-    "//third_party/WebKit/LayoutTests/images/png-suite/samples",
-    "//third_party/WebKit/LayoutTests/images/resources/pngfuzz",
+  seed_corpuses = libpng_seed_corpuses
+}
+
+fuzzer_test("libpng_progressive_read_fuzzer") {
+  sources = [
+    "libpng_read_fuzzer.cc",
   ]
+  defines = [ "PNG_FUZZ_PROGRESSIVE" ]
+  deps = [
+    "//base",
+    "//third_party/libpng",
+  ]
+  dict = "dicts/png.dict"
+  seed_corpuses = libpng_seed_corpuses
 }
 
 fuzzer_test("v8_script_parser_fuzzer") {
   sources = []
   deps = [
     "//v8:parser_fuzzer",
   ]
   dict = "dicts/generated/v8_script_parser_fuzzer.dict"
   seed_corpus = "//v8/test/mjsunit/regress/"
 }
@@ skipping 212 matching lines @@
 }
 
 fuzzer_test("hash_fuzzer") {
   sources = [
     "hash_fuzzer.cc",
   ]
   deps = [
     "//base",
   ]
 }