Add Expect-CT header parsing

net/BUILD.gn

 # Copyright (c) 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/buildflag_header.gni")
 import("//build/config/chromecast_build.gni")
 import("//build/config/compiler/compiler.gni")
 import("//build/config/crypto.gni")
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
@@ skipping 5688 matching lines @@
     "http/http_auth_challenge_tokenizer_fuzzer.cc",
   ]
   deps = [
     ":net_fuzzer_test_support",
     ":test_support",
     "//base",
     "//net",
   ]
 }
 
+fuzzer_test("net_http_security_headers_expect_ct_fuzzer") {
+  sources = [
+    "http/http_security_headers_expect_ct_fuzzer.cc",
+  ]
+  deps = [
+    ":net_fuzzer_test_support",
+    "//base",
+    "//net",
+    "//url",
+  ]
+  dict = "data/fuzzer_dictionaries/net_http_security_headers_fuzzer.dict"

[mmoroz, 2017/04/21 13:17:58]

I believe it also would be great to have a `seed_corpus` attribute here pointing
to a directory with a few test inputs (something like test inputs from
http_security_headers_unittest.cc).

[estark, 2017/04/21 16:37:31]

Thanks for the tip! I added a seed corpus of the de-duped unit test values from
http_security_headers_unittest.cc. (The HSTS/HPKP/Expect-CT headers are similar
enough that I just used the same corpus for all of them.)

+}
+
 fuzzer_test("net_http_security_headers_hsts_fuzzer") {
   sources = [
     "http/http_security_headers_hsts_fuzzer.cc",
   ]
   deps = [
     "//base",
     "//net",
   ]
   dict = "data/fuzzer_dictionaries/net_http_security_headers_fuzzer.dict"
 }
@@ skipping 57 matching lines @@
   ]
   deps = [
     ":net_fuzzer_test_support",
     ":test_support",
     "//base",
     "//net",
   ]
   dict = "data/fuzzer_dictionaries/net_spdy_session_fuzzer.dict"
   seed_corpus = "data/fuzzer_data/net_spdy_session_fuzzer/"
 }