| OLD | NEW |
| 1 // Copyright 2016 The Chromium Authors. All rights reserved. | 1 // Copyright 2016 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include <memory> | 5 #include <memory> |
| 6 #include <string> | 6 #include <string> |
| 7 | 7 |
| 8 #include "base/memory/ptr_util.h" | 8 #include "base/memory/ptr_util.h" |
| 9 #include "base/memory/singleton.h" | 9 #include "base/memory/singleton.h" |
| 10 #include "base/message_loop/message_loop.h" | 10 #include "base/message_loop/message_loop.h" |
| 11 #include "base/run_loop.h" | 11 #include "base/run_loop.h" |
| 12 #include "base/test/fuzzed_data_provider.h" | 12 #include "base/test/fuzzed_data_provider.h" |
| 13 #include "base/test/scoped_task_scheduler.h" | 13 #include "base/test/scoped_task_scheduler.h" |
| 14 #include "base/threading/thread_task_runner_handle.h" | 14 #include "base/threading/thread_task_runner_handle.h" |
| 15 #include "net/http/http_request_headers.h" | 15 #include "net/http/http_request_headers.h" |
| 16 #include "net/traffic_annotation/network_traffic_annotation_test_helper.h" |
| 16 #include "net/url_request/data_protocol_handler.h" | 17 #include "net/url_request/data_protocol_handler.h" |
| 17 #include "net/url_request/url_request.h" | 18 #include "net/url_request/url_request.h" |
| 18 #include "net/url_request/url_request_job_factory_impl.h" | 19 #include "net/url_request/url_request_job_factory_impl.h" |
| 19 #include "net/url_request/url_request_test_util.h" | 20 #include "net/url_request/url_request_test_util.h" |
| 20 | 21 |
| 21 namespace { | 22 namespace { |
| 22 | 23 |
| 23 const size_t kMaxLengthForFuzzedRange = 32; | 24 const size_t kMaxLengthForFuzzedRange = 32; |
| 24 | 25 |
| 25 } // namespace | 26 } // namespace |
| (...skipping 47 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 73 // ensure that if it's a URL, it's a data URL. If the URL is invalid just | 74 // ensure that if it's a URL, it's a data URL. If the URL is invalid just |
| 74 // use a test variant, so the fuzzer has a chance to execute something. | 75 // use a test variant, so the fuzzer has a chance to execute something. |
| 75 std::string data_url_string = | 76 std::string data_url_string = |
| 76 std::string("data:") + provider.ConsumeRemainingBytes(); | 77 std::string("data:") + provider.ConsumeRemainingBytes(); |
| 77 GURL data_url(data_url_string); | 78 GURL data_url(data_url_string); |
| 78 if (!data_url.is_valid()) | 79 if (!data_url.is_valid()) |
| 79 data_url = GURL("data:text/html;charset=utf-8,<p>test</p>"); | 80 data_url = GURL("data:text/html;charset=utf-8,<p>test</p>"); |
| 80 | 81 |
| 81 // Create a URLRequest with the given data URL and start reading | 82 // Create a URLRequest with the given data URL and start reading |
| 82 // from it. | 83 // from it. |
| 83 std::unique_ptr<net::URLRequest> request = | 84 std::unique_ptr<net::URLRequest> request = context_.CreateRequest( |
| 84 context_.CreateRequest(data_url, net::DEFAULT_PRIORITY, this); | 85 data_url, net::DEFAULT_PRIORITY, this, TRAFFIC_ANNOTATION_FOR_TESTS); |
| 85 if (use_range) { | 86 if (use_range) { |
| 86 if (!net::HttpUtil::IsValidHeaderValue(range)) | 87 if (!net::HttpUtil::IsValidHeaderValue(range)) |
| 87 range = "bytes=3-"; | 88 range = "bytes=3-"; |
| 88 request->SetExtraRequestHeaderByName("Range", range, true); | 89 request->SetExtraRequestHeaderByName("Range", range, true); |
| 89 } | 90 } |
| 90 | 91 |
| 91 // Block the thread while the request is read. | 92 // Block the thread while the request is read. |
| 92 base::RunLoop read_loop; | 93 base::RunLoop read_loop; |
| 93 read_loop_ = &read_loop; | 94 read_loop_ = &read_loop; |
| 94 request->Start(); | 95 request->Start(); |
| (...skipping 74 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 169 base::RunLoop* read_loop_; | 170 base::RunLoop* read_loop_; |
| 170 | 171 |
| 171 DISALLOW_COPY_AND_ASSIGN(URLRequestDataJobFuzzerHarness); | 172 DISALLOW_COPY_AND_ASSIGN(URLRequestDataJobFuzzerHarness); |
| 172 }; | 173 }; |
| 173 | 174 |
| 174 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { | 175 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { |
| 175 // Using a static singleton test harness lets the test run ~3-4x faster. | 176 // Using a static singleton test harness lets the test run ~3-4x faster. |
| 176 return URLRequestDataJobFuzzerHarness::GetInstance() | 177 return URLRequestDataJobFuzzerHarness::GetInstance() |
| 177 ->CreateAndReadFromDataURLRequest(data, size); | 178 ->CreateAndReadFromDataURLRequest(data, size); |
| 178 } | 179 } |
| OLD | NEW |