cast_framer_ingest_fuzzer.cc 1.6 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
  1. // Copyright 2018 The Chromium Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style license that can be
  3. // found in the LICENSE file.
  4. #include <stddef.h>
  5. #include <stdint.h>
  6. #include <memory>
  7. #include "base/memory/ref_counted.h"
  8. #include "components/cast_channel/cast_channel_enum.h"
  9. #include "components/cast_channel/cast_framer.h"
  10. #include "net/base/io_buffer.h"
  11. #include "third_party/openscreen/src/cast/common/channel/proto/cast_channel.pb.h"
  12. // Silence logging from the protobuf library.
  13. google::protobuf::LogSilencer log_silencer;
  14. namespace cast_channel {
  15. extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
  16. if (size > MessageFramer::MessageHeader::max_message_size())
  17. return 0;
  18. scoped_refptr<net::GrowableIOBuffer> buffer =
  19. base::MakeRefCounted<net::GrowableIOBuffer>();
  20. buffer->SetCapacity(MessageFramer::MessageHeader::max_message_size());
  21. memcpy(buffer->StartOfBuffer(), data, size);
  22. std::unique_ptr<MessageFramer> framer =
  23. std::make_unique<MessageFramer>(buffer.get());
  24. size_t bytes_ingested = 0u;
  25. size_t bytes_to_read =
  26. std::min(framer->BytesRequested(), size - bytes_ingested);
  27. while (bytes_to_read > 0u && bytes_ingested < size) {
  28. ChannelError unused_error;
  29. size_t unused_message_length;
  30. std::unique_ptr<CastMessage> unused_cast_message =
  31. framer->Ingest(bytes_to_read, &unused_message_length, &unused_error);
  32. bytes_ingested += bytes_to_read;
  33. bytes_to_read = std::min(framer->BytesRequested(), size - bytes_ingested);
  34. }
  35. return 0;
  36. }
  37. } // namespace cast_channel