BASELINE: Update Chromium to 76.0.3809.94

Change-Id: I321c3f5f929c105aec0f98c5091ef6108822e647
Reviewed-by: Michael Brüning <michael.bruning@qt.io>

1 files changed, 31 insertions, 0 deletions

diff --git a/chromium/media/parsers/vp8_parser_fuzzertest.cc b/chromium/media/parsers/vp8_parser_fuzzertest.cc
new file mode 100644
index 00000000000..75cc6bb317b
--- /dev/null
+++ b/chromium/media/parsers/vp8_parser_fuzzertest.cc
@@ -0,0 +1,31 @@
+// Copyright 2016 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include <stddef.h>
+#include <stdint.h>
+
+#include "base/numerics/safe_conversions.h"
+#include "media/filters/ivf_parser.h"
+#include "media/parsers/vp8_parser.h"
+
+// Entry point for LibFuzzer.
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
+  const uint8_t* ivf_payload = nullptr;
+  media::IvfParser ivf_parser;
+  media::IvfFileHeader ivf_file_header;
+  media::IvfFrameHeader ivf_frame_header;
+
+  if (!ivf_parser.Initialize(data, size, &ivf_file_header))
+    return 0;
+
+  // Parse until the end of stream/unsupported stream/error in stream is found.
+  while (ivf_parser.ParseNextFrame(&ivf_frame_header, &ivf_payload)) {
+    media::Vp8Parser vp8_parser;
+    media::Vp8FrameHeader vp8_frame_header;
+    vp8_parser.ParseFrame(ivf_payload, ivf_frame_header.frame_size,
+                          &vp8_frame_header);
+  }
+
+  return 0;
+}