summaryrefslogtreecommitdiff
path: root/chromium/testing/libfuzzer
diff options
context:
space:
mode:
authorAllan Sandfeld Jensen <allan.jensen@qt.io>2020-10-12 14:27:29 +0200
committerAllan Sandfeld Jensen <allan.jensen@qt.io>2020-10-13 09:35:20 +0000
commitc30a6232df03e1efbd9f3b226777b07e087a1122 (patch)
treee992f45784689f373bcc38d1b79a239ebe17ee23 /chromium/testing/libfuzzer
parent7b5b123ac58f58ffde0f4f6e488bcd09aa4decd3 (diff)
downloadqtwebengine-chromium-85-based.tar.gz
BASELINE: Update Chromium to 85.0.4183.14085-based
Change-Id: Iaa42f4680837c57725b1344f108c0196741f6057 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
Diffstat (limited to 'chromium/testing/libfuzzer')
-rw-r--r--chromium/testing/libfuzzer/README.md2
-rw-r--r--chromium/testing/libfuzzer/fuzzer_test.gni2
-rw-r--r--chromium/testing/libfuzzer/proto/skia_image_filter.proto2
-rw-r--r--chromium/testing/libfuzzer/proto/skia_image_filter_proto_converter.cc3
4 files changed, 6 insertions, 3 deletions
diff --git a/chromium/testing/libfuzzer/README.md b/chromium/testing/libfuzzer/README.md
index 29dc829775d..60bc0a96c16 100644
--- a/chromium/testing/libfuzzer/README.md
+++ b/chromium/testing/libfuzzer/README.md
@@ -36,6 +36,7 @@ Started Guide].
***
* [Reproducing bugs] found by libFuzzer/AFL and reported by ClusterFuzz.
+* [Fuzzing mojo interfaces] using automatically generated libprotobuf-mutator fuzzers.
## Further Reading
@@ -65,6 +66,7 @@ Started Guide].
[Creating a fuzz target that expects a protobuf]: libprotobuf-mutator.md
[Detailed references]: reference.md
[Fuzzing]: https://en.wikipedia.org/wiki/Fuzzing
+[Fuzzing mojo interfaces]: ../../mojo/docs/mojolpm.md
[Getting Started Guide]: getting_started.md
[Guided in-process fuzzing of Chrome components]: https://security.googleblog.com/2016/08/guided-in-process-fuzzing-of-chrome.html
[Improving fuzz target efficiency]: efficient_fuzzing.md
diff --git a/chromium/testing/libfuzzer/fuzzer_test.gni b/chromium/testing/libfuzzer/fuzzer_test.gni
index b46b653564a..9ea466b8692 100644
--- a/chromium/testing/libfuzzer/fuzzer_test.gni
+++ b/chromium/testing/libfuzzer/fuzzer_test.gni
@@ -63,6 +63,8 @@ template("fuzzer_test") {
action(target_name + "_seed_corpus") {
script = "//testing/libfuzzer/archive_corpus.py"
+ testonly = true
+
args = [
"--output",
rebase_path(out, root_build_dir),
diff --git a/chromium/testing/libfuzzer/proto/skia_image_filter.proto b/chromium/testing/libfuzzer/proto/skia_image_filter.proto
index a495618439c..3448f551a57 100644
--- a/chromium/testing/libfuzzer/proto/skia_image_filter.proto
+++ b/chromium/testing/libfuzzer/proto/skia_image_filter.proto
@@ -350,7 +350,7 @@ message Paint {
enum Style {
kFill_Style = 0;
kStroke_Style = 1;
- kStrokeAndFill_Style = 2;
+ kStrokeAndFill_Style = 2; // no longer needed/used
}
enum StrokeCap {
diff --git a/chromium/testing/libfuzzer/proto/skia_image_filter_proto_converter.cc b/chromium/testing/libfuzzer/proto/skia_image_filter_proto_converter.cc
index f6fece43fa9..46814c562a7 100644
--- a/chromium/testing/libfuzzer/proto/skia_image_filter_proto_converter.cc
+++ b/chromium/testing/libfuzzer/proto/skia_image_filter_proto_converter.cc
@@ -949,8 +949,7 @@ void Converter::Visit(const Paint& paint) {
if (stroke_style_used_) {
style = Paint::kFill_Style;
- } else if (style == Paint::kStrokeAndFill_Style ||
- style == Paint::kStroke_Style) {
+ } else if (style == Paint::kStroke_Style) {
stroke_style_used_ = true;
// Avoid timeouts.
stroke_cap = Paint::kButt_Cap;