sandbox/win/fuzzer/sandbox_ipc_fuzzer.cc

// Copyright 2017 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include <stddef.h>
#include <stdint.h>

#include "sandbox/win/src/crosscall_server.h"
#include "sandbox/win/src/ipc_args.h"

extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
  uint32_t output_size = 0;
  std::unique_ptr<sandbox::CrossCallParamsEx> params(
      sandbox::CrossCallParamsEx::CreateFromBuffer(const_cast<uint8_t*>(data),
                                                   size, &output_size));

  if (!params.get())
    return 0;

  uint32_t tag = params->GetTag();
  sandbox::IPCParams ipc_params = {0};
  ipc_params.ipc_tag = tag;
  void* args[sandbox::kMaxIpcParams];
  sandbox::GetArgs(params.get(), &ipc_params, args);
  sandbox::ReleaseArgs(&ipc_params, args);
  return 0;
}