blob: 54e2bee949e1ed21e577490ce19f1025c5f90ae8 [file] [log] [blame]
// Copyright 2018 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <stddef.h>
#include <stdint.h>
#include "cc/paint/paint_op_buffer.h"
#include "cc/paint/raw_memory_transfer_cache_entry.h"
#include "cc/test/transfer_cache_test_helper.h"
#include "components/viz/test/test_context_provider.h"
#include "third_party/skia/include/core/SkSurface.h"
#include "third_party/skia/include/gpu/GrContext.h"
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
if (size < 4)
return 0;
scoped_refptr<viz::TestContextProvider> context_provider =
cc::TransferCacheEntryType entry_type =
std::unique_ptr<cc::ServiceTransferCacheEntry> entry =
if (!entry)
return 0;
// Align data.
base::span<const uint8_t> span(&data[4], size - 4);
if (!entry->Deserialize(context_provider->GrContext(), span))
return 0;
// TODO(enne): consider running Serialize() here to fuzz that codepath
// for bugs. However, that requires setting up a real context with
// a raster interface that supports gl operations and that has a
// TransferCacheTestHelper in it so the innards of client and service
// are accessible.
return 0;