Move fuzzers to testing/fuzzers.

Move them out of testing/libfuzzer, to make it possible to pull
libfuzzer into that directory. Leave testing/libfuzzer/BUILD.gn there
for now as a transitional build file.

BUG=pdfium:1088

Change-Id: I4126d89dd3e075ac63477a4860e029c135866dbe
Reviewed-on: https://pdfium-review.googlesource.com/32896
Commit-Queue: Lei Zhang <thestig@chromium.org>
Reviewed-by: dsinclair <dsinclair@chromium.org>

1 files changed, 27 insertions, 0 deletions

diff --git a/testing/fuzzers/pdf_css_fuzzer.cc b/testing/fuzzers/pdf_css_fuzzer.cc
new file mode 100644
index 0000000000..4f2f410aa3
--- /dev/null
+++ b/testing/fuzzers/pdf_css_fuzzer.cc
@@ -0,0 +1,27 @@
+// Copyright 2016 The PDFium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include <memory>
+
+#include "core/fxcrt/css/cfx_css.h"
+#include "core/fxcrt/css/cfx_csssyntaxparser.h"
+#include "core/fxcrt/fx_string.h"
+#include "core/fxcrt/retain_ptr.h"
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
+  WideString input =
+      WideString::FromUTF8(ByteStringView(data, static_cast<size_t>(size)));
+
+  // If we convert the input into an empty string bail out.
+  if (input.GetLength() == 0)
+    return 0;
+
+  CFX_CSSSyntaxParser parser(input.c_str(), input.GetLength());
+  CFX_CSSSyntaxStatus status;
+  do {
+    status = parser.DoSyntaxParse();
+  } while (status != CFX_CSSSyntaxStatus::Error &&
+           status != CFX_CSSSyntaxStatus::EOS);
+  return 0;
+}