GitLab

net_backoff_entry_serializer_fuzzer found an input that contains a very
large failure_count. BackoffEntrySerializer::DeserializeFromValue loops
|failure_count| times to initialize the BackoffEntry. In the worst case,
we could wind up looping MAX_INT times.

This CL modifies BackoffEntrySerializer::DeserializeFromValue to cap the
failure_count to a maximum value.

Bug: 1112132
Change-Id: Ifb7b6bf02161348b6f237b23b016f9fb0fee7fc9
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2336853
Commit-Queue: Dan McArdle <dmcardle@chromium.org>
Reviewed-by: Maksim Orlovich <morlovich@chromium.org>
Cr-Commit-Position: refs/heads/master@{#795066}