Origin policy: add back a fuzzer for the parser

Fixed: 1060184
Change-Id: I8e16621050b2a37d8126b7edc3d9c10d2442758b
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2106560Reviewed-by: Kinuko Yasuda <kinuko@chromium.org>
Reviewed-by: Robert Sesek <rsesek@chromium.org>
Reviewed-by: Daniel Vogelheim <vogelheim@chromium.org>
Commit-Queue: Domenic Denicola <domenic@chromium.org>
Cr-Commit-Position: refs/heads/master@{#751334}

services/network/BUILD.gn

@@ -493,3 +493,16 @@ fuzzer_test("network_content_security_policy_fuzzer") {
   dict = "//testing/libfuzzer/fuzzers/dicts/content_security_policy.dict"
   seed_corpus = "//testing/libfuzzer/fuzzers/content_security_policy_corpus"
 }
+
+fuzzer_test("origin_policy_parser_fuzzer") {
+  sources = [ "origin_policy/origin_policy_parser_fuzzer.cc" ]
+  deps = [
+    "//base",
+    "//net",
+    "//services/network:network_service",
+    "//services/network/public/cpp",
+    "//services/network/public/mojom",
+  ]
+  dict = "origin_policy/origin_policy_parser_fuzzer.dict"
+  seed_corpus = "origin_policy/origin_policy_parser_fuzzer_corpus"
+}

services/network/origin_policy/origin_policy_parser_fuzzer.cc

+// Copyright 2020 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include <stddef.h>
+#include <stdint.h>
+
+#include "base/strings/string_piece.h"
+#include "services/network/origin_policy/origin_policy_parser.h"
+
+namespace content {
+
+extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
+  network::OriginPolicyParser::Parse(
+      base::StringPiece(reinterpret_cast<const char*>(data), size));
+  return 0;
+}
+
+}  // namespace content

services/network/origin_policy/origin_policy_parser_fuzzer.dict

+# Copyright 2020 The Chromium Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+"\"ids\""
+"\"content_security\""
+"\"policies\""
+"\"policies_report_only\""
+"\"features\""
+"\"policy\""
+"\"policy_report_only\""
+"\"isolation\""
+"\"prefer_isolated_event_loop\""
+"\"prefer_isolated_memory\""
+"\"for_side_channel_protection\""
+"\"for_memory_measurement\""
+"true"
+"false"

services/network/origin_policy/origin_policy_parser_fuzzer_corpus/all.txt

+{
+  "ids": ["my-policy", "!"],
+  "features": {
+    "policy": "does not matter",
+    "policy_report_only": "does not matter"
+  },
+  "content_security": {
+    "policies": ["does not matter", "does not matter"],
+    "policies_report_only": ["does not matter", "does not matter"]
+  },
+  "isolation": {
+    "prefer_isolated_event_loop": true,
+    "prefer_isolated_memory": false,
+    "for_side_channel_protection": true,
+    "for_memory_measurement": false
+  }
+}

services/network/origin_policy/origin_policy_parser_fuzzer_corpus/empty.txt

+{}