[Zucchini] (raw) Apply fuzzer

This is part of a series of Fuzzers to be added to Zucchini for
security review. This tests the raw data patch application logic
exercising the patch reader and apply process. It only covers ~20%
of code in 100000 executions as the bulk of the remaining code is
associated with the much more complex and expensive to fuzz reference
related code.

With the supplied seed corpus the fuzzer reaches approximately 11000
execs/s.

This found a couple bugs which are fixed in:
https://chromium-review.googlesource.com/c/chromium/src/+/1028575

Bug: 835341
Change-Id: Idc1d862bfaa6eb6313f39e10536f4750c05ab863
Reviewed-on: https://chromium-review.googlesource.com/1028570
Commit-Queue: Calder Kitagawa <ckitagawa@google.com>
Reviewed-by: Samuel Huang <huangs@chromium.org>
Reviewed-by: Greg Thompson <grt@chromium.org>
Reviewed-by: Max Moroz <mmoroz@chromium.org>
Reviewed-by: Jonathan Metzman <metzman@chromium.org>
Cr-Commit-Position: refs/heads/master@{#557185}
NOKEYCHECK=True
GitOrigin-RevId: f4a598ff5adfe27f8153bd36984ee9cb549f99e9

1 files changed, 5 insertions, 0 deletions

diff --git a/BUILD.gn b/BUILD.gn
index f36c949..49f54fb 100644
--- a/BUILD.gn
+++ b/BUILD.gn
@@ -209,4 +209,9 @@ group("zucchini_fuzzers") {
     "//components/zucchini/fuzzers:zucchini_disassembler_win32_fuzzer",
     "//components/zucchini/fuzzers:zucchini_patch_fuzzer",
   ]
+
+  # Ensure protoc is available.
+  if (current_toolchain == host_toolchain) {
+    deps += [ "//components/zucchini/fuzzers:zucchini_raw_apply_fuzzer" ]
+  }
 }