Bug 1753955 - Add a fuzzing target for MIME subsystem. r=jtracey,kaie,rjl,valentin

Differential Revision: https://phabricator.services.mozilla.com/D137995

--HG--
extra : amend_source : 4afd7533b32e95b0cfcdfcf57a89a45f782f5ad9

Author: choller

mailnews/base/src/moz.build

@@ -161,3 +161,6 @@ FINAL_LIBRARY = "mail"
 XPCOM_MANIFESTS += [
     "components.conf",
 ]
+
+# Add libFuzzer configuration directives
+include("/tools/fuzzing/libfuzzer-config.mozbuild")

mailnews/extensions/smime/moz.build

@@ -40,3 +40,6 @@ LOCAL_INCLUDES += [
 ]
 
 XPCOM_MANIFESTS += ["components.conf"]
+
+# Add libFuzzer configuration directives
+include("/tools/fuzzing/libfuzzer-config.mozbuild")

mailnews/mime/fuzz/TestMimeFuzz.cpp

@@ -0,0 +1,89 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at https://mozilla.org/MPL/2.0/. */
+
+#include "FuzzingInterfaceStream.h"
+
+#include "mozilla/NullPrincipal.h"
+#include "mozilla/fuzzing/FuzzingStreamListener.h"
+
+#include "nsICategoryManager.h"
+#include "nsIChannel.h"
+#include "nsIInputStream.h"
+#include "nsILoadInfo.h"
+#include "nsIMimeConverter.h"
+#include "nsIServiceManager.h"
+#include "nsIStreamConverterService.h"
+#include "nsIStreamListener.h"
+#include "nsIURL.h"
+
+#include "nsCOMPtr.h"
+#include "nsMsgUtils.h"
+#include "nsNetCID.h"
+#include "nsNetUtil.h"
+#include "nsString.h"
+#include "nsServiceManagerUtils.h"
+
+using namespace mozilla;
+using namespace mozilla::net;
+
+static int InitMimeDecoder(int* argc, char*** argv) { return 0; }
+
+static int FuzzingMimeDecoder(nsCOMPtr<nsIInputStream> stream) {
+  nsresult rv;
+
+  nsCOMPtr<nsIChannel> channel;
+  nsCOMPtr<nsILoadGroup> loadGroup;
+  nsCOMPtr<nsIURI> uri;
+
+  rv = NS_NewURI(getter_AddRefs(uri), "about:blank");
+
+  if (NS_FAILED(rv)) {
+    MOZ_CRASH("Call to NS_NewURI() failed.");
+  }
+
+  nsCOMPtr<nsIPrincipal> nullPrincipal =
+      NullPrincipal::CreateWithoutOriginAttributes();
+
+  rv = NS_NewInputStreamChannel(
+      getter_AddRefs(channel), uri, stream.forget(), nullPrincipal,
+      nsILoadInfo::SEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULL,
+      nsIContentPolicy::TYPE_OTHER);
+
+  if (NS_FAILED(rv)) {
+    MOZ_CRASH("Call to NS_NewInputStreamChannel() failed.");
+  }
+
+  nsCOMPtr<nsIStreamListener> conversionListener;
+  nsCOMPtr<nsIStreamConverterService> streamConverter =
+      do_GetService("@mozilla.org/streamConverters;1", &rv);
+
+  if (NS_FAILED(rv)) {
+    MOZ_CRASH("Call to do_GetService() failed.");
+  }
+
+  // This listener will simply consume all of our data and record when
+  // the request is stopped so we can synchronize the fuzzing loop.
+  RefPtr<FuzzingStreamListener> streamListener = new FuzzingStreamListener();
+
+  rv = streamConverter->AsyncConvertData("message/rfc822", "*/*",
+                                         streamListener, channel,
+                                         getter_AddRefs(conversionListener));
+
+  if (NS_FAILED(rv)) {
+    MOZ_CRASH("Call to AsyncConvertData() failed.");
+  }
+
+  rv = channel->AsyncOpen(conversionListener);
+
+  if (NS_FAILED(rv)) {
+    MOZ_CRASH("Call to AsyncOpen() failed.");
+  }
+
+  // Wait for StopRequest.
+  streamListener->waitUntilDone();
+
+  return 0;
+}
+
+MOZ_FUZZING_INTERFACE_STREAM(InitMimeDecoder, FuzzingMimeDecoder, MimeDecoder);

mailnews/mime/fuzz/moz.build

@@ -0,0 +1,12 @@
+# vim: set filetype=python:
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+Library("FuzzingMime")
+
+SOURCES += [
+    "TestMimeFuzz.cpp",
+]
+
+FINAL_LIBRARY = "xul-gtest"

mailnews/mime/moz.build

@@ -15,6 +15,9 @@ DIRS += [
 
 TEST_DIRS += ["test"]
 
+if CONFIG["FUZZING_INTERFACES"]:
+    DIRS += ["fuzz"]
+
 EXTRA_JS_MODULES.jsmime += [
     "jsmime/jsmime.mjs",
 ]

mailnews/mime/src/moz.build

@@ -83,3 +83,6 @@ XPCOM_MANIFESTS += [
 FINAL_LIBRARY = "mail"
 
 DEFINES["ENABLE_SMIME"] = True
+
+# Add libFuzzer configuration directives
+include("/tools/fuzzing/libfuzzer-config.mozbuild")

mailnews/news/src/moz.build

@@ -28,3 +28,6 @@ XPCOM_MANIFESTS += [
 ]
 
 FINAL_LIBRARY = "mail"
+
+# Add libFuzzer configuration directives
+include("/tools/fuzzing/libfuzzer-config.mozbuild")