netty: Add fuzz test for HttpRequestDecoder

projects/netty/pom.xml

@@ -11,7 +11,7 @@
 		<maven.compiler.source>15</maven.compiler.source>
 		<maven.compiler.target>15</maven.compiler.target>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-		<fuzzedLibaryVersion>4.1.85.Final</fuzzedLibaryVersion>
+		<fuzzedLibaryVersion>4.1.115.Final</fuzzedLibaryVersion>
 		<exec.mainClass>io.netty.handler.codec.http.cookie.ServerCookieDecoderFuzzer</exec.mainClass>
 	</properties>
 
@@ -32,7 +32,7 @@
 		<dependency>
 			<groupId>com.code-intelligence</groupId>
 			<artifactId>jazzer-api</artifactId>
-			<version>0.12.0</version>
+			<version>0.22.1</version>
 		</dependency>
 		<dependency>
 			<groupId>io.netty</groupId>

projects/netty/project.yaml

@@ -5,6 +5,7 @@ primary_contact: "[email protected]"
 auto_ccs:
   - "[email protected]"
   - "[email protected]"
+  - "[email protected]"
 fuzzing_engines:
   - libfuzzer
 sanitizers:

projects/netty/src/main/java/io/netty/handler/HandlerFuzzerBase.java

@@ -0,0 +1,35 @@
+// Copyright 2024 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+////////////////////////////////////////////////////////////////////////////////
+
+package io.netty.handler;
+
+import com.code_intelligence.jazzer.api.FuzzedDataProvider;
+import io.netty.buffer.Unpooled;
+import io.netty.channel.embedded.EmbeddedChannel;
+
+/**
+ * Base class for fuzzing the input of an inbound handler. Will report exceptions thrown by the handler.
+ */
+public abstract class HandlerFuzzerBase {
+    protected final EmbeddedChannel channel = new EmbeddedChannel();
+
+    public void test(FuzzedDataProvider provider) {
+        byte[] bytes = provider.consumeRemainingAsBytes();
+        channel.writeInbound(Unpooled.wrappedBuffer(bytes));
+        channel.finishAndReleaseAll();
+        channel.checkException();
+    }
+}

projects/netty/src/main/java/io/netty/handler/codec/http/HttpRequestDecoderFuzzer.java

@@ -0,0 +1,30 @@
+// Copyright 2024 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+////////////////////////////////////////////////////////////////////////////////
+
+package io.netty.handler.codec.http;
+
+import com.code_intelligence.jazzer.api.FuzzedDataProvider;
+import io.netty.handler.HandlerFuzzerBase;
+
+public class HttpRequestDecoderFuzzer extends HandlerFuzzerBase {
+    {
+        channel.pipeline().addLast(new HttpRequestDecoder());
+    }
+
+    public static void fuzzerTestOneInput(FuzzedDataProvider fuzzedDataProvider) {
+        new HttpRequestDecoderFuzzer().test(fuzzedDataProvider);
+    }
+}