Add fuzzers for SDP and STUN parsing.

webrtc/test/fuzzers/stun_parser_fuzzer.cc

 /*
  *  Copyright (c) 2016 The WebRTC project authors. All Rights Reserved.
  *
  *  Use of this source code is governed by a BSD-style license
  *  that can be found in the LICENSE file in the root of the source
  *  tree. An additional intellectual property rights grant can be found
  *  in the file PATENTS.  All contributing project authors may
  *  be found in the AUTHORS file in the root of the source tree.
  */
-#include "webrtc/modules/rtp_rtcp/source/rtp_packet_received.h"
+
+#include <stddef.h>
+#include <stdint.h>
+
+#include "webrtc/p2p/base/stun.h"
 
 namespace webrtc {
+void FuzzOneInput(const uint8_t* data, size_t size) {
+  auto message = reinterpret_cast<const char*>(data);
 
-void FuzzOneInput(const uint8_t* data, size_t size) {
-  RtpPacketReceived packet;
-
-  packet.Parse(data, size);
-
-  // Call packet accessors because they have extra checks.
-  packet.Marker();
-  packet.PayloadType();
-  packet.SequenceNumber();
-  packet.Timestamp();
-  packet.Ssrc();
-  packet.Csrcs();
+  // Normally we'd check the integrity first; that's done elsewhere.

[pbos-webrtc, 2016/06/06 16:20:42]

"but integrity is fuzzed separately in stun_validator_fuzzer.cc", or otherwise
motivate why the attack surface is still valid.

[katrielc, 2016/06/06 16:32:21]

Done.

+  std::unique_ptr<cricket::IceMessage> stun_msg(new cricket::IceMessage());
+  rtc::ByteBufferReader buf(message, size);
+  stun_msg->Read(&buf);
 }
-
 }  // namespace webrtc
-