chromium/content/test/fuzzer/image_capture_mojolpm_fuzzer.proto

// Copyright 2022 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

// Message format for the MojoLPM fuzzer for the ImageCapture interface.

syntax = "proto2";

package content.fuzzing.image_capture.proto;

import "media/capture/mojom/image_capture.mojom.mojolpm.proto";

// Bind a new ImageCapture remote
message NewImageCaptureAction {
  required uint32 id = 1;
}

// Run the specific sequence for (an indeterminate) period. This is not
// intended to create a specific ordering, but to allow the fuzzer to delay a
// later task until previous tasks have completed.
message RunThreadAction {
  enum ThreadId {
    IO = 0;
    UI = 1;
  }

  required ThreadId id = 1;
}

// Actions that can be performed by the fuzzer.
message Action {
  oneof action {
    NewImageCaptureAction new_image_capture = 1;
    RunThreadAction run_thread = 2;
    mojolpm.media.mojom.ImageCapture.RemoteAction image_capture_remote_action =
        3;
  }
}

// Sequence provides a level of indirection which allows Testcase to compactly
// express repeated sequences of actions.
message Sequence {
  repeated uint32 action_indexes = 1 [packed = true];
}

// Testcase is the top-level message type interpreted by the fuzzer.
message Testcase {
  repeated Action actions = 1;
  repeated Sequence sequences = 2;
  repeated uint32 sequence_indexes = 3 [packed = true];
}