[accessibility] Construct a BrowserAccessibilityStateImpl in fuzz test

Fixed: 1475161 Change-Id: I56bc106b2edfc1ce1a4d7131ee842a8ebe19f0a4 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4822469 Reviewed-by: Jonathan Metzman <[email protected]> Auto-Submit: Greg Thompson <[email protected]> Commit-Queue: Jonathan Metzman <[email protected]> Cr-Commit-Position: refs/heads/main@{#1190062}
MyoungJinNam · Aug 30, 2023 · 2abf08f · 2abf08f
1 parent 677e0dc
commit 2abf08f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/content/test/fuzzer/browser_accessibility_fuzzer.cc b/content/test/fuzzer/browser_accessibility_fuzzer.cc
@@ -8,6 +8,7 @@
 #include "base/command_line.h"
 #include "content/browser/accessibility/browser_accessibility.h"
 #include "content/browser/accessibility/browser_accessibility_manager.h"
+#include "content/browser/accessibility/browser_accessibility_state_impl.h"
 #include "content/browser/accessibility/one_shot_accessibility_tree_search.h"
 #include "content/browser/accessibility/test_browser_accessibility_delegate.h"
 #include "content/public/test/browser_task_environment.h"
@@ -71,6 +72,7 @@ void AddStates(FuzzedDataProvider& fdp, ui::AXNodeData* node) {
 // functions that walk the tree in various ways to ensure they don't crash.
 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
   static Env env;
+  auto accessibility_state = BrowserAccessibilityStateImpl::Create();
   FuzzedDataProvider fdp(data, size);
 
   // The tree structure is always the same, only the data changes.