Make FuzzedDataProvider vend std::strings

net/websockets/websocket_deflate_stream_fuzzer.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <stddef.h>
 #include <stdint.h>
 
 #include <memory>
 #include <string>
 #include <vector>
@@ skipping 49 matching lines @@
     auto frame = base::MakeUnique<WebSocketFrame>(opcode);
     // Bad news: ConsumeBool actually consumes a whole byte per call, so do
     // something hacky to conserve precious bits.
     uint8_t flags = fuzzed_data_provider_.ConsumeUint8();
     frame->header.final = flags & 0x1;
     frame->header.reserved1 = (flags >> 1) & 0x1;
     frame->header.reserved2 = (flags >> 2) & 0x1;
     frame->header.reserved3 = (flags >> 3) & 0x1;
     frame->header.masked = (flags >> 4) & 0x1;
     uint64_t payload_length = fuzzed_data_provider_.ConsumeInt32InRange(0, 64);
-    base::StringPiece payload =
-        fuzzed_data_provider_.ConsumeBytes(payload_length);
-    frame->data = new WrappedIOBuffer(payload.data());
+    std::string payload = fuzzed_data_provider_.ConsumeBytes(payload_length);
+    frame->data = new StringIOBuffer(payload);
     frame->header.payload_length = payload.size();
     return frame;
   }
 
   base::FuzzedDataProvider fuzzed_data_provider_;
 };
 
 void WebSocketDeflateStreamFuzz(const uint8_t* data, size_t size) {
   // WebSocketDeflateStream needs to be constructed on each call because it
   // has state.
@@ skipping 11 matching lines @@
 }  // namespace
 
 }  // namespace net
 
 // Entry point for LibFuzzer.
 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
   net::WebSocketDeflateStreamFuzz(data, size);
 
   return 0;
 }