-
Notifications
You must be signed in to change notification settings - Fork 113
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Experimental integration with binaryen #219
Conversation
Codecov Report
@@ Coverage Diff @@
## master #219 +/- ##
==========================================
+ Coverage 44.51% 46.45% +1.93%
==========================================
Files 39 43 +4
Lines 2736 2878 +142
==========================================
+ Hits 1218 1337 +119
- Misses 1518 1541 +23
Continue to review full report at Codecov.
|
ca2f9c6
to
9c6e795
Compare
Sample running logs. I'll just land this as it is merely an if statement that activates the integration once tests pass. |
…it, round-tripping the wasm file back into the js shell. Also break up the many_timed_run function.
…se to be sent to FuzzManager.
d32a8db
to
29244f7
Compare
I'll land this first. The experiment has already proved a success with the discovery of bug 1516720. |
Here's a first take on the integration with binaryen for experimental deployment.
It uses stdout output from jsfunfuzz, e.g. from
w1-out.txt
to act as the seed for binaryen. If an issue (e.g. a crash) is found, the wrapper and wasm files are zipped up to be submitted to FuzzManager.I ran some crashing testcases in another branch to see that this experimentally seems to work.
Caveats:
pinpoint
and henceautobisectjs
auto-integration do not understand multiple testcase input, e.g../js wrapper.js wasm.file
, so all of such reports to FuzzManager will have quality 10 for now.I would like to get this in quickly to see if:
@jschwartzentruber just asking for a cursory glance here, how does this sound?