MozillaSecurity / funfuzz

A collection of fuzzers in a harness for testing the SpiderMonkey JavaScript engine.

Mozilla Public License 2.0

631 stars 115 forks source link

jsfunfuzz updates: remove generator expressions, support invisibleToDebugger/sameCompartmentAs, recomputeWrappers etc. #211

Closed nth10sd closed 6 years ago

nth10sd commented 6 years ago

These are improvements to jsfunfuzz.

Adds:

invisibleToDebugger and sameCompartmentAs to newGlobal parameters to be tested
saveIncrementalBytecode to evaluate parameters
Initial support for recomputeWrappers
the keepFailing: true option to oomTest

Removes:

Support for generator expressions
Object.prototype no longer has __count__ and __parent__.

I am still poking at hooking up eslint to Travis to at least have a linter in place.

codecov-io commented 6 years ago

Codecov Report

Merging #211 into master will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #211   +/-   ##
=======================================
  Coverage   31.91%   31.91%           
=======================================
  Files          39       39           
  Lines        4293     4293           
=======================================
  Hits         1370     1370           
  Misses       2923     2923

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 653d6a0...9908714. Read the comment docs.

nth10sd commented 6 years ago

Thanks! I'll land this first, the linter PR will follow up soon.