googleprojectzero / fuzzilli

A JavaScript Engine Fuzzer
Apache License 2.0
1.86k stars 300 forks source link

Improve the HybridEngine #206

Open saelo opened 3 years ago

saelo commented 3 years ago

The HowFuzzilliWorks document describes how I currently believe the HybridEngine should eventually work (feedback on that very welcome!). The current implementation already supports some of these features, but not everything (amongst others, the Type generation and instantiation needs to be improved, as does the type system and the CodeGenerators). There also still seem to be crashes related to it, e.g. probably https://github.com/googleprojectzero/fuzzilli/issues/198.

I don't currently have enough time to work on this, so creating a new issue to keep track of it.

saelo commented 3 years ago

Related: https://github.com/googleprojectzero/fuzzilli/issues/209, https://github.com/googleprojectzero/fuzzilli/issues/210, and https://github.com/googleprojectzero/fuzzilli/issues/211