googleprojectzero / fuzzilli

A JavaScript Engine Fuzzer
Apache License 2.0
1.88k stars 305 forks source link

swift run start error #403

Open hlc-b opened 1 year ago

hlc-b commented 1 year ago

My environment is M1 Max Mac os 14.

However, when I run "swift run -c release FuzzilliCli --profile=v8 /Users/studiojihun/chrome/src/v8/src", an error occurs. Error is Building for production... Build complete! (0.09s) [Cli] Using the following arguments for the target engine: ["--expose-gc", "--omit-quit", "--allow-natives-syntax", "--fuzzing", "--jit-fuzzing", "--future", "--harmony", "--js-staging"] [Cli] Enabled mutators: ["ExplorationMutator", "CodeGenMutator", "SpliceMutator", "ProbingMutator", "InputMutator", "InputMutator (type aware)", "OperationMutator", "CombineMutator"] [Cli] No filesystem storage configured, found crashes will be discarded! [REPRL] Script execution failed: Did not receive HELO message from child: No such process. Retrying in 1 second... [REPRL] Script execution failed again: Did not receive HELO message from child: Operation timed out. Giving up How should I solve this?

chennbnbnb commented 7 months ago

The v8 tested by Fuzzilli needs extra compile args v8_fuzzilli=true, Please make sure this parameter exists when compiling Below is an example

gn gen out.gn/fuzzilli_build --args='is_debug=false dcheck_always_on=true v8_static_library=true v8_enable_verify_heap=true v8_fuzzilli=true sanitizer_coverage_flags="trace-pc-guard" target_cpu="x64"'
ninja -C ./out.gn/fuzzilli_build d8