Comments (7)
Fuzzing is a great idea. It will definitely find some parser bugs.
I wonder how well it will work for the deeper parts of the compiler. I suspect that the initial verifier pass will reject most of the fuzzer's attempts.
from wasmtime.
The llvm-stress program is a different approach to compiler fuzzing. It generates random, but valid LLVM input. I think this approach could be combined with cargo-fuzz to make it more likely to tickle deeper parts of the compiler.
CSMith was very successful at finding compiler bugs by generating random but correct C programs that print the state of their globals before exiting. It works by comparing outputs from programs compiled with different compilers. A similar tool for WebAssembly would be very useful.
from wasmtime.
The underlying fuzzer is libFuzzer, and it seems to be quite good at drilling down to useful syntax quickly even in the absence of an input corpus. We'll be generating some corpus for our manual testcases, though, so that should make things even easier.
The failure I found sounds like it's actually rust-lang/rust#39882, so we'll have to wait until that's resolved to see value from cargo-fuzz, I think.
from wasmtime.
Is it possible to run cargo-fuzz without the sanitizers enabled? Cretonne contains almost no unsafe code, so they are not likely to add much value anyway.
from wasmtime.
Maybe add -C overflow-checks=on
to a release build for fuzzing.
from wasmtime.
Wasmtime and regalloc.rs are now being fuzzed. Should this be closed?
from wasmtime.
Yeah we have a fairly extensive suite of cargo fuzz
targets running in oss-fuzz. While improvements to those are always appreciated, it looks like this issue isn't tracking any particular missing thing anymore.
from wasmtime.
Related Issues (20)
- Support of profile for wasm component HOT 5
- Cranelift: implement path-sensitive constant propagation HOT 6
- Access flags are lost when using `openat` from `wasi-libc` HOT 1
- Remove special case for InputStream::File ? HOT 13
- Idea: put VM data structures in arena with relative pointers for security and strict provenance HOT 3
- add `uninlined_format_args`
- large enums slow down compilation HOT 4
- s390x: no rule matched for term vec_elt_rev HOT 1
- export func authentication HOT 4
- Option to turn off and clear automatic module caching to ~/.cache/wasmtime/modules/wasmtime- HOT 6
- Add progress meter to --optimize: No way to know if wasmtime is hanging
- Dead link in WASI tutorial
- cranelift-serde "Error("key must be a string", line: 0, column: 0)" HOT 4
- CMake build for c-api failes to generate header file. HOT 1
- Error while opening file in emscripten wasm with wasmtime HOT 10
- WebAssembly translation error related to function references HOT 5
- Add Tail Call Optimization HOT 3
- Cranelift: Lowering fails for `fmax` and `fmin` of `f32x4` on x64 backend HOT 5
- cranelift-reader: ParseError { location: Location { line_number: 9 }, message: "expected block header", is_warning: false } HOT 3
- wasmtime::component::bindgen: GuestPre should typecheck exports before instantiation
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from wasmtime.