Integrate fuzzilli differential testing patch
Categories
(Core :: JavaScript Engine, enhancement, P1)
Tracking
()
People
(Reporter: decoder, Assigned: decoder)
Details
(Keywords: sec-other, Whiteboard: [post-critsmash-triage][adv-main108-])
Attachments
(1 file)
:l11d has provided us with a code to do differential testing of our JS engine using fuzzilli. However, it requires some code changes on our side.
Assignee | ||
Comment 1•2 years ago
|
||
![]() |
||
Comment 2•2 years ago
|
||
Landed: https://hg.mozilla.org/integration/autoland/rev/d3d587531672336fe98734477fcb95d5d0ab0038
Backed out for spidermonkey bustage in js/src/jit/MIR.h:10826:3: error: bad implicit conversion constructor for 'MFuzzilliHash': https://hg.mozilla.org/integration/autoland/rev/b86b7f0226545595b35440e23e5ff642be1c3a3b
push: https://treeherder.mozilla.org/jobs?repo=autoland&group_state=expanded&revision=d3d587531672336fe98734477fcb95d5d0ab0038
failure log: https://treeherder.mozilla.org/logviewer?job_id=394570647&repo=autoland&lineNumber=1531
js/src/jit/MIR.h:10826:3: error: bad implicit conversion constructor for 'MFuzzilliHash'
followed by more failures.
![]() |
||
Comment 3•2 years ago
|
||
Add code for differential testing with Fuzzilli. r=jandem
https://hg.mozilla.org/integration/autoland/rev/b1805a980636e6046a8e79a4225adefcfbe60d96
https://hg.mozilla.org/mozilla-central/rev/b1805a980636
Updated•2 years ago
|
Updated•2 years ago
|
Updated•2 years ago
|
Updated•1 year ago
|
Description
•