1912486 - Semi-space nursery should be marked as fuzzing-unsafe

Status: RESOLVED FIXED

(Core :: JavaScript Engine, task)

Description

[lukas.bernhard]

When fuzzing SM with Fuzzilli, the fuzzer automatically discovers ways to enable the semi-space nursery. Enabling this option triggers various asserts throughout the engine. For now, the semi-space should be kept disabled when --fuzzing-safe is passed to the engine.

Comment 1

[Matthew Gaudet (he/him) [:mgaudet]]

Attachment: Bug 1912486 - Disallow enabling semi-space nursery via gcparam r?jonco

Comment 2

[Jon Coppeard (:jonco)]

I would like to have this fuzzed, but that means we would need to commit to fixing the bugs found.

AFAIK there is one open bug related to semispace (bug 1894599) which I have indeed been ignoring but this makes it sound like there are more issues lurking.

It's fair to disable this for now if this is causing a problem for the fuzzers.

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/18f5b5484c27
Disallow enabling semi-space nursery via gcparam r=jonco

Comment 4

[Norisz Fay [:noriszfay]]

https://hg.mozilla.org/mozilla-central/rev/18f5b5484c27

Comment 5

[Mathew Hodson]

The commit in this bug looks like it accidentally added an empty file called .moz_log

Comment 6

[Matthew Gaudet (he/him) [:mgaudet]]

Curious! I know how it would have ended up in there but not how I created .moz_log -- anyhow; will remove it!