1925120 - Fuzzing of js-string-builtins proposal

Status: RESOLVED FIXED

(Core :: Fuzzing, task)

Description

[Ryan Hunt [:rhunt]]

I would like to request fuzzing for WebAssembly js-string-builtins.

Meta bug: https://bugzilla.mozilla.org/show_bug.cgi?id=wasm-js-sb
Preferences: javascript.options.wasm_js_string_builtins
Platforms: All, no platform specific behavior
Existing tests:

• jit-tests: https://searchfox.org/mozilla-central/source/js/src/jit-test/tests/wasm/builtin-modules/js-string
• wpts: https://searchfox.org/mozilla-central/source/testing/web-platform/meta/wasm/jsapi/js-string

Testing may start as of: ASAP
Targeted Release Version: None yet, maybe 134

Comment 1

[Ryan Hunt [:rhunt]]

Just some background here if it helps.

This proposal is different from previous wasm proposals in that the new functionality is primarily exposed through new importable functions from a special namespace, instead of new instructions.

So instead of a new string.substring instruction, we now let you import from "wasm:js-string" "substring". This is controlled by a builtins: ["js-string"] that you must provide when compiling a module.

This test is probably the simplest full example [1].

[1] https://searchfox.org/mozilla-central/source/js/src/jit-test/tests/wasm/builtin-modules/js-string/basic.js

Comment 2

[Ryan Hunt [:rhunt]]

Attachment: Bug 1925120 - wasm: Add js_string_builtins to fuzz-flags.txt. r=decoder

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/32af7c15f3cb
wasm: Add js_string_builtins to fuzz-flags.txt. r=decoder

Comment 4

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

https://hg.mozilla.org/mozilla-central/rev/32af7c15f3cb