With the profiling from bug 761261, there should be validation that the instrumentation remains consistent. To do this, a function should be added to the shell to turn on a static profiling stack to be called from fuzzers. This function would turn on profiling for the runtime, which in debug builds would assert that function entry/exit are tracked accordingly.
Comment on attachment 639398 [details] [diff] [review] patch Cool!
This should probably be in js/src/builtin/TestingFunctions.cpp rather than js/src/shell/js.cpp so it can be tested in the browser as well.