[Webkit-unassigned] [Bug 171936] New: WebAssembly: improve memory fuzzer

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed May 10 11:35:13 PDT 2017


https://bugs.webkit.org/show_bug.cgi?id=171936

            Bug ID: 171936
           Summary: WebAssembly: improve memory fuzzer
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: JavaScriptCore
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: jfbastien at apple.com
                CC: fpizlo at apple.com, jfbastien at apple.com,
                    keith_miller at apple.com, mark.lam at apple.com,
                    msaboff at apple.com, sbarati at apple.com
        Depends on: 169976
            Blocks: 159775

I added a memory fuzzer in https://bugs.webkit.org/show_bug.cgi?id=169976

It could be better:
  - add set() and shadow memory, this requires tracking when memory is shared
  - Support: empty, exported
  - Imported memory created through the JS API (both before and after instantiation, to cause recompilation)
  - recursive calls (randomly call other instance's exports, potentially exhausting stack)
  - Simplify code by allowing .Code().ExportFunction(...) in builder


Referenced Bugs:

https://bugs.webkit.org/show_bug.cgi?id=159775
[Bug 159775] WebAssembly: support the newer spec
https://bugs.webkit.org/show_bug.cgi?id=169976
[Bug 169976] WebAssembly: add memory fuzzer
-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170510/e84eb0ae/attachment.html>


More information about the webkit-unassigned mailing list