OLD | NEW |
1 // Copyright 2016 the V8 project authors. All rights reserved. | 1 // Copyright 2016 the V8 project authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include <limits.h> | |
6 #include <stddef.h> | 5 #include <stddef.h> |
7 #include <stdint.h> | 6 #include <stdint.h> |
8 | 7 |
9 #include "include/v8.h" | 8 #include "include/v8.h" |
10 #include "src/factory.h" | |
11 #include "src/isolate-inl.h" | |
12 #include "src/isolate.h" | 9 #include "src/isolate.h" |
13 #include "src/objects-inl.h" | 10 #include "src/wasm/encoder.h" |
14 #include "src/objects.h" | |
15 #include "src/wasm/wasm-js.h" | 11 #include "src/wasm/wasm-js.h" |
16 #include "src/wasm/wasm-module.h" | 12 #include "src/wasm/wasm-module.h" |
| 13 #include "test/cctest/wasm/test-signatures.h" |
17 #include "test/fuzzer/fuzzer-support.h" | 14 #include "test/fuzzer/fuzzer-support.h" |
18 | 15 |
19 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { | 16 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { |
20 v8_fuzzer::FuzzerSupport* support = v8_fuzzer::FuzzerSupport::Get(); | 17 v8_fuzzer::FuzzerSupport* support = v8_fuzzer::FuzzerSupport::Get(); |
21 v8::Isolate* isolate = support->GetIsolate(); | 18 v8::Isolate* isolate = support->GetIsolate(); |
22 v8::internal::Isolate* i_isolate = | 19 v8::internal::Isolate* i_isolate = |
23 reinterpret_cast<v8::internal::Isolate*>(isolate); | 20 reinterpret_cast<v8::internal::Isolate*>(isolate); |
24 | 21 |
25 // Clear any pending exceptions from a prior run. | 22 // Clear any pending exceptions from a prior run. |
26 if (i_isolate->has_pending_exception()) { | 23 if (i_isolate->has_pending_exception()) { |
27 i_isolate->clear_pending_exception(); | 24 i_isolate->clear_pending_exception(); |
28 } | 25 } |
29 | 26 |
30 v8::Isolate::Scope isolate_scope(isolate); | 27 v8::Isolate::Scope isolate_scope(isolate); |
31 v8::HandleScope handle_scope(isolate); | 28 v8::HandleScope handle_scope(isolate); |
32 v8::Context::Scope context_scope(support->GetContext()); | 29 v8::Context::Scope context_scope(support->GetContext()); |
33 v8::TryCatch try_catch(isolate); | 30 v8::TryCatch try_catch(isolate); |
| 31 |
| 32 v8::base::AccountingAllocator allocator; |
| 33 v8::internal::Zone zone(&allocator); |
| 34 |
| 35 v8::internal::wasm::TestSignatures sigs; |
| 36 |
| 37 v8::internal::wasm::WasmModuleBuilder builder(&zone); |
| 38 |
| 39 uint16_t f1_index = builder.AddFunction(); |
| 40 v8::internal::wasm::WasmFunctionBuilder* f = builder.FunctionAt(f1_index); |
| 41 f->SetSignature(sigs.i_iii()); |
| 42 f->EmitCode(data, static_cast<uint32_t>(size)); |
| 43 f->SetExported(); |
| 44 f->SetName("main", 4); |
| 45 |
| 46 v8::internal::wasm::ZoneBuffer buffer(&zone); |
| 47 builder.WriteTo(buffer); |
| 48 |
34 v8::internal::WasmJs::InstallWasmFunctionMap(i_isolate, | 49 v8::internal::WasmJs::InstallWasmFunctionMap(i_isolate, |
35 i_isolate->native_context()); | 50 i_isolate->native_context()); |
36 v8::internal::wasm::testing::CompileAndRunWasmModule(i_isolate, data, | 51 v8::internal::wasm::testing::CompileAndRunWasmModule( |
37 data + size, true); | 52 i_isolate, buffer.begin(), buffer.end(), false); |
38 return 0; | 53 return 0; |
39 } | 54 } |
OLD | NEW |