Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(50)

Side by Side Diff: test/fuzzer/wasm-code.cc

Issue 2280623002: [wasm] Create a new fuzzer for wasm code. (Closed)
Patch Set: Getting the naming scheme right Created 4 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « test/fuzzer/testcfg.py ('k') | test/fuzzer/wasm_code/foo » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright 2016 the V8 project authors. All rights reserved. 1 // Copyright 2016 the V8 project authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include <limits.h>
6 #include <stddef.h> 5 #include <stddef.h>
7 #include <stdint.h> 6 #include <stdint.h>
8 7
9 #include "include/v8.h" 8 #include "include/v8.h"
10 #include "src/factory.h"
11 #include "src/isolate-inl.h"
12 #include "src/isolate.h" 9 #include "src/isolate.h"
13 #include "src/objects-inl.h" 10 #include "src/wasm/encoder.h"
14 #include "src/objects.h"
15 #include "src/wasm/wasm-js.h" 11 #include "src/wasm/wasm-js.h"
16 #include "src/wasm/wasm-module.h" 12 #include "src/wasm/wasm-module.h"
13 #include "test/cctest/wasm/test-signatures.h"
17 #include "test/fuzzer/fuzzer-support.h" 14 #include "test/fuzzer/fuzzer-support.h"
18 15
19 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) { 16 extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
20 v8_fuzzer::FuzzerSupport* support = v8_fuzzer::FuzzerSupport::Get(); 17 v8_fuzzer::FuzzerSupport* support = v8_fuzzer::FuzzerSupport::Get();
21 v8::Isolate* isolate = support->GetIsolate(); 18 v8::Isolate* isolate = support->GetIsolate();
22 v8::internal::Isolate* i_isolate = 19 v8::internal::Isolate* i_isolate =
23 reinterpret_cast<v8::internal::Isolate*>(isolate); 20 reinterpret_cast<v8::internal::Isolate*>(isolate);
24 21
25 // Clear any pending exceptions from a prior run. 22 // Clear any pending exceptions from a prior run.
26 if (i_isolate->has_pending_exception()) { 23 if (i_isolate->has_pending_exception()) {
27 i_isolate->clear_pending_exception(); 24 i_isolate->clear_pending_exception();
28 } 25 }
29 26
30 v8::Isolate::Scope isolate_scope(isolate); 27 v8::Isolate::Scope isolate_scope(isolate);
31 v8::HandleScope handle_scope(isolate); 28 v8::HandleScope handle_scope(isolate);
32 v8::Context::Scope context_scope(support->GetContext()); 29 v8::Context::Scope context_scope(support->GetContext());
33 v8::TryCatch try_catch(isolate); 30 v8::TryCatch try_catch(isolate);
31
32 v8::base::AccountingAllocator allocator;
33 v8::internal::Zone zone(&allocator);
34
35 v8::internal::wasm::TestSignatures sigs;
36
37 v8::internal::wasm::WasmModuleBuilder builder(&zone);
38
39 uint16_t f1_index = builder.AddFunction();
40 v8::internal::wasm::WasmFunctionBuilder* f = builder.FunctionAt(f1_index);
41 f->SetSignature(sigs.i_iii());
42 f->EmitCode(data, static_cast<uint32_t>(size));
43 f->SetExported();
44 f->SetName("main", 4);
45
46 v8::internal::wasm::ZoneBuffer buffer(&zone);
47 builder.WriteTo(buffer);
48
34 v8::internal::WasmJs::InstallWasmFunctionMap(i_isolate, 49 v8::internal::WasmJs::InstallWasmFunctionMap(i_isolate,
35 i_isolate->native_context()); 50 i_isolate->native_context());
36 v8::internal::wasm::testing::CompileAndRunWasmModule(i_isolate, data, 51 v8::internal::wasm::testing::CompileAndRunWasmModule(
37 data + size, true); 52 i_isolate, buffer.begin(), buffer.end(), false);
38 return 0; 53 return 0;
39 } 54 }
OLDNEW
« no previous file with comments | « test/fuzzer/testcfg.py ('k') | test/fuzzer/wasm_code/foo » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698