Turn off binaryen in fuzzing by default
... but turn it back on in CI by default. The `binaryen-sys` crate builds binaryen from source, which is a drag on CI for a few reasons: * This is quite large and takes a good deal of time to build * The debug build directory for binaryen is 4GB large In an effort to both save time and disk space on the builders this commit adds a `binaryen` feature to the `wasmtime-fuzz` crate. This feature is enabled specifically when running the fuzzers on CI, but it is disabled during the typical `cargo test --all` command. This means that the test builders should save an extra 4G of space and be a bit speedier now that they don't build a giant wad of C++. We'll need to update the OSS-fuzz integration to enable the `binaryen` feature when executing `cargo fuzz build`, and I'll do that once this gets closer to landing.
This commit is contained in:
2
.github/workflows/main.yml
vendored
2
.github/workflows/main.yml
vendored
@@ -79,7 +79,7 @@ jobs:
|
||||
- run: cargo install cargo-fuzz --vers "^0.7"
|
||||
- run: cargo fetch
|
||||
working-directory: ./fuzz
|
||||
- run: cargo fuzz build --release --debug-assertions
|
||||
- run: cargo fuzz build --release --debug-assertions --features binaryen
|
||||
# Our corpora are too large to run in full on every pull request, they just
|
||||
# take too long. Instead, we sample some of them and make sure that running
|
||||
# our fuzzers over the sampled inputs still works OK.
|
||||
|
||||
@@ -9,7 +9,7 @@ version = "0.12.0"
|
||||
[dependencies]
|
||||
anyhow = "1.0.22"
|
||||
arbitrary = { version = "0.4.0", features = ["derive"] }
|
||||
binaryen = "0.10.0"
|
||||
binaryen = { version = "0.10.0", optional = true }
|
||||
env_logger = "0.7.1"
|
||||
log = "0.4.8"
|
||||
rayon = "1.2.1"
|
||||
|
||||
@@ -8,20 +8,22 @@
|
||||
//! wrapper over an external tool, such that the wrapper implements the
|
||||
//! `Arbitrary` trait for the wrapped external tool.
|
||||
|
||||
#[cfg(feature = "binaryen")]
|
||||
pub mod api;
|
||||
|
||||
use arbitrary::{Arbitrary, Unstructured};
|
||||
use std::fmt;
|
||||
use arbitrary::Arbitrary;
|
||||
|
||||
/// A Wasm test case generator that is powered by Binaryen's `wasm-opt -ttf`.
|
||||
#[derive(Clone)]
|
||||
#[cfg(feature = "binaryen")]
|
||||
pub struct WasmOptTtf {
|
||||
/// The raw, encoded Wasm bytes.
|
||||
pub wasm: Vec<u8>,
|
||||
}
|
||||
|
||||
impl fmt::Debug for WasmOptTtf {
|
||||
fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
|
||||
#[cfg(feature = "binaryen")]
|
||||
impl std::fmt::Debug for WasmOptTtf {
|
||||
fn fmt(&self, f: &mut std::fmt::Formatter) -> std::fmt::Result {
|
||||
write!(
|
||||
f,
|
||||
"WasmOptTtf {{ wasm: wat::parse_str(r###\"\n{}\n\"###).unwrap() }}",
|
||||
@@ -30,8 +32,9 @@ impl fmt::Debug for WasmOptTtf {
|
||||
}
|
||||
}
|
||||
|
||||
#[cfg(feature = "binaryen")]
|
||||
impl Arbitrary for WasmOptTtf {
|
||||
fn arbitrary(input: &mut Unstructured) -> arbitrary::Result<Self> {
|
||||
fn arbitrary(input: &mut arbitrary::Unstructured) -> arbitrary::Result<Self> {
|
||||
crate::init_fuzzing();
|
||||
let seed: Vec<u8> = Arbitrary::arbitrary(input)?;
|
||||
let module = binaryen::tools::translate_to_fuzz_mvp(&seed);
|
||||
@@ -39,7 +42,7 @@ impl Arbitrary for WasmOptTtf {
|
||||
Ok(WasmOptTtf { wasm })
|
||||
}
|
||||
|
||||
fn arbitrary_take_rest(input: Unstructured) -> arbitrary::Result<Self> {
|
||||
fn arbitrary_take_rest(input: arbitrary::Unstructured) -> arbitrary::Result<Self> {
|
||||
crate::init_fuzzing();
|
||||
let seed: Vec<u8> = Arbitrary::arbitrary_take_rest(input)?;
|
||||
let module = binaryen::tools::translate_to_fuzz_mvp(&seed);
|
||||
|
||||
@@ -110,7 +110,7 @@ pub fn compile(wasm: &[u8], strategy: Strategy) {
|
||||
/// or aren't enabled for different configs, we should get the same results when
|
||||
/// we call the exported functions for all of our different configs.
|
||||
pub fn differential_execution(
|
||||
ttf: &crate::generators::WasmOptTtf,
|
||||
wasm: &[u8],
|
||||
configs: &[crate::generators::DifferentialConfig],
|
||||
) {
|
||||
crate::init_fuzzing();
|
||||
@@ -131,13 +131,13 @@ pub fn differential_execution(
|
||||
};
|
||||
|
||||
let mut export_func_results: HashMap<String, Result<Box<[Val]>, Trap>> = Default::default();
|
||||
log_wasm(&ttf.wasm);
|
||||
log_wasm(wasm);
|
||||
|
||||
for config in &configs {
|
||||
let engine = Engine::new(config);
|
||||
let store = Store::new(&engine);
|
||||
|
||||
let module = match Module::new(&store, &ttf.wasm) {
|
||||
let module = match Module::new(&store, wasm) {
|
||||
Ok(module) => module,
|
||||
// The module might rely on some feature that our config didn't
|
||||
// enable or something like that.
|
||||
@@ -283,6 +283,7 @@ fn assert_same_export_func_result(
|
||||
}
|
||||
|
||||
/// Invoke the given API calls.
|
||||
#[cfg(feature = "binaryen")]
|
||||
pub fn make_api_calls(api: crate::generators::api::ApiCalls) {
|
||||
use crate::generators::api::ApiCall;
|
||||
|
||||
|
||||
@@ -34,15 +34,21 @@ name = "instantiate_translated"
|
||||
path = "fuzz_targets/instantiate_translated.rs"
|
||||
test = false
|
||||
doc = false
|
||||
required-features = ['binaryen']
|
||||
|
||||
[[bin]]
|
||||
name = "api_calls"
|
||||
path = "fuzz_targets/api_calls.rs"
|
||||
test = false
|
||||
doc = false
|
||||
required-features = ['binaryen']
|
||||
|
||||
[[bin]]
|
||||
name = "differential"
|
||||
path = "fuzz_targets/differential.rs"
|
||||
test = false
|
||||
doc = false
|
||||
required-features = ['binaryen']
|
||||
|
||||
[features]
|
||||
binaryen = ['wasmtime-fuzzing/binaryen']
|
||||
|
||||
@@ -9,5 +9,5 @@ fuzz_target!(|data: (
|
||||
generators::WasmOptTtf
|
||||
)| {
|
||||
let (lhs, rhs, wasm) = data;
|
||||
oracles::differential_execution(&wasm, &[lhs, rhs]);
|
||||
oracles::differential_execution(&wasm.wasm, &[lhs, rhs]);
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user