T0b1/wasmtime
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
1987d4dba93046d214742f50ebd729a3561ed4f2
wasmtime/cranelift/FUZZING.md
Jonathan Foote 1924039713 cargo fuzz integration (#306) 
* added wip translate_module fuzzer

* use local binaryen-rs fork (with shim) for fuzzing

* minor doc cleanup

* check fuzzer integration via CI

* switch back to upstream binaryen-rs; add forgotten integration test directive
2018-05-14 09:31:27 -10:00

742 B
Raw Blame History

Fuzzing

This document describes how to fuzz cretonne with cargo-fuzz. The fuzz targets use wasm-opt from binaryen-rs to generate valid WebAssembly modules from the fuzzed input supplied by cargo-fuzz (via libfuzzer). In this scheme coverage feedback from both cretonne and the wasm-opt input generation code is used to inform the fuzzer.

Usage

  1. Install all dependencies required to build binaryen-rs and cargo-fuzz (including cmake)
  2. Use the rust nightly toolchain (required by cargo-fuzz): rustup override set nightly
  3. Execute the fuzz target: cargo fuzz run fuzz_translate_module