Files

Chris Fallin b2bcdd13ec Spec-interpreter fuzzing: check out fuzzing branch of our mirror. (#3222 )

In #3186, we found an issue that requires patching the spec interpreter
for now. Our plan is to have a `fuzzing` branch in our spec-repo mirror
that lets us make these fixes locally before they are upstreamed.
This PR updates the build script for the spec-interpreter wrapper
crate to clone this particular `fuzzing` branch instead of the main
branch.

2021-08-20 12:54:52 -05:00

src

Use wasm-smith to canonicalize NaN in differential fuzzing (#3195 )

2021-08-17 11:42:22 -05:00

wasm-spec-interpreter

Spec-interpreter fuzzing: check out fuzzing branch of our mirror. (#3222 )

2021-08-20 12:54:52 -05:00

build.rs

Actually make spectest fuzzing deterministic

2021-03-29 09:12:16 -07:00

Cargo.toml

Use wasm-smith to canonicalize NaN in differential fuzzing (#3195 )

2021-08-17 11:42:22 -05:00

README.md

Create a new wasmtime-fuzzing crate

2019-11-21 14:51:07 -08:00

README.md

Fuzzing Infrastructure for Wasmtime

This crate provides test case generators and oracles for use with fuzzing.

These generators and oracles are generally independent of the fuzzing engine that might be using them and driving the whole fuzzing process (e.g. libFuzzer or AFL). As such, this crate does not contain any actual fuzz targets itself. Those are generally just a couple lines of glue code that plug raw input from (for example) libFuzzer into a generator, and then run one or more oracles on the generated test case.

If you're looking for the actual fuzz target definitions we currently have, they live in wasmtime/fuzz/fuzz_targets/* and are driven by cargo fuzz and libFuzzer.