This PR adds a new fuzz target, `differential_wasmi`, that runs a Cranelift-based Wasm backend alongside a simple third-party Wasm interpeter crate (`wasmi`). The fuzzing runs the first function in a given module to completion on each side, and then diffs the return value and linear memory contents. This strategy should provide end-to-end coverage including both the Wasm translation to CLIF (which has seen some subtle and scary bugs at times), the lowering from CLIF to VCode, the register allocation, and the final code emission. This PR also adds a feature `experimental_x64` to the fuzzing crate (and the chain of dependencies down to `cranelift-codegen`) so that we can fuzz the new x86-64 backend as well as the current one.
27 lines
580 B
TOML
27 lines
580 B
TOML
[package]
|
|
authors = ["The Wasmtime Project Developers"]
|
|
description = "Fuzzing infrastructure for Wasmtime"
|
|
edition = "2018"
|
|
name = "wasmtime-fuzzing"
|
|
publish = false
|
|
version = "0.19.0"
|
|
|
|
[dependencies]
|
|
anyhow = "1.0.22"
|
|
arbitrary = { version = "0.4.1", features = ["derive"] }
|
|
env_logger = "0.8.1"
|
|
log = "0.4.8"
|
|
rayon = "1.2.1"
|
|
wasmparser = "0.68.0"
|
|
wasmprinter = "0.2.15"
|
|
wasmtime = { path = "../wasmtime" }
|
|
wasmtime-wast = { path = "../wast" }
|
|
wasm-smith = "0.1.12"
|
|
wasmi = "0.7.0"
|
|
|
|
[dev-dependencies]
|
|
wat = "1.0.28"
|
|
|
|
[features]
|
|
experimental_x64 = ["wasmtime/experimental_x64"]
|