0642e62f16
* Update wasm-smith to 0.7.0 * Canonicalize NaN with wasm-smith for differential fuzzing This then also enables floating point executing in wasmi in addition to the spec interpreter. With NaN canonicalization at the wasm level this means that we should be producing deterministic results between Wasmtime and these alternative implementations.
44 lines
1.5 KiB
Rust
44 lines
1.5 KiB
Rust
#![no_main]
|
|
|
|
use libfuzzer_sys::arbitrary::{Result, Unstructured};
|
|
use libfuzzer_sys::fuzz_target;
|
|
use std::time::Duration;
|
|
use wasm_smith::{Module, SwarmConfig};
|
|
use wasmtime::Strategy;
|
|
use wasmtime_fuzzing::oracles::{self, Timeout};
|
|
|
|
fuzz_target!(|data: &[u8]| {
|
|
// errors in `run` have to do with not enough input in `data`, which we
|
|
// ignore here since it doesn't affect how we'd like to fuzz.
|
|
drop(run(data));
|
|
});
|
|
|
|
fn run(data: &[u8]) -> Result<()> {
|
|
let mut u = Unstructured::new(data);
|
|
let timeout = if u.arbitrary()? {
|
|
Timeout::Time(Duration::from_secs(20))
|
|
} else {
|
|
Timeout::Fuel(100_000)
|
|
};
|
|
|
|
// Further configure `SwarmConfig` after we generate one to enable features
|
|
// that aren't otherwise enabled by default. We want to test all of these in
|
|
// Wasmtime.
|
|
let mut config: SwarmConfig = u.arbitrary()?;
|
|
config.simd_enabled = u.arbitrary()?;
|
|
config.module_linking_enabled = u.arbitrary()?;
|
|
config.memory64_enabled = u.arbitrary()?;
|
|
// Don't generate modules that allocate more than 6GB
|
|
config.max_memory_pages = 6 << 30;
|
|
let module = Module::new(config.clone(), &mut u)?;
|
|
|
|
let mut cfg = wasmtime_fuzzing::fuzz_default_config(Strategy::Auto).unwrap();
|
|
cfg.wasm_multi_memory(config.max_memories > 1);
|
|
cfg.wasm_module_linking(config.module_linking_enabled);
|
|
cfg.wasm_simd(config.simd_enabled);
|
|
cfg.wasm_memory64(config.memory64_enabled);
|
|
|
|
oracles::instantiate_with_config(&module.to_bytes(), true, cfg, timeout);
|
|
Ok(())
|
|
}
|