AuroraMiddleware/v8
1
0
Fork 0
Code Issues 2 Pull Requests Releases Wiki Activity

[heap] Turn on fuzzing for map space compaction

Browse Source 
Turn on fuzzing to get additional test coverage.

Bug: v8:12578
Change-Id: Ia614fb9e4ba519163024f3b7b40f22ad6ebb3297
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3442677
Reviewed-by: Michael Achenbach <machenbach@chromium.org>
Commit-Queue: Dominik Inführ <dinfuehr@chromium.org>
Cr-Commit-Position: refs/heads/main@{#78977}
This commit is contained in:
Dominik Inführ 2022-02-07 13:55:30 +01:00 committed by V8 LUCI CQ
parent 7ca4e9cad5
commit a6843b1370
3 changed files with 42 additions and 39 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
tools/clusterfuzz/clusterfuzz_trials_config.json
View File

@ -1,6 +1,7 @@
[ [
{"app_args": "--assert-types", "app_name": "d8", "probability": 0.25}, {"app_args": "--assert-types", "app_name": "d8", "probability": 0.25},
{"app_args": "--budget_for_feedback_vector_allocation=0", "app_name": "d8", "probability": 0.05}, {"app_args": "--budget_for_feedback_vector_allocation=0", "app_name": "d8", "probability": 0.05},
{"app_args": "--compact-map-space", "app_name": "d8", "probability": 0.25},
{"app_args": "--force-slow-path", "app_name": "d8", "probability": 0.05}, {"app_args": "--force-slow-path", "app_name": "d8", "probability": 0.05},
{"app_args": "--future", "app_name": "d8", "probability": 0.25}, {"app_args": "--future", "app_name": "d8", "probability": 0.25},
{"app_args": "--interrupt-budget=1000", "app_name": "d8", "probability": 0.25}, {"app_args": "--interrupt-budget=1000", "app_name": "d8", "probability": 0.25},

3
tools/clusterfuzz/v8_fuzz_flags.json
View File

@ -30,5 +30,6 @@
[0.05, "--budget-for-feedback-vector-allocation=0"], [0.05, "--budget-for-feedback-vector-allocation=0"],
[0.1, "--no-wasm-generic-wrapper"], [0.1, "--no-wasm-generic-wrapper"],
[0.1, "--turbo-force-mid-tier-regalloc"], [0.1, "--turbo-force-mid-tier-regalloc"],
[0.0001, "--simulate-errors"] [0.0001, "--simulate-errors"],
[0.25, "--compact-map-space"]
] ]

77
tools/testrunner/testproc/fuzzer.py
View File

@ -11,44 +11,45 @@ from . import base
# Extra flags randomly added to all fuzz tests with numfuzz. List of tuples # Extra flags randomly added to all fuzz tests with numfuzz. List of tuples
# (probability, flag). # (probability, flag).
EXTRA_FLAGS = [ EXTRA_FLAGS = [
(0.1, '--always-opt'), (0.1, '--always-opt'),
(0.1, '--assert-types'), (0.1, '--assert-types'),
(0.1, '--budget-for-feedback-vector-allocation=0'), (0.1, '--budget-for-feedback-vector-allocation=0'),
(0.1, '--cache=code'), (0.1, '--cache=code'),
(0.1, '--force-slow-path'), (0.25, '--compact-map-space'),
(0.2, '--future'), (0.1, '--force-slow-path'),
(0.1, '--interrupt-budget=100'), (0.2, '--future'),
(0.1, '--liftoff'), (0.1, '--interrupt-budget=100'),
(0.2, '--no-analyze-environment-liveness'), (0.1, '--liftoff'),
# TODO(machenbach): Enable when it doesn't collide with crashing on missing (0.2, '--no-analyze-environment-liveness'),
# simd features. # TODO(machenbach): Enable when it doesn't collide with crashing on missing
#(0.1, '--no-enable-sse3'), # simd features.
#(0.1, '--no-enable-ssse3'), #(0.1, '--no-enable-sse3'),
#(0.1, '--no-enable-sse4_1'), #(0.1, '--no-enable-ssse3'),
(0.1, '--no-enable-sse4_2'), #(0.1, '--no-enable-sse4_1'),
(0.1, '--no-enable-sahf'), (0.1, '--no-enable-sse4_2'),
(0.1, '--no-enable-avx'), (0.1, '--no-enable-sahf'),
(0.1, '--no-enable-fma3'), (0.1, '--no-enable-avx'),
(0.1, '--no-enable-bmi1'), (0.1, '--no-enable-fma3'),
(0.1, '--no-enable-bmi2'), (0.1, '--no-enable-bmi1'),
(0.1, '--no-enable-lzcnt'), (0.1, '--no-enable-bmi2'),
(0.1, '--no-enable-popcnt'), (0.1, '--no-enable-lzcnt'),
(0.3, '--no-lazy-feedback-allocation'), (0.1, '--no-enable-popcnt'),
(0.1, '--no-liftoff'), (0.3, '--no-lazy-feedback-allocation'),
(0.1, '--no-opt'), (0.1, '--no-liftoff'),
(0.2, '--no-regexp-tier-up'), (0.1, '--no-opt'),
(0.1, '--no-wasm-tier-up'), (0.2, '--no-regexp-tier-up'),
(0.1, '--regexp-interpret-all'), (0.1, '--no-wasm-tier-up'),
(0.1, '--regexp-tier-up-ticks=10'), (0.1, '--regexp-interpret-all'),
(0.1, '--regexp-tier-up-ticks=100'), (0.1, '--regexp-tier-up-ticks=10'),
(0.1, '--stress-background-compile'), (0.1, '--regexp-tier-up-ticks=100'),
(0.1, '--stress-concurrent-inlining'), (0.1, '--stress-background-compile'),
(0.1, '--stress-flush-code'), (0.1, '--stress-concurrent-inlining'),
(0.1, '--stress-lazy-source-positions'), (0.1, '--stress-flush-code'),
(0.1, '--stress-wasm-code-gc'), (0.1, '--stress-lazy-source-positions'),
(0.1, '--turbo-instruction-scheduling'), (0.1, '--stress-wasm-code-gc'),
(0.1, '--turbo-stress-instruction-scheduling'), (0.1, '--turbo-instruction-scheduling'),
(0.1, '--turbo-force-mid-tier-regalloc'), (0.1, '--turbo-stress-instruction-scheduling'),
(0.1, '--turbo-force-mid-tier-regalloc'),
] ]
def random_extra_flags(rng): def random_extra_flags(rng):