v8/tools/clusterfuzz/js_fuzzer/mutators
Michael Achenbach 0ffc1ba5fc [js-fuzzer] Make db more robust to failing code fragments.
Until now, the cross-over mutator would choke on several expressions
from DB and bail out (just wastes some time). We also have a script,
test_db.js to test on how many expressions it is going to bail out.

With this change, we already omit adding such expressions to the
DB in the first place. As a result, the test_db script now returns
zero failing expressions (while all other expressions remain).

Regression tests that now no longer apply are removed, instead a
test is added that ensures that a failing expression isn't added
to the DB.

No-Try: true
Bug: chromium:1044942
Change-Id: I14a4fe802c99114cf3a8f71188273475a7cb9c13
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3129340
Reviewed-by: Liviu Rau <liviurau@chromium.org>
Commit-Queue: Michael Achenbach <machenbach@chromium.org>
Cr-Commit-Position: refs/heads/main@{#76598}
2021-08-31 11:28:21 +00:00
..
array_mutator.js Open source js-fuzzer 2020-07-31 11:34:39 +00:00
common.js Open source js-fuzzer 2020-07-31 11:34:39 +00:00
crossover_mutator.js [js-fuzzer] Make db more robust to failing code fragments. 2021-08-31 11:28:21 +00:00
differential_fuzz_mutator.js Open source js-fuzzer 2020-07-31 11:34:39 +00:00
expression_mutator.js Open source js-fuzzer 2020-07-31 11:34:39 +00:00
function_call_mutator.js [sparkplug] Add fuzzer support for CompileBaseline 2021-03-10 17:49:18 +00:00
mutator.js Open source js-fuzzer 2020-07-31 11:34:39 +00:00
normalizer.js Open source js-fuzzer 2020-07-31 11:34:39 +00:00
number_mutator.js Open source js-fuzzer 2020-07-31 11:34:39 +00:00
object_mutator.js Open source js-fuzzer 2020-07-31 11:34:39 +00:00
try_catch.js Open source js-fuzzer 2020-07-31 11:34:39 +00:00
variable_mutator.js Open source js-fuzzer 2020-07-31 11:34:39 +00:00
variable_or_object_mutation.js Open source js-fuzzer 2020-07-31 11:34:39 +00:00