320d98709f
This is a JavaScript fuzzer originally authored by Oliver Chang. It is a mutation based fuzzer using Babel code transformations. For more information see the included README.md. The original code was altered: - Add new V8 copyright headers. - Make the test expectation generator aware of the headers. - Fix file endings for presubmit checks. - Fix `npm test` on fresh checkout with a new fake DB. - Make test skipping work with new v8/tools location. - OWNERS file. - New title section in README.md. No-Try: true Bug: chromium:1109770 Change-Id: Ie71752c0a37491a50500c49060a3c526716ef933 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2320330 Commit-Queue: Michael Achenbach <machenbach@chromium.org> Reviewed-by: Maya Lekova <mslekova@chromium.org> Cr-Commit-Position: refs/heads/master@{#69164}
42 lines
601 B
JavaScript
42 lines
601 B
JavaScript
// Copyright 2020 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
function blah() {
|
|
try {
|
|
var a = 10;
|
|
console.log(a);
|
|
} catch (e) {}
|
|
|
|
label: for (var i = 0; i < 100; i++) {
|
|
var b = 0;
|
|
while (b < 10) {
|
|
console.log(b);
|
|
b += 2;
|
|
continue label;
|
|
}
|
|
}
|
|
}
|
|
|
|
blah();
|
|
blah();
|
|
|
|
(function () {1;1;})();
|
|
|
|
if (true) {
|
|
2;2;
|
|
} else {
|
|
3;3;
|
|
}
|
|
|
|
let a = 0;
|
|
switch (a) {
|
|
case 1: 1;
|
|
}
|
|
|
|
with (Math) {
|
|
cos(PI);
|
|
}
|
|
|
|
let module = new WebAssembly.Module(builder.toBuffer());
|