eb64b26f8f
With this CL we share code among the wasm fuzzers which construct a module and run it in the interpreter and as compiled code.The fuzzers themselves only contain the code now which creates the module and the parameters. BUG=v8:6325 R=eholk@chromium.org Change-Id: I1c2d8b013531c86cb27837f1b8ec89d2688c536b Reviewed-on: https://chromium-review.googlesource.com/490048 Commit-Queue: Andreas Haas <ahaas@chromium.org> Reviewed-by: Brad Nelson <bradnelson@chromium.org> Cr-Commit-Position: refs/heads/master@{#45156}
41 lines
1.1 KiB
C++
41 lines
1.1 KiB
C++
// Copyright 2016 the V8 project authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
#ifndef WASM_SECTION_FUZZERS_H_
|
|
#define WASM_SECTION_FUZZERS_H_
|
|
|
|
#include <stddef.h>
|
|
#include <stdint.h>
|
|
|
|
#include "src/wasm/module-decoder.h"
|
|
#include "src/wasm/wasm-interpreter.h"
|
|
#include "src/wasm/wasm-module-builder.h"
|
|
|
|
namespace v8 {
|
|
namespace internal {
|
|
namespace wasm {
|
|
namespace fuzzer {
|
|
|
|
int FuzzWasmSection(v8::internal::wasm::SectionCode section,
|
|
const uint8_t* data, size_t size);
|
|
|
|
class WasmExecutionFuzzer {
|
|
public:
|
|
virtual ~WasmExecutionFuzzer() {}
|
|
int FuzzWasmModule(const uint8_t* data, size_t size);
|
|
|
|
protected:
|
|
virtual bool GenerateModule(
|
|
Isolate* isolate, Zone* zone, const uint8_t* data, size_t size,
|
|
ZoneBuffer& buffer, int32_t& num_args,
|
|
std::unique_ptr<WasmVal[]>& interpreter_args,
|
|
std::unique_ptr<Handle<Object>[]>& compiler_args) = 0;
|
|
};
|
|
|
|
} // namespace fuzzer
|
|
} // namespace wasm
|
|
} // namespace internal
|
|
} // namespace v8
|
|
#endif // WASM_SECTION_FUZZERS_H_
|