9036662f6d
This prepares using ochang_js_fuzzer with foozzie. The fuzzer uses tests from CrashTests in the corpus. This leads to a loop when used with differential fuzzing, as foozzie dedupes failures based on the original file path. Foozzie finds a new failure for the existing failure in CrashTests, for which clusterfuzz creates a new crash test and so on. This subsumes all failures from CrashTests under the same key. Once such a failure is reported, a developer can add it to a mapping in foozzie.py, after which the global key can be used again by clusterfuzz to report another failure. No-Try: true Bug: chromium:1044942 Change-Id: I801a23faeb0c672d6ad64b4100c463f53e36cbc2 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2214837 Commit-Queue: Michael Achenbach <machenbach@chromium.org> Reviewed-by: Clemens Backes <clemensb@chromium.org> Reviewed-by: Maya Lekova <mslekova@chromium.org> Cr-Commit-Position: refs/heads/master@{#68053} |
||
---|---|---|
.. | ||
testdata | ||
toolchain | ||
BUILD.gn | ||
OWNERS | ||
PRESUBMIT.py | ||
v8_commands.py | ||
v8_foozzie_harness_adjust.js | ||
v8_foozzie_test.py | ||
v8_foozzie.py | ||
v8_fuzz_config.py | ||
v8_fuzz_experiments.json | ||
v8_fuzz_flags.json | ||
v8_mock_archs.js | ||
v8_mock_webassembly.js | ||
v8_mock.js | ||
v8_sanity_checks.js | ||
v8_suppressions.js | ||
v8_suppressions.py |