v8/tools/clusterfuzz
Michael Achenbach 886d7cfee4 Reland "Enable simulating errors to test fuzzer reliability"
This is a reland of 4ad08c82f7

The reland organizes the different error types in separate functions
for separate call stacks. Error simulation is also guarded by
a minimum file size to prevent Clusterfuzz from getting stuck with
its bad-build check.

Original change's description:
> Enable simulating errors to test fuzzer reliability
>
> This adds a d8 flag --simulate-errors, which on shutdown will cause
> certain errors. This enables testing the reliability of sanitizers.
>
> This will cause a fatal error, a dcheck (if available) or a
> violation that can be detected with one of the following sanitizers:
> ASAN, UBSAN, MSAN, CFI.
>
> The same flag used in differential fuzzing will cause an error
> subsumed with the error state "fake_difference".
>
> Bug: chromium:1152412
> Change-Id: I4b36c6fe716797004d634263617d22ca67b05600
> Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2554999
> Commit-Queue: Michael Achenbach <machenbach@chromium.org>
> Reviewed-by: Clemens Backes <clemensb@chromium.org>
> Cr-Commit-Position: refs/heads/master@{#71430}

Bug: chromium:1152412
Change-Id: I604258b4c1ebd215c26b1de6b2822663f857bf64
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2565125
Commit-Queue: Michael Achenbach <machenbach@chromium.org>
Reviewed-by: Clemens Backes <clemensb@chromium.org>
Cr-Commit-Position: refs/heads/master@{#71538}
2020-12-01 16:26:43 +00:00
..
js_fuzzer [js-fuzzer] Disallow flag that causes false positives. 2020-11-23 09:45:09 +00:00
testdata [foozzie] Insensitive terms clean-up 2020-11-27 16:57:24 +00:00
toolchain [foozzie] Correctness-compare pointer compression build 2019-10-07 07:58:42 +00:00
BUILD.gn [foozzie] Insensitive terms clean-up 2020-11-27 16:57:24 +00:00
OWNERS Use relative paths to OWNERS files 2019-08-12 13:52:52 +00:00
PRESUBMIT.py [presubmit] Clean up insensitive terms 2020-07-27 18:05:48 +00:00
v8_commands.py [foozzie] Refactoring - several code clean-ups 2020-06-29 12:29:39 +00:00
v8_foozzie_harness_adjust.js [foozzie] Fix errors in adjusted harness 2018-03-08 08:17:12 +00:00
v8_foozzie_test.py [foozzie] Insensitive terms clean-up 2020-11-27 16:57:24 +00:00
v8_foozzie.py Reland "Enable simulating errors to test fuzzer reliability" 2020-12-01 16:26:43 +00:00
v8_fuzz_config.py [foozzie] Overhaul --no-lazy-feedback-allocation comparisons 2020-02-17 14:10:37 +00:00
v8_fuzz_experiments.json [foozzie] Compare baseline/default in every run 2020-06-30 11:07:47 +00:00
v8_fuzz_flags.json [foozzie] Switch on error-simulation experiment 2020-11-26 15:55:04 +00:00
v8_mock_archs.js [foozzie] Add tests and fix mocks 2020-02-18 09:37:28 +00:00
v8_mock_webassembly.js [foozzie] Add tests and fix mocks 2020-02-18 09:37:28 +00:00
v8_mock.js [Atomics.waitAsync] Mock Atomics.waitAsync in correctness fuzzing 2020-09-22 11:04:58 +00:00
v8_smoke_tests.js [foozzie] Insensitive terms clean-up 2020-11-27 16:57:24 +00:00
v8_suppressions.js [foozzie] Remove obsolete suppression 2020-02-05 13:00:58 +00:00
v8_suppressions.py Reland "Enable simulating errors to test fuzzer reliability" 2020-12-01 16:26:43 +00:00