Skip to content

Conversation

@chase1k
Copy link

@chase1k chase1k commented Nov 13, 2025

There are some new developments made by fuzzilli, we want to make sure we're not making duplicate work

  • I.e. there are new codegens we're not trying to duplicate work

Liedtke and others added 30 commits October 8, 2025 09:53
Bug: 449893303
Change-Id: I2621ec4f20fa4fdec65c6aba9f1fb468b363fcde
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8643956
Reviewed-by: Pawel Krawczyk <pawkra@google.com>
Reviewed-by: Michael Achenbach <machenbach@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Bug: 427115604
Change-Id: I0a79b5dc133a09c1ec84b78b966bc6c27d9aa3f2
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8643536
Auto-Submit: Pawel Krawczyk <pawkra@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
This reverts commit dc981ce.

Reason for revert: This fix was invalidated by commit 88d0e33

Original change's description:
> Fix order in Opcodes.swift to be in line with program.proto
>
> Commit adfa084 manually modified the
> program.proto, so these got out of sync.
>
> Bug: 446634535
> Change-Id: I63438de9d88684a766b2f4f2cfc7f88a5b5b1079
> Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8643678
> Reviewed-by: Michael Achenbach <machenbach@google.com>
> Auto-Submit: Matthias Liedtke <mliedtke@google.com>
> Commit-Queue: Michael Achenbach <machenbach@google.com>

Bug: 446634535
Change-Id: I873f100cf42b628548ab123230c869e91cc2c713
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8655440
Bot-Commit: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com>
Reviewed-by: Pawel Krawczyk <pawkra@google.com>
Commit-Queue: Pawel Krawczyk <pawkra@google.com>
Bug: 449893303
Change-Id: I206533d114565c7565dd7ab33411e7b932837640
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8657396
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Michael Achenbach <machenbach@google.com>
Commit-Queue: Michael Achenbach <machenbach@google.com>
This flag is added in https://crrev.com/c/7022989.

Bug: 450246010
Change-Id: Ibcda60b74ef76d536c0ec94a5b40799a29b233e7
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8654776
Reviewed-by: Michael Achenbach <machenbach@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
The application of patches in bot_update in the infrastructure leaves
files as staged, which would be detected by the `git status` command.

We change this to `git diff` to only flag the unstaged changes,
provoked by the proto generation tool.

This also fixes more directories that require to be absolute paths.

Bug: 449893303
Change-Id: Ic06d6594e18237453c85a3d2bafd944ceababd7d
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8655125
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Michael Achenbach <machenbach@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Include `--proto_assign_seq_opt` with a 0.5 probability.

Bug: 429332174
Change-Id: Ibd2539fe2bff676ebd8fb4b23b3805484ae524b1
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8673377
Commit-Queue: Raphaël Hérouart <rherouart@google.com>
Reviewed-by: Michael Achenbach <machenbach@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Bug: 453513823
Change-Id: I4739cb837eee52faea8af449b4938314517fcb38
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8685816
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
…ectzero#535)

* Make REPRL env property a list of tuples of (key, value)
* Pass env vars when running startup tests
While not a perfect fix, this will address the warnings and should lead
to generating useful samples.

Change-Id: Iff0dc4d099a0ebf5138c271209351cc633f222a3
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8655658
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Carl Smith <cffsmith@google.com>
... as the project is now maintained by a broader group of people.

Change-Id: Ie08675f27644b7f54c9e9e2eb265163fb358e5cf
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8686137
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Samuel Groß <saelo@google.com>
Fuzzilli sometimes aborts without any message. This adds a message
to a code place that might not print anything else yet.

Bug: 453513823
Change-Id: Ice480cc70903cfcb73165886db7b497cd0bb907e
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8679216
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Danylo Mocherniuk <mdanylo@google.com>
Commit-Queue: Michael Achenbach <machenbach@google.com>
This doesn't seem to work with Fuzzilli, yet.

Bug: 453530599
Change-Id: Id944bba33c2c802cceada5f7281ac1c82a811c36
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8686136
Reviewed-by: Michael Achenbach <machenbach@google.com>
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Commit-Queue: Michael Achenbach <machenbach@google.com>
This will be used by an automated script compiling and lifting
test cases from e.g. test262.

Bug: 442444727
Change-Id: I0b2321e44e0def292cd88a103a46b03960ee1d55
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8680076
Commit-Queue: Michael Achenbach <machenbach@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
This turns the existing disposable-variable generators into new-style
stubs that enable more expressive code generation in the
bodies of the generated objects.

Bug: 446632644
Change-Id: Ife11999aa61d133c15232bca58e30deb525d880d
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8654476
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Commit-Queue: Michael Achenbach <machenbach@google.com>
This removes some redundant assertions that are already checked
in the same way by the `inContext` requirements of the respective
code generators.

Bug: 446632644
Change-Id: I50b9432d15d8554040d0598893b3fb35ae264fba
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8686138
Commit-Queue: Michael Achenbach <machenbach@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
[Insert Spider-Man quote here]

Change-Id: I64ea011d92b5bc535a4c19c8326782ad1512708b
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8690557
Commit-Queue: Michael Achenbach <machenbach@google.com>
Reviewed-by: Michael Achenbach <machenbach@google.com>
Bug: 450045070
Change-Id: I6bf07aa3b854e703b0b199939e8e9018a1ef00a7
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8690756
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Commit-Queue: Omer Katz <omerkatz@google.com>
The marketplace GitHub action for checking out a specific swift version
causes all kinds of issues.
While installing swift manually is possible, it's extra work. As the
default GitHub ubuntu container ships with swift 6.2 pre-installed,
switch to just using that version.
Note: The MacOS instance uses 6.1.2 which is also new enough for our
purposes.

This allows us to reland commit 80ad045.

Fixed: 448848874
Change-Id: I28fa83b07c3f49dcdd6ef45dbac838d7ebeb885e
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8687278
Reviewed-by: Michael Achenbach <machenbach@google.com>
Commit-Queue: Michael Achenbach <machenbach@google.com>
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
This is a reland of commit 80ad045
CQ and GitHub actions now use newer versions that shouldn't crash
any more when compiling this for release builds.

Original change's description:
> Simplify constrained string generation in code generators
>
> Change-Id: I0ed4abed4a3ef0c7e150971ec58f0aae7e5b0982
> Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8591236
> Auto-Submit: Matthias Liedtke <mliedtke@google.com>
> Reviewed-by: Carl Smith <cffsmith@google.com>
> Commit-Queue: Matthias Liedtke <mliedtke@google.com>

Change-Id: I98d5ee50de6057e239d1fae2b0ce4a3dfb1af1bd
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8687236
Reviewed-by: Carl Smith <cffsmith@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
…tors""

This reverts commit c1a33c1.

Reason for revert: https://crbug.com/454201777

Original change's description:
> Reland "Simplify constrained string generation in code generators"
>
> This is a reland of commit 80ad045
> CQ and GitHub actions now use newer versions that shouldn't crash
> any more when compiling this for release builds.
>
> Original change's description:
> > Simplify constrained string generation in code generators
> >
> > Change-Id: I0ed4abed4a3ef0c7e150971ec58f0aae7e5b0982
> > Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8591236
> > Auto-Submit: Matthias Liedtke <mliedtke@google.com>
> > Reviewed-by: Carl Smith <cffsmith@google.com>
> > Commit-Queue: Matthias Liedtke <mliedtke@google.com>
>
> Change-Id: I98d5ee50de6057e239d1fae2b0ce4a3dfb1af1bd
> Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8687236
> Reviewed-by: Carl Smith <cffsmith@google.com>
> Commit-Queue: Matthias Liedtke <mliedtke@google.com>

Bug: 454201777
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Change-Id: I9f3fc81d632842c357b999a6b7c93602660a3f25
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8693758
Bot-Commit: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com>
Commit-Queue: Michael Achenbach <machenbach@google.com>
…tors""

This is a reland of commit c1a33c1
No changes.

Original change's description:
> Reland "Simplify constrained string generation in code generators"
>
> This is a reland of commit 80ad045
> CQ and GitHub actions now use newer versions that shouldn't crash
> any more when compiling this for release builds.
>
> Original change's description:
> > Simplify constrained string generation in code generators
> >
> > Change-Id: I0ed4abed4a3ef0c7e150971ec58f0aae7e5b0982
> > Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8591236
> > Auto-Submit: Matthias Liedtke <mliedtke@google.com>
> > Reviewed-by: Carl Smith <cffsmith@google.com>
> > Commit-Queue: Matthias Liedtke <mliedtke@google.com>
>
> Change-Id: I98d5ee50de6057e239d1fae2b0ce4a3dfb1af1bd
> Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8687236
> Reviewed-by: Carl Smith <cffsmith@google.com>
> Commit-Queue: Matthias Liedtke <mliedtke@google.com>

Change-Id: I42839ff3fdf773a99dbd6a8d0f8136c38ab7dda5
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8695016
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Michael Achenbach <machenbach@google.com>
Commit-Queue: Michael Achenbach <machenbach@google.com>
Bug: 453513823
Change-Id: I868371479c88a9d0cb6074f9c31f2bab3630b9d9
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8696136
Commit-Queue: Michael Achenbach <machenbach@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Michael Achenbach <machenbach@google.com>
Change-Id: Ia2fe631be7b92c5aeafaf99de9a0fdb7fd9f0480
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8695757
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Pawel Krawczyk <pawkra@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Replace 'reflexive' with 'symmetric' in ILType description.

Change-Id: I96fd27e6dd1c3a5bc579f55a50b61e9b5ab9c7e3
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8696137
Auto-Submit: Pawel Krawczyk <pawkra@google.com>
Commit-Queue: Pawel Krawczyk <pawkra@google.com>
Reviewed-by: Danylo Mocherniuk <mdanylo@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Previously:
 Have 8 custom property names: ["h", "b", "a", "g", "d", "e", "f", "c"]
Now:
 Have 8 custom property names: ["a", "b", "c", "d", "e", "f", "g", "h"]

Change-Id: I04256b8960004b900abfc904fb40544a4fc62610
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8701336
Commit-Queue: Pawel Krawczyk <pawkra@google.com>
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Pawel Krawczyk <pawkra@google.com>
Bug: 448349112, 42204563
Change-Id: I77bd3846b12cad1707b8d521d45a62d32f27588d
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8695756
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Pawel Krawczyk <pawkra@google.com>
This enables profiles to specify a value or an interval for timeouts.

If the interval is given, a timeout from this interval will be
determined based on the start-up tests.

Bug: 453513823
Change-Id: I1904af15153a2fcbd15c688e838bee882b45cac4
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8703697
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Commit-Queue: Michael Achenbach <machenbach@google.com>
This reverts commit 177973b.

Reason for revert: The flag is now enabled by default. Fuzzilli
                   Adding it with some probability no longer makes
                   sense.

Original change's description:
> Add --handle-weak-ref-weakly-in-minor-gc to Fuzzilli
>
> Bug: 340777103
> Change-Id: I0946794f9517b4839db6f8a303c63bd8ceea3ad3
> Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8614796
> Auto-Submit: Omer Katz <omerkatz@google.com>
> Reviewed-by: Matthias Liedtke <mliedtke@google.com>
> Commit-Queue: Omer Katz <omerkatz@google.com>

Bug: 340777103
Change-Id: I77084c000747a6f86994059706f6a5175bcac30b
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8723036
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Omer Katz <omerkatz@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
We create alerts when the logs contain ": Assertion Failed" to catch
Swift assertions. We have cases where the ExplorationMutator runs into
issues when running the instrumented code that contains both the
instrumentation for the corrupt() call to cause in-sandbox corruption as
well as the exploration mutation running and then causing one of these
assert calls in JS to fail.

I don't think it should be considered a critical unexpected failure when
this is triggered.

Change-Id: I149132d9f081df62554d2e3c543fb63f9c299b71
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8719276
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Michael Achenbach <machenbach@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Liedtke and others added 27 commits November 5, 2025 04:55
This is a preparation change to share some of that configuration with
the V8 Sandbox profile which right now doesn't support any argument
randomization.

This change only moves the existing flags without any change.

Change-Id: I5dc4dd25a00e08aac6ff293cf91c7e9af2286251
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8741376
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Samuel Groß <saelo@google.com>
Commit-Queue: Samuel Groß <saelo@google.com>
This makes the V8SandboxProfile more powerful by reusing the argument
randomization of the regular V8Profile.

It also adds more arguments to the default set:
  --expose-externalize-string: seems to be unused, doesn't hurt
  --wasm-test-streaming: Needed for d8 streaming APIs

  Staged features:
  --future
  --harmony
  --experimental-fuzzing
  --js-staging
  --wasm-staging
  --experimental-wasm-rab-integration

  Fast API:
  --wasm-fast-api
  --expose-fast-api

Change-Id: Ied92d69ad21b5ef1de4fab90fb2c07b7023ea078
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8741396
Reviewed-by: Samuel Groß <saelo@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
This was staged via https://crrev.com/c/7023051 and is therefore
included in --wasm-staging.

Change-Id: I06cefd5d93374c4535024c88dba5bead38c13200
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8741397
Reviewed-by: Deepti Gandluri <gdeepti@chromium.org>
Commit-Queue: Danylo Mocherniuk <mdanylo@google.com>
I accidentally dropped the --sandbox-fuzzing flag in
commit 5966bb0.

Change-Id: I753bf5ba49dd422b0955dc1beaf8ce176e878a0d
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8741378
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Danylo Mocherniuk <mdanylo@google.com>
Commit-Queue: Danylo Mocherniuk <mdanylo@google.com>
This change adds a possibility of generation rest parameters.
The logic in 'randomParameters' was updated to generate a rest parameter with 20% chance whenever possible
The chance is an optional function argument, so we can modify that value in tests (and in the code, if necessary).

Bug: 458042811, 456162872
Change-Id: Idaf6446cfd248878134e7a449746260e44cfb74b
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8741997
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Pawel Krawczyk <pawkra@google.com>
Commit-Queue: Dominik Klemba <tacet@google.com>
Auto-Submit: Dominik Klemba <tacet@google.com>
Bug: 455553031
Change-Id: Iaac109353f44c24bdc3c12c7a62c472c12000646
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8747997
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Commit-Queue: Dominik Klemba <tacet@google.com>
Reviewed-by: Darius Mercadier <dmercadier@google.com>
Reviewed-by: Victor Gomes <victorgomes@google.com>
Reviewed-by: Dominik Klemba <tacet@google.com>
Change-Id: I86f9df4c97ecc171d8bc4d3ef506f19508923aa1
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8748176
Reviewed-by: Darius Mercadier <dmercadier@google.com>
Reviewed-by: Dominik Klemba <tacet@google.com>
Commit-Queue: Dominik Klemba <tacet@google.com>
Change-Id: I571c86907f5414fbfd552016ba6aa46c19ae01eb
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8748376
Reviewed-by: Dominik Klemba <tacet@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Bug: 449893303
Change-Id: I2621ec4f20fa4fdec65c6aba9f1fb468b363fcde
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8643956
Reviewed-by: Pawel Krawczyk <pawkra@google.com>
Reviewed-by: Michael Achenbach <machenbach@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Bug: 427115604
Change-Id: I0a79b5dc133a09c1ec84b78b966bc6c27d9aa3f2
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8643536
Auto-Submit: Pawel Krawczyk <pawkra@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
This reverts commit dc981ce.

Reason for revert: This fix was invalidated by commit 88d0e33

Original change's description:
> Fix order in Opcodes.swift to be in line with program.proto
>
> Commit adfa084 manually modified the
> program.proto, so these got out of sync.
>
> Bug: 446634535
> Change-Id: I63438de9d88684a766b2f4f2cfc7f88a5b5b1079
> Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8643678
> Reviewed-by: Michael Achenbach <machenbach@google.com>
> Auto-Submit: Matthias Liedtke <mliedtke@google.com>
> Commit-Queue: Michael Achenbach <machenbach@google.com>

Bug: 446634535
Change-Id: I873f100cf42b628548ab123230c869e91cc2c713
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8655440
Bot-Commit: Rubber Stamper <rubber-stamper@appspot.gserviceaccount.com>
Reviewed-by: Pawel Krawczyk <pawkra@google.com>
Commit-Queue: Pawel Krawczyk <pawkra@google.com>
Bug: 449893303
Change-Id: I206533d114565c7565dd7ab33411e7b932837640
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8657396
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Michael Achenbach <machenbach@google.com>
Commit-Queue: Michael Achenbach <machenbach@google.com>
This flag is added in https://crrev.com/c/7022989.

Bug: 450246010
Change-Id: Ibcda60b74ef76d536c0ec94a5b40799a29b233e7
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8654776
Reviewed-by: Michael Achenbach <machenbach@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
The application of patches in bot_update in the infrastructure leaves
files as staged, which would be detected by the `git status` command.

We change this to `git diff` to only flag the unstaged changes,
provoked by the proto generation tool.

This also fixes more directories that require to be absolute paths.

Bug: 449893303
Change-Id: Ic06d6594e18237453c85a3d2bafd944ceababd7d
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8655125
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Michael Achenbach <machenbach@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Include `--proto_assign_seq_opt` with a 0.5 probability.

Bug: 429332174
Change-Id: Ibd2539fe2bff676ebd8fb4b23b3805484ae524b1
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8673377
Commit-Queue: Raphaël Hérouart <rherouart@google.com>
Reviewed-by: Michael Achenbach <machenbach@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Bug: 453513823
Change-Id: I4739cb837eee52faea8af449b4938314517fcb38
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8685816
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
…ectzero#535)

* Make REPRL env property a list of tuples of (key, value)
* Pass env vars when running startup tests
While not a perfect fix, this will address the warnings and should lead
to generating useful samples.

Change-Id: Iff0dc4d099a0ebf5138c271209351cc633f222a3
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8655658
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Carl Smith <cffsmith@google.com>
... as the project is now maintained by a broader group of people.

Change-Id: Ie08675f27644b7f54c9e9e2eb265163fb358e5cf
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8686137
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Samuel Groß <saelo@google.com>
Fuzzilli sometimes aborts without any message. This adds a message
to a code place that might not print anything else yet.

Bug: 453513823
Change-Id: Ice480cc70903cfcb73165886db7b497cd0bb907e
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8679216
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Danylo Mocherniuk <mdanylo@google.com>
Commit-Queue: Michael Achenbach <machenbach@google.com>
This doesn't seem to work with Fuzzilli, yet.

Bug: 453530599
Change-Id: Id944bba33c2c802cceada5f7281ac1c82a811c36
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8686136
Reviewed-by: Michael Achenbach <machenbach@google.com>
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Commit-Queue: Michael Achenbach <machenbach@google.com>
This will be used by an automated script compiling and lifting
test cases from e.g. test262.

Bug: 442444727
Change-Id: I0b2321e44e0def292cd88a103a46b03960ee1d55
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8680076
Commit-Queue: Michael Achenbach <machenbach@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
This turns the existing disposable-variable generators into new-style
stubs that enable more expressive code generation in the
bodies of the generated objects.

Bug: 446632644
Change-Id: Ife11999aa61d133c15232bca58e30deb525d880d
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8654476
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Commit-Queue: Michael Achenbach <machenbach@google.com>
This removes some redundant assertions that are already checked
in the same way by the `inContext` requirements of the respective
code generators.

Bug: 446632644
Change-Id: I50b9432d15d8554040d0598893b3fb35ae264fba
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8686138
Commit-Queue: Michael Achenbach <machenbach@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
[Insert Spider-Man quote here]

Change-Id: I64ea011d92b5bc535a4c19c8326782ad1512708b
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8690557
Commit-Queue: Michael Achenbach <machenbach@google.com>
Reviewed-by: Michael Achenbach <machenbach@google.com>
Bug: 450045070
Change-Id: I6bf07aa3b854e703b0b199939e8e9018a1ef00a7
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8690756
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Commit-Queue: Omer Katz <omerkatz@google.com>
@chase1k chase1k self-assigned this Nov 13, 2025
@chase1k chase1k merged commit 3977cfa into main Nov 13, 2025
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants