Commit 794c0f0
Add new fuzzing flags for V8
This change introduces the following flags to the V8 fuzzing profile:
- --maglev-as-top-tier
- --maglev-non-eager-inlining
- --max_maglev_inlined_bytecode_size_small=0
- --max_inlined_bytecode_size_small=0
These flags are expected to increase fuzzing coverage for edge cases in the V8 engine.
While the probabilities in the code may seem high, they are conditional and depend on other flags being set.
Bug: 456452258, 456451490, 456142887, 455592879
Change-Id: I486170bc27798f31ee905f2ff8e6c881a44b9265
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8736336
Commit-Queue: Dominik Klemba <tacet@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Auto-Submit: Dominik Klemba <tacet@google.com>
Reviewed-by: Victor Gomes <victorgomes@google.com>
Reviewed-by: Darius Mercadier <dmercadier@google.com>1 parent 59f6bd2 commit 794c0f0
1 file changed
Lines changed: 13 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
41 | 41 | | |
42 | 42 | | |
43 | 43 | | |
| 44 | + | |
| 45 | + | |
| 46 | + | |
44 | 47 | | |
45 | 48 | | |
46 | 49 | | |
| |||
91 | 94 | | |
92 | 95 | | |
93 | 96 | | |
| 97 | + | |
| 98 | + | |
| 99 | + | |
| 100 | + | |
| 101 | + | |
| 102 | + | |
| 103 | + | |
94 | 104 | | |
95 | 105 | | |
96 | 106 | | |
| |||
99 | 109 | | |
100 | 110 | | |
101 | 111 | | |
| 112 | + | |
| 113 | + | |
| 114 | + | |
102 | 115 | | |
103 | 116 | | |
104 | 117 | | |
| |||
0 commit comments