Matthias Liedtke
Matthias Liedtke
> And invoke these commands in v8 source code root directory? That's exactly the meaning. `cd` into the directory where your v8 checkout (git repository) is located. Then at that...
The current V8 implementation assumes that `stringref` is a subtype of `anyref`. (It seems to have been introduced in [this PR](https://chromium-review.googlesource.com/c/v8/v8/+/4177095).)
@gkdn Yeah, the returned value is never null. I'll adapt the return type in v8 and in my comment above.
@MaxGraey The instruction traps for invalid codepoints.
V8 has implemented this [here](https://chromium-review.googlesource.com/c/v8/v8/+/4177105): `string.new_utf8_try`, opcode `0xfb8f`. The instruction traps (out of bounds) on invalid offset / length values. The instruction returns null on any encoding errors. Otherwise it...
I've just tried it on my Windows 10 machine using WSL2 with Ubuntu 22.04 with > $ swift run -c release FuzzilliCli --profile=v8 /path/to/d8 --storagePath=/tmp/fuzzilli --jobs=16 --overwrite and it's been...
The `Array.count` with a predicate function was added in 6.0.x[^1], are you sure you compiled with 6.0.3? (I ran into the same issue when the change landed and updating to...
I'd claim that there is a strong correlation between the amount of work a mutator does and its chance to increase coverage and therefore to create an "interesting" result. Therefore,...
Could you share which parameters you passed to Fuzzilli exactly? With `--wasm` all wasm code generators should be included, so `fuzzer.codeGenerators` shouldn't be empty when filtering for `.wasmFunction`? Did you...
These issues have been addressed now with commits https://github.com/googleprojectzero/fuzzilli/commit/1df538dfdb3015204ca17337cfd439ce01f0c39c and https://github.com/googleprojectzero/fuzzilli/commit/6cec589a40da63f1867be615becfce32b65422ce: 1) With distributed fuzzing Fuzzilli reports an error if the nodes run with inconsistent `--wasm` flags > Inconsistent state...