Skip to content

Commit 675eccd

Browse files
Samuel GroßV8-internal LUCI CQ
authored andcommitted
Add V8SandboxFuzzer
This is a basic fuzzer for the V8 Sandbox. It uses the memory corruption API to implement a random-but-deterministic (given a seed) traversal through the V8 heap object graph and corrupts some objects found this way in a deterministic way. It will also log all important decisions to produce a fairly readable log of the steps leading to a crash. Change-Id: Ic7ff03d3cb8b85230f07a5db2f8442c01f32fda4 Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8463484 Commit-Queue: Samuel Groß <[email protected]> Reviewed-by: Matthias Liedtke <[email protected]>
1 parent 34e3a12 commit 675eccd

File tree

2 files changed

+563
-0
lines changed

2 files changed

+563
-0
lines changed

Sources/FuzzilliCli/Profiles/Profile.swift

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,7 @@ let profiles = [
4646
"jsc": jscProfile,
4747
"spidermonkey": spidermonkeyProfile,
4848
"v8": v8Profile,
49+
"v8Sandbox": v8SandboxProfile,
4950
"duktape": duktapeProfile,
5051
"jerryscript": jerryscriptProfile,
5152
"xs": xsProfile,

0 commit comments

Comments
 (0)