js-test-suite

This repository provides a collection of JS test suites from ChakraCore, SpiderMonkey, V8, JavaScriptCore, and Test262 repositories. This set was used for evaluation in our paper, "Montage: A Neural Network Language Model-Guided JavaScript Engine Fuzzer", which appeared in USENIX Security 2020.

Date of the collection

We collected JS files from each repository as of the following dates.

Test harness files

The following paragraph is taken from Sec. 4.3 of the paper "Fuzzing with Code Fragments", which is published in USENIX Security 2012.

To run JS tests, each JS test may need its proper test harness which contains definitions required for the test. A good example is the SpiderMonkey's test suite. The top level directory contains a file shell.js with definitions required for all tests. Every subdirectory may contain an additional shell.js with further definitions that might only be required for the tests in that directory. To run a test, the JavaScript engine must execute all shell files in the correct order, followed by the test itself.

We addressed this issue by inserting JS statements that load the required JS harness for each file.

How to deduplicate JS files

Please refer to php-packer for removing duplicate JS files.

Acknowledgement

This work was done by Jihoon Kim while he was at SoftSec Lab, KAIST.