oss-fuzz
oss-fuzz copied to clipboard
New project: chrome-wasm-fuzzer
This is a dedicated fuzz target for Chrome's V8 WebAssembly parser. The fuzzer uses libprotobuf-mutator to generate malformed WASM modules, aiming to find OOB writes, type confusion, and JIT crashes.
- Language: C++
- Fuzzing Engine: libfuzzer
- Sanitizers: AddressSanitizer, UndefinedBehaviorSanitizer
- Dependencies: Base V8 components (handled in BUILD.gn)
- Why this? WASM is a high-risk area for Chrome (15+ CVEs in 2025); this targets instantiate and compile paths.
Ready for integration. Let me know if adjustments needed.
Do you work on this project? I'm think you should probably upstream this target since v8 is fuzzed in Chrome