Samuel Groß
Samuel Groß
Nice, thanks for the report! Overall, I think it would be nice to have some more inspectability of the minimizer (in addition to [proper tests for it](https://github.com/googleprojectzero/fuzzilli/issues/232)), to better understand...
Hi! You can find information about the IL and how it's used in Fuzzilli here: https://github.com/googleprojectzero/fuzzilli/blob/main/Docs/HowFuzzilliWorks.md apart from that, the next best source of information is probably the source code,...
Cool! Yeah I think it makes sense to split array desctructuring and object destruturing into two separate PRs. I guess we'd eventually also want to be able to support something...
Ok that sounds good to me. So then we'd go with new CodeGenerators for now, but then remove them again once we have a `generateFunctionSignature` since we won't need them...
Hi! Yeah, currently if you don't specify `--storagePath`, it won't write anything to disk: https://github.com/googleprojectzero/fuzzilli/blob/cde2e151ccdb1d34b73117ea89bdeb33ae921b13/Sources/FuzzilliCli/main.swift#L463 The main reason for that is that workers don't need disk storage: they simply send...
I suspect it's an issue with the HybridEngine. There were quite a few issues with e.g. the way it currently instantiates Types, and I wouldn't be surprised if there are...
So I guess there are at least two issues with that: - What to do if the directory already exists? Should one of --resume or --overwrite be the default as...
Thanks for the report! From what I can tell, the 2nd issue (less coverage after import) is most likely working as intended. When resuming, Fuzzilli executes each sample again and...
Alternatively, I guess the line deleting `old_corpus/` could just move a couple lines down until after the import was successful ([here](https://github.com/googleprojectzero/fuzzilli/blob/e2638187b39647bd3eda76fe3a20a6f787a5850e/Sources/FuzzilliCli/main.swift#L535)) and the code moving `corpus/` to `/old_corpus` should then...
Hi! You are missing `/path/to/jsshell` (from step 5). It should look something like this for fuzzing e.g. v8: ``` > swift run FuzzilliCli --profile=v8 --storagePath=/home/oren/Downloads/AAA --inspect=all /path/to/v8_checkout/out/fuzzbuild/d8 ```