cranelift

rust jit wasm webassembly runtime wasi cranelift sandbox wasmtime

Alex Crichton b4ecea38bc Add a fuzzer for async wasm (#8440 ) * Add a fuzzer for async wasm This commit revives a very old branch of mine to add a fuzzer for Wasmtime in async mode. This work was originally blocked on llvm/llvm-project#53891 and while that's still an issue it now contains a workaround for that issue. Support for async fuzzing required a good deal of refactorings and changes, and the highlights are: * The main part is that new intrinsics, `__sanitizer_{start,finish}_fiber_switch` are now invoked around the stack-switching routines of fibers. This only works on Unix and is set to only compile when ASAN is enabled (otherwise everything is a noop). This required refactoring of things to get it all in just the right way for ASAN since it appears that these functions not only need to be called but more-or-less need to be adjacent to each other in the code. My guess is that while we're switching ASAN is in a "weird state" and it's not ready to run arbitrary code. * Stacks are a problem. The above issue in LLVM outlines how stacks cannot be deallocated at this time because if the deallocated virtual memory is later used for the heap then ASAN will have a false positive about stack overflow. To handle this stacks are specially handled in asan mode by using a special allocation path that never deallocates stacks. This logic additionally applies to the pooling allocator which uses a different stack allocation strategy with ASAN. With all of the above a new fuzzer is added. This fuzzer generates an arbitrary module, selects an arbitrary means of async (e.g. epochs/fuel), and then tries to execute the exports of the module with various values. In general the fuzzer is looking for crashes/panics as opposed to correct answers as there's no oracle here. This is also intended to stress the code used to switch on and off stacks. * Fix non-async build * Remove unused import * Review comments * Fix compile on MIRI * Fix Windows build		7 months ago
..
api_calls.rs	Remove executable bit from Rust source files	4 years ago
call_async.rs	Add a fuzzer for async wasm (#8440)	7 months ago
compile.rs	Fuzzing: Check that Wasm compilation is deterministic (#6704)	1 year ago
component_api.rs	Don't let fuzz targets import `arbitrary` directly (#4806)	2 years ago
cranelift-fuzzgen.rs	cranelift: Enable "chaos mode" in egraph pass (#7968)	9 months ago
cranelift-icache.rs	fuzzgen: Enable SIMD fuzzing for RISC-V (#6949)	1 year ago
differential.rs	Fully enable Winch in the `differential` fuzzer (#7932)	9 months ago
instantiate-many.rs	Update the wasm-tools family of crates (#7921)	9 months ago
instantiate.rs	Update the wasm-tools family of crates (#7921)	9 months ago
stacks.rs	`wasmtime`: Implement fast Wasm stack walking (#4431)	2 years ago
table_ops.rs	Add `GcRuntime` and `GcCompiler` traits; `i31ref` support (#8196)	7 months ago
wast_tests.rs	Run all `*.wast` tests in fuzzing (#8121)	8 months ago