bytecodealliance / bytecodealliance/wasmtime

fuzz: differential V8 engine occasionally crashes

Open
#4,786 5 comments 0 reactions 0 assignees View on GitHub
bug fuzzing
Dominant language
Rust
Stars
18.6k
Forks
1.8k
Avg merge
1d 18h
Merged PRs (30d)
126

Description

### Test Case

No test case produced.

### Steps to Reproduce

```console
$ ALLOWED_ENGINES=-spec,-wasmi cargo +nightly fuzz run differential -s none
```

Run for enough time to crash.

### Expected Results

Not to crash.

### Actual Results

```
...
=== Execution rate (1023 successes / 6000 attempted modules): 17.05% ===
wasmi: 0.00%, spec: 0.00%, wasmtime: 87.70%, v8: 12.30%
wasm-smith: 44.81%, single-inst: 55.19%
...
#6851 NEW cov: 20559 ft: 63794 corp: 1188/146Kb lim: 170 exec/s: 360 rss: 106Mb L: 138/170 MS: 2 CopyPart-CopyPart-
#6862 NEW cov: 20559 ft: 63795 corp: 1189/146Kb lim: 170 exec/s: 361 rss: 106Mb L: 132/170 MS: 1 CopyPart-
#6864 NEW cov: 20560 ft: 63796 corp: 1190/146Kb lim: 170 exec/s: 361 rss: 106Mb L: 103/170 MS: 2 EraseBytes-ChangeBit-
#6869 NEW cov: 20563 ft: 63809 corp: 1191/146Kb lim: 170 exec/s: 361 rss: 106Mb L: 169/170 MS: 5 ShuffleBytes-InsertRepeatedBytes-InsertRepeatedBytes-ShuffleBytes-PersAutoDict- DE: "\xff\xff\xff\x07"-
#6988 NEW cov: 20563 ft: 63838 corp: 1192/146Kb lim: 170 exec/s: 349 rss: 106Mb L: 129/170 MS: 4 InsertRepeatedBytes-ChangeBit-EraseBytes-InsertRepeatedBytes-
────────────────────────────────────────────────────────────────────────────────

Error: Fuzz target exited with signal: 11 (core dumped)
```

### Versions and Environment

Wasmtime version or commit: `main`

Operating system: Fedora 35

Architecture: x86_64

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.