google / google/oss-fuzz

How can i run a fuzz for v8 in local

Open
#14,522 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
12.6k
Forks
2.9k
Avg merge
2d 2h
Merged PRs (30d)
62

Description

When I use the following commands to test V8 fuzzing locally, the program exits immediately:

```
python infra/helper.py build_fuzzers --sanitizer coverage --engine none v8
python infra/helper.py run_fuzzer --sanitizer coverage --engine none v8 d8
```
and then this is the output
```bash
python infra/helper.py run_fuzzer v8 --sanitizer undefined --engine libfuzzer d8
INFO:__main__:Running: docker run --privileged --shm-size=2g --platform linux/amd64 --rm -i -e FUZZING_ENGINE=libfuzzer -e SANITIZER=undefined -e RUN_FUZZER_MODE=interactive -e HELPER=True -v /home/kali/Desktop/experiments/oss-fuzz/build/out/v8:/out -t gcr.io/oss-fuzz-base/base-runner:latest run_fuzzer d8.
vm.mmap_rnd_bits = 28
/out/d8 -- -rss_limit_mb=2560 -timeout=25 /tmp/d8_corpus < /dev/null
V8 version 14.5.0 (candidate)
d8>
```
The program is end.

Contributor guide

Open the contributing guide

Research direction

Start at infra/helper.py and the run_fuzzer entry point, comparing the build_fuzzers and run_fuzzer commands with the captured d8 interactive output. Confirm the expected local V8 fuzzing invocation and document the corrected workflow; done means a reproducible command runs the fuzzer instead of only reaching the d8 prompt.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, python
Domain
security, testing-qa
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.