-
Notifications
You must be signed in to change notification settings - Fork 2.5k
Open
Description
This is a dedicated fuzz target for Chrome's V8 WebAssembly parser. The fuzzer uses libprotobuf-mutator to generate malformed WASM modules, aiming to find OOB writes, type confusion, and JIT crashes.
- Language: C++
- Fuzzing Engine: libfuzzer
- Sanitizers: AddressSanitizer, UndefinedBehaviorSanitizer
- Dependencies: Base V8 components (handled in BUILD.gn)
- Why this? WASM is a high-risk area for Chrome (15+ CVEs in 2025); this targets instantiate and compile paths.
Ready for integration. Let me know if adjustments needed.
Metadata
Metadata
Assignees
Labels
No labels