Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save saelo/e947dbac89a62e7cfc473b49e49e4210 to your computer and use it in GitHub Desktop.
Save saelo/e947dbac89a62e7cfc473b49e49e4210 to your computer and use it in GitHub Desktop.
History of a program generated by Fuzzilli
// ===== [ Program B22F0D31-BFB5-40C1-B23B-EC221F2003A6 ] =====
// Corpus entry #8902 on instance CFC51903-38C9-46A1-A7FD-E83AF97694C4
v0 <- LoadBuiltin 'Int32Array'
v1 <- LoadInteger '0'
v2 <- LoadInteger '5'
v3 <- LoadInteger '0'
v4 <- LoadInteger '5'
v5 <- LoadInteger '0'
v6 <- LoadInteger '10'
v7 <- LoadInteger '1'
v8 <- LoadInteger '0'
v9 <- LoadInteger '2'
v10 <- UnaryOperation v1, '++'
v11 <- LoadInteger '6'
v12 <- LoadInteger '26553'
v13 <- Construct v0, [v12]
v14 <- LoadBuiltin 'Symbol'
v15 <- LoadProperty v14, 'replace'
v16 <- CallMethod v13, 'set', [v15, v11]
// ===== [ Program 711A52CC-BB6F-47F9-8858-17DF66A56464 ] =====
// Mutating B22F0D31-BFB5-40C1-B23B-EC221F2003A6 with OperationMutator
v0 <- LoadBuiltin 'Int32Array'
v1 <- LoadInteger '0'
v2 <- LoadInteger '5'
v3 <- LoadInteger '0'
v4 <- LoadInteger '5'
v5 <- LoadInteger '0'
v6 <- LoadInteger '10'
v7 <- LoadInteger '1'
v8 <- LoadInteger '0'
v9 <- LoadInteger '2'
// Mutating next operation
v10 <- UnaryOperation '-', v1
v11 <- LoadInteger '6'
v12 <- LoadInteger '26553'
v13 <- Construct v0, [v12]
v14 <- LoadBuiltin 'Symbol'
v15 <- LoadProperty v14, 'replace'
v16 <- CallMethod v13, 'set', [v15, v11]
// ===== [ Program 806B8BC4-392D-4268-BC29-88FD9B5315E3 ] =====
// Mutating 711A52CC-BB6F-47F9-8858-17DF66A56464 with CodeGenMutator
v0 <- LoadBuiltin 'Int32Array'
v1 <- LoadInteger '0'
v2 <- LoadInteger '5'
v3 <- LoadInteger '0'
v4 <- LoadInteger '5'
v5 <- LoadInteger '0'
v6 <- LoadInteger '10'
v7 <- LoadInteger '1'
v8 <- LoadInteger '0'
v9 <- LoadInteger '2'
v10 <- UnaryOperation '-', v1
v11 <- LoadInteger '6'
// Splicing instruction 12 (BeginWhile) from 0B6E2CA6-1D21-4C41-A79B-80ED6BB7897D
v12 <- LoadInteger '5'
v13 <- LoadInteger '0'
BeginWhile v13, '<', v12
v14 <- UnaryOperation v13, '++'
EndWhile
// End of splice
v15 <- LoadInteger '26553'
v16 <- Construct v0, [v15]
// Executing code generator ConstructorCallGenerator
v17 <- Construct v0, [v16]
// Code generator finished
v18 <- LoadBuiltin 'Symbol'
v19 <- LoadProperty v18, 'replace'
// Splicing instruction 18 (CallFunction) from 0EDE375E-3D78-4C27-927B-C3163829199F
v20 <- LoadBuiltin 'Object'
v21 <- CallFunction v20, []
// End of splice
v22 <- CallMethod v16, 'set', [v19, v11]
// ===== [ Program 6B73C70A-E58B-461C-85C8-7F89C003FDC4 ] =====
// Mutating 806B8BC4-392D-4268-BC29-88FD9B5315E3 with InputMutator
v0 <- LoadBuiltin 'Int32Array'
v1 <- LoadInteger '0'
v2 <- LoadInteger '5'
v3 <- LoadInteger '0'
v4 <- LoadInteger '5'
v5 <- LoadInteger '0'
v6 <- LoadInteger '10'
v7 <- LoadInteger '1'
v8 <- LoadInteger '0'
v9 <- LoadInteger '2'
v10 <- UnaryOperation '-', v1
v11 <- LoadInteger '6'
v12 <- LoadInteger '5'
v13 <- LoadInteger '0'
BeginWhile v13, '<', v12
v14 <- UnaryOperation v13, '++'
EndWhile
v15 <- LoadInteger '26553'
v16 <- Construct v0, [v15]
// Mutating input 1
v17 <- Construct v0, [v8]
v18 <- LoadBuiltin 'Symbol'
v19 <- LoadProperty v18, 'replace'
v20 <- LoadBuiltin 'Object'
v21 <- CallFunction v20, []
// Mutating input 1
v22 <- CallMethod v16, 'set', [v13, v11]
// Program is interesting due to new coverage: 1 newly discovered edge in the CFG of the target
// ===== [ Program B4411E45-C9E0-48D7-84E7-570F29DCD2AA ] =====
// Minimizing 6B73C70A-E58B-461C-85C8-7F89C003FDC4
v0 <- LoadBuiltin 'Int32Array'
v1 <- LoadInteger '6'
v2 <- LoadInteger '5'
v3 <- LoadInteger '0'
v4 <- UnaryOperation v3, '++'
v5 <- LoadInteger '26553'
v6 <- Construct v0, [v5]
v7 <- CallMethod v6, 'set', [v3, v1]
// ==== Program B4411E45-C9E0-48D7-84E7-570F29DCD2AA Lifted to JavaScript ====
function main() {
const v2 = 5;
let v3 = 0;
const v4 = v3++;
const v6 = new Int32Array(26553);
const v7 = v6.set(v3,6);
}
main();
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment