The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoResearchPeer-reviewed
Fuzzing JavaScript JIT Compilers With Optimization Path Feedback
- Published
- Record updated
Summary
OptFuzz is a fuzzing approach for JavaScript JIT compilers that uses optimization path feedback rather than code coverage alone. It approximates optimization paths with an optimization subpath metric, guiding seed preservation and scheduling, and keeps subpaths only when optimizations are triggered at the JIT intermediate representation level. Implemented on four baseline fuzzers and tested on four mainstream JavaScript engines, it found several times more bugs on earlier versions and 52 new bugs on the latest engines, 43 of which were confirmed or fixed.