Function fuzz

xs/tools/xstFuzz.c:447–587

#endif

int fuzz(int argc, char* argv[])
{
	char helo[] = "HELO";
	if (4 != write(REPRL_CWFD, helo, 4)) {
		fprintf(stderr, "Error writing HELO\n");
		c_exit(-1);
	}
	if (4 != read(REPRL_CRFD, helo, 4)) {
		fprintf(stderr, "Error reading HELO\n");
		c_exit(-1);
	}
	if (0 != memcmp(helo, "HELO", 4)) {
		fprintf(stderr, "Invalid response from parent\n");
		c_exit(-1);
	}
	xsCreation _creation = {
		1 * 1024 * 1024, 	/* initialChunkSize */
		1 * 1024 * 1024, 	/* incrementalChunkSize */
		32768, 				/* initialHeapCount */
		32768,			 	/* incrementalHeapCount */
		64 * 1024,	 		/* stackCount */
		1024,				/* initialKeyCount */
		1024,				/* incrementalKeyCount */
		1993, 				/* nameModulo */
		127, 				/* symbolModulo */
		64 * 1024,			/* parserBufferSize */
		1993,				/* parserTableModulo */
	};

	while (1) {
		int error = 0;
		char *buffer = NULL;

		gxStress = 0;
		gxMemoryFail = 0;

		xsMachine* machine = xsCreateMachine(&_creation, "xst_fuzz", NULL);
		xsBeginMetering(machine, xsAlwaysWithinComputeLimit, 0);		// interval/step of zero means "never invoke callback" 
		{
		xsBeginHost(machine);
		{
			xsTry {
				xsVars(1);

				// hardened javascript
				xsResult = xsNewHostFunction(fx_harden, 1);
				xsDefine(xsGlobal, xsID("harden"), xsResult, xsDontEnum);
				xsResult = xsNewHostFunction(fx_lockdown, 0);
				xsDefine(xsGlobal, xsID("lockdown"), xsResult, xsDontEnum);
				xsResult = xsNewHostFunction(fx_petrify, 1);
				xsDefine(xsGlobal, xsID("petrify"), xsResult, xsDontEnum);
				xsResult = xsNewHostFunction(fx_mutabilities, 1);
				xsDefine(xsGlobal, xsID("mutabilities"), xsResult, xsDontEnum);

				// fuzzilli
				xsResult = xsNewHostFunction(fx_fuzzilli, 2);
				xsSet(xsGlobal, xsID("fuzzilli"), xsResult);
				xsResult = xsNewHostFunction(fx_fuzz_gc, 0);