fuzz: Add an Interpreter fuzzer

We add an interpreter fuzzer, that generates a valid althrough could be meaningless program, that we then run through interpreter. Expectation here is that with grammer based fuzzing, we can find issues within the interpreter implementation. Note, currently we do not support target jumps, conditional or unconditional. Signed-off-by: Aman <[email protected]>
paritytech · Feb 26, 2025 · 97742e9 · 97742e9
1 parent 8e727e0
commit 97742e9
Show file tree

Hide file tree

Showing 3 changed files with 546 additions and 0 deletions.
diff --git a/fuzz/Cargo.lock b/fuzz/Cargo.lock
diff --git a/fuzz/Cargo.toml b/fuzz/Cargo.toml
@@ -18,6 +18,9 @@ features = ["export-internals-for-testing"]
 [dependencies.polkavm-linker]
 path = "../crates/polkavm-linker"
 
+[dependencies.polkavm-common]
+path = "../crates/polkavm-common"
+
 [[bin]]
 name = "fuzz_shm_allocator"
 path = "fuzz_targets/fuzz_shm_allocator.rs"
@@ -39,6 +42,13 @@ test = false
 doc = false
 bench = false
 
+[[bin]]
+name = "fuzz_interpreter"
+path = "fuzz_targets/fuzz_interpreter.rs"
+test = false
+doc = false
+bench = false
+
 [workspace]
 resolver = "2"
 members = ["."]