Repository navigation
Conversation
…ructions Previously, br_on_cast_desc_eq and br_on_cast_desc_eq_fail were rarely emitted (~0.2 per module) because: 1. makeBrOn had low selection weight despite covering 6 instructions. 2. breakableStack searches stopped immediately on Type::none targets (forcing br_on_null) and often lacked reference targets. 3. Descriptor casts were only emitted when getSubType happened by chance to pick a struct with a descriptor. Fix this by: - Tracking described struct types by Shareability in describedTypes and adding hasDescribedSubType / getDescribedSubType helpers. - Increasing makeBrOn weight to Important. - Preferring reference targets (especially those with described subtypes) with randomness when searching breakableStack, and wrapping in a new target block when makeBrOn is called for a reference type without a suitable target. - Selecting BrOnCastDescEq and BrOnCastDescEqFail directly when described subtypes are available instead of upgrading BrOnCast / BrOnCastFail. Across 200 fuzzer modules, this increases br_on_cast_desc_eq from 0.20 to 2.69 per module (16.0% -> 48.0% of modules) and br_on_cast_desc_eq_fail from 0.18 to 2.88 per module (11.5% -> 50.0% of modules), while also increasing br_on_null from 27.40 to 34.46 per module.
For i64 pair tuples in _makeConcrete, add makeWideIntExpression with VeryImportant weight (requiring Multivalue as well as WideArithmetic) alongside makeTupleMake instead of replacing it half the time with default weight. This increases generation of unextracted (i64, i64) wide arithmetic expressions by ~4.2x.
Add try-delegate generation to TranslateToFuzzReader::makeTry and update fixAfterChanges to preserve DELEGATE_CALLER_TARGET on try-delegates. Also fix three bugs uncovered by fuzzing delegate and add regression tests: - Preserve concrete stack types on StackInst::Delegate in StackIRGenerator. - Increment controlFlowDepth after printing the condition in PrintSExpression::visitIf and pop catchIndexStack on StackInst::Delegate in printStackIR. - Use dynCast<Try>() instead of cast<Try>() when walking tryStack in CFGWalker.
Add makeElemDrop and call it from makeBulkMemory.
Generate extern.convert_any in makeBasicRef for HeapType::ext when GC is enabled.
Add makeMemorySize and makeMemoryGrow and include them in _makeConcrete when generating an integer matching the memory address type.
tlively
requested review from
kripken
and removed request for
stevenfontanella
October 5, 2026 21:05
kripken
approved these changes
Oct 5, 2026
# Conflicts: # src/tools/fuzzing/fuzzing.cpp
# Conflicts: # src/tools/fuzzing/fuzzing.cpp # test/passes/translate-to-fuzz_all-features_metrics_noprint.txt
# Conflicts: # test/passes/translate-to-fuzz_all-features_metrics_noprint.txt
# Conflicts: # test/passes/translate-to-fuzz_all-features_metrics_noprint.txt
# Conflicts: # test/passes/translate-to-fuzz_all-features_metrics_noprint.txt
# Conflicts: # test/passes/translate-to-fuzz_all-features_metrics_noprint.txt
# Conflicts: # test/passes/translate-to-fuzz_all-features_metrics_noprint.txt
# Conflicts: # test/passes/translate-to-fuzz_all-features_metrics_noprint.txt
# Conflicts: # test/passes/translate-to-fuzz_all-features_metrics_noprint.txt
# Conflicts: # test/passes/translate-to-fuzz_all-features_metrics_noprint.txt
# Conflicts: # test/passes/translate-to-fuzz_all-features_metrics_noprint.txt
# Conflicts: # test/passes/translate-to-fuzz_all-features_metrics_noprint.txt
# Conflicts: # test/passes/translate-to-fuzz_all-features_metrics_noprint.txt
tlively
enabled auto-merge (squash)
October 9, 2026 22:39
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Add makeMemorySize and makeMemoryGrow and include them in _makeConcrete when
generating an integer matching the memory address type.