diff options
| author | Alon Zakai <azakai@google.com> | 2023-03-13 10:37:54 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-03-13 17:37:54 +0000 |
| commit | b280366c6e4f81d9483aed7c38c957257ac3396b (patch) | |
| tree | 8af89bda155589201c81c0d0dfb0ad1a935014a9 /src/tools/fuzzing/parameters.h | |
| parent | 5c408e22badb4b611155fd3a3d07000538e47341 (diff) | |
| download | binaryen-b280366c6e4f81d9483aed7c38c957257ac3396b.tar.gz binaryen-b280366c6e4f81d9483aed7c38c957257ac3396b.tar.bz2 binaryen-b280366c6e4f81d9483aed7c38c957257ac3396b.zip | |
Fuzzer: Limit array sizes (#5569)
Even with a 1% chance of a huge array, there is a second problem aside from
hitting an allocation failure, which is DoS - building such a huge array of
Literals takes noticeable time in the fuzzer. Instead, just limit array max sizes,
which is consistent with what we do for struct sizes etc.
Diffstat (limited to 'src/tools/fuzzing/parameters.h')
| -rw-r--r-- | src/tools/fuzzing/parameters.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/tools/fuzzing/parameters.h b/src/tools/fuzzing/parameters.h index 9e5cefd9a..dd5c8d82c 100644 --- a/src/tools/fuzzing/parameters.h +++ b/src/tools/fuzzing/parameters.h @@ -38,6 +38,9 @@ constexpr int MAX_TUPLE_SIZE = 6; // The maximum number of struct fields. static const int MAX_STRUCT_SIZE = 6; +// The maximum number of elements in an array. +static const int MAX_ARRAY_SIZE = 100; + // The number of nontrivial heap types to generate. constexpr int MIN_HEAPTYPES = 4; constexpr int MAX_HEAPTYPES = 20; |