Changeset 280004 in webkit for trunk/Source/JavaScriptCore/jit/ExecutableAllocationFuzz.cpp

Timestamp:

Jul 16, 2021, 3:18:46 PM (4 years ago)

Author:

[email protected]

Message:

Unreviewed, reverting r279916.
​https://bugs.webkit.org/show_bug.cgi?id=228037

some of tests are timing out

Reverted changeset:

"Convert small JIT pool tests into executable fuzzing"
​https://bugs.webkit.org/show_bug.cgi?id=226279
​https://commits.webkit.org/r279916

File:

• trunk/Source/JavaScriptCore/jit/ExecutableAllocationFuzz.cpp (modified) (4 diffs)

trunk/Source/JavaScriptCore/jit/ExecutableAllocationFuzz.cpp

@@ -42 +42 @@
 ExecutableAllocationFuzzResult doExecutableAllocationFuzzing()
 {
-    static WeakRandom random(Options::seedOfVMRandomForFuzzer() ? Options::seedOfVMRandomForFuzzer() : cryptographicallyRandomNumber());
-
     ASSERT(Options::useExecutableAllocationFuzz());
 
@@ -62 +60 @@
     }
     
-    unsigned numChecks = s_numberOfExecutableAllocationFuzzChecks.value++;
-
-    if (numChecks == Options::fireExecutableAllocationFuzzAt()) {
+    unsigned oldValue;
+    unsigned newValue;
+    do {
+        oldValue = s_numberOfExecutableAllocationFuzzChecks.load();
+        newValue = oldValue + 1;
+    } while (!s_numberOfExecutableAllocationFuzzChecks.compareExchangeWeak(oldValue, newValue));
+    
+    if (newValue == Options::fireExecutableAllocationFuzzAt()) {
         if (Options::verboseExecutableAllocationFuzz()) {
             dataLog("Will pretend to fail executable allocation.\n");
@@ -71 +74 @@
         return PretendToFailExecutableAllocation;
     }
-
+    
     if (Options::fireExecutableAllocationFuzzAtOrAfter()
-        && numChecks >= Options::fireExecutableAllocationFuzzAtOrAfter()) {
+        && newValue >= Options::fireExecutableAllocationFuzzAtOrAfter()) {
         if (Options::verboseExecutableAllocationFuzz()) {
             dataLog("Will pretend to fail executable allocation.\n");
@@ -79 +82 @@
         }
         return PretendToFailExecutableAllocation;
-    } else if (!Options::fireExecutableAllocationFuzzAt() && random.getUint32() < UINT_MAX * Options::randomIntegrityAuditRate())
-        return PretendToFailExecutableAllocation;
+    }
     
     return AllowNormalExecutableAllocation;