Abstract: Fuzzing modern JavaScript (JS) engines remains challenging due to the semantic complexity required to explore deep program states and advanced components such as Just-InTime (JIT) compilers.
Abstract: The interpreter and the Just-In-Time (JIT) compiler are two core components of modern JavaScript engines, both of which take bytecodes as input. Most bugs in these components are closely ...