Upload Kmake

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/arguments/expected.js

@@ -0,0 +1,38 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: regress/arguments/input.js
+(function () {
+  print(__v_0);
+})();
+(function () {
+  __v_0 = 1;
+})();
+(function () {
+  let __v_1 = 1;
+})();
+(function () {
+  print(__v_2);
+})();
+(function () {
+  __v_2 = 1;
+})();
+(function () {
+  let __v_3 = 1;
+})();
+(function () {
+  print(__v_4);
+})();
+(function () {
+  __v_4 = 1;
+})();
+(function () {
+  let __v_5 = 1;
+})();

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/arguments/input.js

@@ -0,0 +1,41 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+//"use strict";
+
+(function () {
+  print(arguments);
+})();
+
+(function () {
+  arguments = 1;
+})();
+
+(function () {
+  let arguments = 1;
+})();
+
+(function () {
+  print(undefined);
+})();
+
+(function () {
+  undefined = 1;
+})();
+
+(function () {
+  let undefined = 1;
+})();
+
+(function () {
+  print(eval);
+})();
+
+(function () {
+  eval = 1;
+})();
+
+(function () {
+  let eval = 1;
+})();

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/async/full_async_expected.js

@@ -0,0 +1,57 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: regress/async/input.js
+function __f_0() {}
+function __f_1() {}
+async function __f_2() {}
+async function __f_3() {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_2 */__f_2();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_3 */__f_3();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_3 */__f_3();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_3 */__f_3();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_3 */__f_3();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_0 */__f_0();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_0 */__f_0();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_3 */__f_3();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_0 */__f_0();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_0 */__f_0();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_3 */__f_3();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_3 */__f_3();
+} catch (e) {}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/async/input.js

@@ -0,0 +1,28 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+function f1() {}
+function f2() {}
+async function f3() {}
+async function f4() {}
+
+// Here we want mostly non-async replacements in practice. E.g. in this case
+// there's just f2.
+f1();
+f1();
+f1();
+f1();
+f1();
+f1();
+f1();
+
+// Here we want mostly async replacements in practice. E.g. in this case
+// there's just f4.
+f3();
+f3();
+f3();
+f3();
+f3();
+f3();
+f3();

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/async/no_async_expected.js

@@ -0,0 +1,57 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: regress/async/input.js
+function __f_0() {}
+function __f_1() {}
+async function __f_2() {}
+async function __f_3() {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_3 */__f_3();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_3 */__f_3();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_3 */__f_3();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_3 */__f_3();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_3 */__f_3();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_3 */__f_3();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_2 with __f_3 */__f_3();
+} catch (e) {}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/db/input/input.js

@@ -0,0 +1,10 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+function f1() {}
+
+const a = {};
+const b = {};
+
+Object.assign(a, b);

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/dependency_collision/chakra/WasmSpec/testsuite/harness/wasm-constants.js

@@ -0,0 +1,5 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+let collision1 = 42;

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/dependency_collision/chakra/WasmSpec/testsuite/harness/wasm-module-builder.js

@@ -0,0 +1,5 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+let collision2 = 42;

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/dependency_collision/chakra/input.js

@@ -0,0 +1,6 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+WScript.LoadScriptFile("WasmSpec/testsuite/harness/wasm-constants.js");
+WScript.LoadScriptFile("WasmSpec/testsuite/harness/wasm-module-builder.js");

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/dependency_collision/v8/test/mjsunit/mjsunit.js

@@ -0,0 +1,3 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/dependency_collision/v8/test/mjsunit/wasm/input.js

@@ -0,0 +1,5 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+d8.file.execute('test/mjsunit/wasm/wasm-module-builder.js');

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/dependency_collision/v8/test/mjsunit/wasm/wasm-module-builder.js

@@ -0,0 +1,6 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+let collision1 = 42;
+let collision2 = 42;

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/duplicates/duplicates_db/ArrowFunctionExpression/a1.json

@@ -0,0 +1,8 @@
+{
+  "type":"ArrowFunctionExpression",
+  "source":"async (...VAR_68) => { const VAR_69 = 0; }",
+  "isStatement":true,
+  "originalPath":"foo",
+  "dependencies":["VAR_68","VAR_69"],
+  "needsSuper":false
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/duplicates/duplicates_db/index.json

@@ -0,0 +1,9 @@
+{
+    "statements": [
+      "ArrowFunctionExpression/a1.json"
+    ],
+    "superStatements": [],
+    "all": [
+      "ArrowFunctionExpression/a1.json"
+    ]
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/duplicates/duplicates_expected.js

@@ -0,0 +1,22 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: regress/duplicates/input.js
+let __v_1 = 0;
+let __v_2 = 0;
+console.log(42);
+/* CrossOverMutator: Crossover from foo */
+async (...__v_1) => {
+  const __v_2 = 0;
+};
+/* CrossOverMutator: Crossover from foo */
+async (...__v_1) => {
+  const __v_2 = 0;
+};
+console.log(42);
+/* CrossOverMutator: Crossover from foo */
+async (...__v_2) => {
+  const __v_1 = 0;
+};
+console.log(42);

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/duplicates/input.js

@@ -0,0 +1,10 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+let __v_1 = 0;
+let __v_2 = 0;
+
+console.log(42);
+console.log(42);
+console.log(42);

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/empty_db/index.json

@@ -0,0 +1 @@
+{}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/infinite_loop_fun/expected.js

@@ -0,0 +1,30 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: regress/infinite_loop_fun/input.js
+function __f_0() {}
+function __f_1() {}
+function __f_2() {
+  try {
+    while (true) {}
+  } catch (e) {}
+}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}
+try {
+  /* FunctionCallMutator: Replaced __f_0 with __f_1 */__f_1();
+} catch (e) {}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/infinite_loop_fun/input.js

@@ -0,0 +1,16 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+function f() {}
+
+function g() {}
+
+function h() {
+  while (true) {}
+}
+
+f();
+f();
+f();
+f();

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/iterator/expected.js

@@ -0,0 +1,22 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: resources/async_iterator.js
+try {
+  AsyncIterator;
+} catch (e) {
+  this.AsyncIterator = class AsyncIterator extends Iterator {};
+}
+
+// Original: regress/iterator/input.js
+let __v_0 = 5;
+try {
+  AsyncIterator.foo(__v_0);
+} catch (e) {}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/iterator/input.js

@@ -0,0 +1,6 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+let a = 5;
+AsyncIterator.foo(a);

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/large_loops/expected.js

@@ -0,0 +1,35 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: regress/large_loops/input.js
+var __v_0 = 0;
+var __v_1 = 0;
+for (const __v_2 = 0; __v_2 < 10000; __v_2++) {
+  console.log();
+}
+for (const __v_3 = 0; 1e5 >= __v_3; __v_3--) {
+  console.log();
+}
+for (const __v_4 = -10000; __v_4 < 0; __v_4++) {
+  console.log();
+  /* VariableOrObjectMutator: Random mutation */
+  __v_4[__getRandomProperty(__v_4, 758323)] = __v_4;
+  if (__v_4 != null && typeof __v_4 == "object") Object.defineProperty(__v_4, __getRandomProperty(__v_4, 947075), {
+    value: -9007199254740990
+  });
+}
+for (const __v_5 = 0n; __v_5 < 10000n; __v_5++) {
+  console.log();
+  /* VariableOrObjectMutator: Random mutation */
+  delete __v_5[__getRandomProperty(__v_5, 81149)];
+}
+for (const __v_6 = -0.3; __v_6 < 1000.1; __v_6 += 0.5) {
+  console.log();
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/large_loops/input.js

@@ -0,0 +1,27 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+
+var x = 0;
+var y = 0;
+
+for (const a = 0; a < 10000; a++) {
+  console.log();
+}
+
+for (const a = 0; 1e5 >= a; a--) {
+  console.log();
+}
+
+for (const a = -10000; a < 0; a++) {
+  console.log();
+}
+
+for (const a = 0n; a < 10000n; a++) {
+  console.log();
+}
+
+for (const a = -0.3; a < 1000.1; a += 0.5) {
+  console.log();
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/legacy_scope/expected.js

@@ -0,0 +1,17 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: regress/legacy_scope/input.js
+function __f_0() {
+  function __f_1() {}
+  try {
+    var __f_1 = 42;
+  } catch (e) {}
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/legacy_scope/input.js

@@ -0,0 +1,8 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+function foo() {
+  function bar(){}
+  var bar = 42;
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/numbers/input_indices.js

@@ -0,0 +1,11 @@
+// Copyright 2020 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+let a = {
+  0: "",
+  1: "",
+  2: "",
+  3: "",
+  4: "",
+};

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/numbers/input_negative.js

@@ -0,0 +1,8 @@
+// Copyright 2020 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+foo(-1);
+foo(-1);
+foo(-1);
+foo(-1);

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/parentheses/expected.js

@@ -0,0 +1,14 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: regress/parentheses/input.js
+try {
+  (false || true) ?? false;
+} catch (e) {}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/parentheses/input.js

@@ -0,0 +1,5 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+(false || true) ?? false;

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/resources/input.js

@@ -0,0 +1,5 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+''.toString();

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/spidermonkey/db/index.json

@@ -0,0 +1 @@
+{}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/spidermonkey/input.js

@@ -0,0 +1,5 @@
+// Copyright 2020 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+print("Won't see this.");

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/spidermonkey/shell.js

@@ -0,0 +1,5 @@
+// Copyright 2020 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+loadRelativeToScript('PatternAsserts.js');

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/strict/input_delete.js

@@ -0,0 +1,6 @@
+// Copyright 2020 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+var x;
+delete x;

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/strict/input_strict.js

@@ -0,0 +1,7 @@
+// Copyright 2020 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+"use strict";
+
+print("Hello");

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/strict/input_with.js

@@ -0,0 +1,7 @@
+// Copyright 2020 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+with (Math) {
+  print(PI);
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/super/call_expected.js

@@ -0,0 +1,23 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: regress/super/input.js
+class A {
+  constructor() {
+    console.log(42);
+  }
+  method() {
+    console.log(42);
+  }
+}
+class B extends A {
+  constructor() {
+    /* CrossOverMutator: Crossover from foo */
+    super();
+    console.log(42);
+  }
+  method() {
+    console.log(42);
+  }
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/super/input.js

@@ -0,0 +1,23 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+class A {
+  constructor() {
+    console.log(42);
+  }
+
+  method() {
+    console.log(42);
+  }
+}
+
+class B extends A{
+  constructor() {
+    console.log(42);
+  }
+
+  method() {
+    console.log(42);
+  }
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/super/member_expected.js

@@ -0,0 +1,29 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: regress/super/input.js
+class A {
+  constructor() {
+    console.log(42);
+  }
+  method() {
+    console.log(42);
+  }
+}
+class B extends A {
+  constructor() {
+    /* CrossOverMutator: Crossover from foo */
+    try {
+      super.baz();
+    } catch (e) {}
+    console.log(42);
+  }
+  method() {
+    /* CrossOverMutator: Crossover from foo */
+    try {
+      super.baz();
+    } catch (e) {}
+    console.log(42);
+  }
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/super/super_call_db/CallExpression/a1.json

@@ -0,0 +1,7 @@
+{
+  "type":"CallExpression",
+  "source":"super()",
+  "isStatement":true,
+  "originalPath":"foo",
+  "needsSuper":true
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/super/super_call_db/CallExpression/a2.json

@@ -0,0 +1,7 @@
+{
+  "type":"CallExpression",
+  "source":"foo()",
+  "isStatement":true,
+  "originalPath":"bar",
+  "needsSuper":false
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/super/super_call_db/index.json

@@ -0,0 +1,12 @@
+{
+    "statements": [
+      "CallExpression/a2.json"
+    ],
+    "superStatements": [
+      "CallExpression/a1.json"
+    ],
+    "all": [
+      "CallExpression/a1.json",
+      "CallExpression/a2.json"
+    ]
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/super/super_member_db/CallExpression/a1.json

@@ -0,0 +1,7 @@
+{
+  "type":"CallExpression",
+  "source":"super.baz()",
+  "isStatement":true,
+  "originalPath":"foo",
+  "needsSuper":true
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/super/super_member_db/CallExpression/a2.json

@@ -0,0 +1,7 @@
+{
+  "type":"CallExpression",
+  "source":"foo()",
+  "isStatement":true,
+  "originalPath":"bar",
+  "needsSuper":false
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/super/super_member_db/index.json

@@ -0,0 +1,12 @@
+{
+    "statements": [
+      "CallExpression/a2.json"
+    ],
+    "superStatements": [
+      "CallExpression/a1.json"
+    ],
+    "all": [
+      "CallExpression/a1.json",
+      "CallExpression/a2.json"
+    ]
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/try_catch_while_true/expected.js

@@ -0,0 +1,23 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: regress/try_catch_while_true/input.js
+try {
+  while (true) {
+    if (cond) throw Exception();
+    console.log("forever");
+  }
+} catch (e) {}
+try {
+  do {
+    if (cond) throw Exception();
+    console.log("forever");
+  } while (true);
+} catch (e) {}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/try_catch_while_true/input.js

@@ -0,0 +1,13 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+while(true) {
+  if (cond) throw Exception();
+  console.log("forever");
+}
+
+do {
+  if (cond) throw Exception();
+  console.log("forever");
+} while(true);

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/yield/expected.js

@@ -0,0 +1,17 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: differential_fuzz/fake_resource.js
+print("I'm a resource.");
+
+// Original: regress/yield/input.js
+function* __f_0() {
+  try {
+    let __v_0 = yield 1;
+    let __v_1 = 3 + (yield 2);
+  } catch (e) {}
+}

deps/v8/tools/clusterfuzz/js_fuzzer/test_data/regress/yield/input.js

@@ -0,0 +1,8 @@
+// Copyright 2025 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+function* it() {
+  let foo = yield 1;
+  let bar = 3 + (yield 2);
+}