As mentioned in the description, the fuzzer will sometimes generate flags files containing things like "--min-preparse-length", but d8 will exit early under an error condition if a length is not specified after the argument.
In some cases, the flags line in a test contains an entry like "--min-preparse-length=1", and in others it specifies "--min-preparse-length 1". We don't handle the second case correctly. I believe it would be valid to assume that tokens following flags that aren't prefixed with "--" are arguments, but some investigation is needed.
Comment 1 by machenb...@chromium.org
, Nov 2 2016Summary: Javascript mutation fuzzer does not handle certain flags with arguments correctly (was: Javascript mutation fuzzer does not certain flags with arguments correctly)