From fa57ae96a62c4c1ee60c43ed1e30e2918d450c10 Mon Sep 17 00:00:00 2001 From: Alon Zakai Date: Wed, 3 Jun 2026 14:01:15 -0700 Subject: [PATCH 1/2] fix --- src/tools/fuzzing/fuzzing.cpp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/tools/fuzzing/fuzzing.cpp b/src/tools/fuzzing/fuzzing.cpp index 457a371a008..cd21a4dd10e 100644 --- a/src/tools/fuzzing/fuzzing.cpp +++ b/src/tools/fuzzing/fuzzing.cpp @@ -2584,7 +2584,7 @@ void TranslateToFuzzReader::mutateJSBoundary() { // unreachable). assert(oldParams.size() == lubType.size() || !lub.noted()); std::vector newParams; - for (Index i = 0; i < lubType.size(); i++) { + for (Index i = 0; i < oldParams.size(); i++) { newParams.push_back(maybeRefineIndex(oldParams, lub, i)); } func->setParams(Type(newParams)); @@ -2611,7 +2611,7 @@ void TranslateToFuzzReader::mutateJSBoundary() { auto lubType = lub.getLUB(); assert(oldResults.size() == lubType.size() || !lub.noted()); std::vector newResults; - for (Index i = 0; i < lubType.size(); i++) { + for (Index i = 0; i < oldResults.size(); i++) { newResults.push_back(maybeRefineIndex(oldResults, lub, i)); } func->setResults(Type(newResults)); From cf7d67b42d4d938653ed6bca3a9659c9ae85282f Mon Sep 17 00:00:00 2001 From: Alon Zakai Date: Wed, 3 Jun 2026 14:17:43 -0700 Subject: [PATCH 2/2] fix warning --- src/tools/fuzzing/fuzzing.cpp | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/src/tools/fuzzing/fuzzing.cpp b/src/tools/fuzzing/fuzzing.cpp index cd21a4dd10e..5067344a892 100644 --- a/src/tools/fuzzing/fuzzing.cpp +++ b/src/tools/fuzzing/fuzzing.cpp @@ -2579,10 +2579,9 @@ void TranslateToFuzzReader::mutateJSBoundary() { // Refine. auto lub = paramLUBs[func->name]; - auto lubType = lub.getLUB(); // Either the LUB has the right data shape, or nothing was noted (this is // unreachable). - assert(oldParams.size() == lubType.size() || !lub.noted()); + assert(oldParams.size() == lub.getLUB().size() || !lub.noted()); std::vector newParams; for (Index i = 0; i < oldParams.size(); i++) { newParams.push_back(maybeRefineIndex(oldParams, lub, i)); @@ -2608,8 +2607,7 @@ void TranslateToFuzzReader::mutateJSBoundary() { // Refine. auto lub = LUB::getResultsLUB(func, wasm); - auto lubType = lub.getLUB(); - assert(oldResults.size() == lubType.size() || !lub.noted()); + assert(oldResults.size() == lub.getLUB().size() || !lub.noted()); std::vector newResults; for (Index i = 0; i < oldResults.size(); i++) { newResults.push_back(maybeRefineIndex(oldResults, lub, i));