fuzz-flags.txt

# This lists all the possible flags we'd like to see tested out in the shell by
# fuzzers. A non-empty line not starting with # should be considered a valid
# one. Note the following flag is recommended in ALL the cases: --fuzzing-safe

# general jit flags
--baseline-eager
--cache-ir-stubs=off
--cache-ir-stubs=on
--ion-check-range-analysis
--ion-eager
--ion-edgecase-analysis=off
--ion-edgecase-analysis=on
--ion-extra-checks
--ion-gvn=off
--ion-gvn=on
--ion-inlining=off
--ion-inlining=on
--ion-instruction-reordering=off
--ion-instruction-reordering=on
--ion-licm=off
--ion-licm=on
--ion-limit-script-size=off
--ion-limit-script-size=on
--ion-offthread-compile=off
--ion-osr=off
--ion-osr=on
--ion-pgo=off
--ion-pgo=on
--ion-range-analysis=off
--ion-range-analysis=on
--ion-regalloc=testbed
--ion-scalar-replacement=off
--ion-scalar-replacement=on
--ion-sincos=off
--ion-sincos=on
--ion-warmup-threshold=0
--ion-warmup-threshold=10
--ion-warmup-threshold=100
--ion-full-warmup-threshold=0
--ion-full-warmup-threshold=10
--ion-full-warmup-threshold=100
--ion-full-warmup-threshold=1000
--ion-full-warmup-threshold=1500
--ion-full-warmup-threshold=5000
--ion-optimization-levels=off
--ion-optimization-levels=on
--no-native-regexp
--nursery-strings=off
--nursery-strings=on
--spectre-mitigations=off
--spectre-mitigations=on
--more-compartments

# Experimental JS language features
--no-bigint

# GC-related
# These 2 flags can cause the shell to slow down
# --gc-zeal=2
# --gc-zeal=10
--no-cgc
--no-ggc
--no-incremental-gc

# wasm flags
--wasm-gc
--wasm-compiler=ion
--wasm-compiler=baseline
--test-wasm-await-tier2

# CPU instruction set-related
--enable-avx
--no-avx
--no-sse3
--no-sse4

# arm specific, no-ops on other platforms.
--arm-sim-icache-checks
--arm-asm-nop-fill=1
--arm-hwcap=vfp

# Profiling, code coverage, and debugging
# --dump-bytecode option implies --code-coverage
--dump-bytecode