Trusted JavaScript Language Environments with ESMeta
summary
ESMeta extracts a mechanized ECMAScript specification and uses it as an interpreter to automate testing, fuzzing, analysis and partial implementation derivation. The pipeline includes a mechanized spec extractor, the JAR type analyzer (finding 93 type issues at 59.2% precision with 15 new bugs), a coverage‑guided fuzzer that finds 42 engine bugs and 94 transpiler bugs, and a JS-spec visualizer/Chrome extension for stepwise replay; tools run end‑to‑end and produce concrete, reproducible artifacts.
AI-written summary · about
chapters (7)
- 0:00Trusted JavaScript with ESMeta
- 3:13Mechanized JavaScript spec
- 6:47Spec errors via type analysis
- 11:45Compliance tests: spec vs impl
- 16:01Visualizing JavaScript spec
- 18:09Static analyzers from specs
- 21:26Q&A on impl-defined behaviors
related talks
01h 02mProgramming Language Research for Technical and Social Good: What PL Can Do for Good?
54mTesting EcmaScript Modules
32mES Modules in Node JS
31mD1T1 - Fuzzing Javascript Engines for Fun and Pwnage
34mTowards a simpler JavaScript ecosystem
31mECMAScript 6 Katas
15mTowards a Mechanization of the ECMAScript (JavaScript) Proposal "Temporal"
06mJavaScript: The Fairly Odd Parts