From Coverage to Causes: Data-Centric Fuzzing for JavaScript Engines

Kishan Kumar Ganguly, Tim Menzies

Context: Exhaustive fuzzing of modern JavaScript engines is infeasible due to the vast number of program states and execution paths. Coverage-guided fuzzers waste effort on low-ris…