Automatic Fuzz Drivers for JavaScript with Type Distributions

Testing libraries with modern fuzzers conventionally involves writing an entry point into the library, called the fuzz driver, which invokes library functions (endpoints) in a sequence that meaningfully exercises the library. Manually writing and maintaining effective fuzz drivers is tedious and requires expert knowledge of the library. Existing automatic library fuzzing techniques do not generalize to languages like JavaScript, the most popular programming language among professional developers [1].