Wadi Fuzzer

This report introduces Wadi, a grammar-based web browser fuzzer that derives test grammars from W3C Web IDL/DOM/Web APIs to generate valid JavaScript/HTML inputs, integrates with the NodeFuzz harness, and uses AddressSanitizer (ASan) to detect memory errors in Chrome and Firefox on Linux/macOS. It outlines the fuzzing methodology, ASan requirements, NodeFuzz configuration, grammar extraction, object/element creation, and a suite of fuzzing functions for attributes, methods, events, and mutations, along with helper utilities for randomized input generation. The document provides a practical checklist for setup and notes successful bug discoveries in Chromium, while not disclosing specific vulnerability details.