[environment] Register Iterator.zip

and support iterables in OptionsBags.
Iterator.zip was added to V8 with https://crrev.com/c/7605659.

Bug: 465357675
Change-Id: Ia5e5c49831f8ad10c166bb32a264ee90a1aadead
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/9090936
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Olivier Flückiger <olivf@google.com>
Commit-Queue: Nikos Papaspyrou <nikolaos@google.com>
Reviewed-by: Nikos Papaspyrou <nikolaos@google.com>

Author: Liedtke

Sources/Fuzzilli/Base/ProgramBuilder.swift

@@ -737,6 +737,7 @@ public class ProgramBuilder {
                     let (pattern, flags) = self.randomRegExpPatternAndFlags()
                     return self.loadRegExp(pattern, flags)
                 }),
+            (.iterable, { return self.createArray(with: [self.randomJsVariable()]) }),
             (.function(), {
                     // TODO: We could technically generate a full function here but then we would enter the full code generation logic which could do anything.
                     // Because we want to avoid this, we will just pick anything that can be a function.

Sources/Fuzzilli/Environment/JavaScriptEnvironment.swift

@@ -566,6 +566,7 @@ public class JavaScriptEnvironment: ComponentBase {
         registerEnumeration(OptionsBag.jsIntlSignDisplayEnum)
         registerEnumeration(OptionsBag.jsIntlPluralRulesTypeEnum)
         registerEnumeration(OptionsBag.jsIntlSegmenterGranularityEnum)
+        registerEnumeration(OptionsBag.jsIteratorZipModeEnum)
         registerEnumeration(OptionsBag.base64Alphabet)
         registerEnumeration(OptionsBag.base64LastChunkHandling)
 
@@ -594,6 +595,7 @@ public class JavaScriptEnvironment: ComponentBase {
         registerOptionsBag(.jsIntlRelativeTimeFormatSettings)
         registerOptionsBag(.jsIntlSegmenterSettings)
         registerOptionsBag(.jsIntlLocaleMatcherSettings)
+        registerOptionsBag(.jsIteratorZipSettings)
 
         registerTemporalFieldsObject(.jsTemporalPlainTimeLikeObject, forWith: false, dateFields: false, timeFields: true, zonedFields: false)
         registerTemporalFieldsObject(.jsTemporalPlainDateLikeObject, forWith: false, dateFields: true, timeFields: false, zonedFields: false)
@@ -1072,7 +1074,7 @@ public struct OptionsBag {
         self.properties = properties
         let properties = properties.mapValues {
             // This list can be expanded over time as long as createOptionsBag() supports this
-            assert($0.isEnumeration || $0.Is(.number | .integer | .boolean) ||
+            assert($0.isEnumeration || $0.Is(.number | .integer | .boolean | .iterable) ||
                     // Has a producing generator registered
                     $0.Is(.jsTemporalPlainTime) ||
                     // Has explicit support in createOptionsBag
@@ -1122,7 +1124,7 @@ public extension ILType {
     static let jsIterator = ILType.iterable + ILType.object(ofGroup: "Iterator", withProperties: ["value", "done"], withMethods: ["next", "return", "throw", "map", "filter", "take", "drop", "flatMap", "reduce", "toArray", "forEach", "some", "every", "find"])
 
     /// Type of the JavaScript Iterator constructor builtin.
-    static let jsIteratorConstructor = ILType.object(ofGroup: "IteratorConstructor", withProperties: ["prototype"], withMethods: ["from", "concat"])
+    static let jsIteratorConstructor = ILType.object(ofGroup: "IteratorConstructor", withProperties: ["prototype"], withMethods: ["from", "concat", "zip"])
 
     /// Type of a JavaScript generator object.
     static let jsGenerator = ILType.iterable + ILType.object(ofGroup: "Generator", withMethods: ["next", "return", "throw"])
@@ -1699,6 +1701,7 @@ public extension ObjectGroup {
         methods: [
             "from"   : [.jsAnything] => .jsIterator,
             "concat" : [.jsAnything...] => .jsIterator,
+            "zip"    : [.iterable, .opt(OptionsBag.jsIteratorZipSettings.group.instanceType)] => .jsIterator,
         ]
     )
 
@@ -4158,6 +4161,19 @@ extension OptionsBag {
     )
 }
 
+// Iterator
+extension OptionsBag {
+    fileprivate static let jsIteratorZipModeEnum = ILType.enumeration(ofName: "IteratorZipMode", withValues: ["strict", "longest", "shortest"])
+
+    static let jsIteratorZipSettings = OptionsBag(
+        name: "IteratorZipSettings",
+        properties: [
+            "mode": jsIteratorZipModeEnum,
+            "padding": .iterable,
+        ]
+    )
+}
+
 // Base64
 extension OptionsBag {
     fileprivate static let base64Alphabet =