[v8] Improve registration of Worker builtins

Bug: 487347678
Change-Id: I00083540222506cfb09d7b1dfe5d040b7818a58b
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/9081256
Commit-Queue: Danylo Mocherniuk <mdanylo@google.com>
Reviewed-by: Danylo Mocherniuk <mdanylo@google.com>
Auto-Submit: Matthias Liedtke <mliedtke@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>

Author: Liedtke

Sources/Fuzzilli/Profiles/V8CommonProfile.swift

@@ -24,6 +24,10 @@ public extension ILType {
 
     static let gcTypeEnum = ILType.enumeration(ofName: "gcType", withValues: ["minor", "major"])
     static let gcExecutionEnum = ILType.enumeration(ofName: "gcExecution", withValues: ["async", "sync"])
+
+    static let jsWorker = object(ofGroup: "Worker", withMethods: ["postMessage","getMessage", "terminate", "terminateAndWait"])
+    static let jsWorkerConstructor = constructor([.jsAnything, .object()] => jsWorker)
+        + object(ofGroup: "WorkerConstructor", withProperties: ["prototype"])
 }
 
 public let gcOptions = ObjectGroup(
@@ -33,6 +37,33 @@ public let gcOptions = ObjectGroup(
                  "execution": .gcExecutionEnum],
     methods: [:])
 
+public extension ObjectGroup {
+    static let jsWorkers = ObjectGroup(
+        name: "Worker",
+        instanceType: .jsWorker,
+        properties: [:],
+        methods: [
+            "postMessage": [.jsAnything] => .undefined,
+            "getMessage": [] => .jsAnything,
+            "terminate": [] => .undefined,
+            "terminateAndWait": [] => .undefined
+        ]
+    )
+
+    static let jsWorkerPrototype =
+        ObjectGroup.createPrototypeObjectGroup(jsWorkers, constructor: .jsWorkerConstructor)
+
+    static let jsWorkerConstructors = ObjectGroup(
+            name: "WorkerConstructor",
+            constructorPath: "Worker",
+            instanceType: .jsWorkerConstructor,
+            properties: [
+                "prototype" : jsWorkerPrototype.instanceType,
+            ],
+            methods: [:]
+        )
+}
+
 public let fastCallables : [(group: ILType, method: String)] = [
     (group: .jsD8FastCAPI, method: "throw_no_fallback"),
     (group: .jsD8FastCAPI, method: "add_32bit_int"),

Sources/Fuzzilli/Profiles/V8Profile.swift

@@ -97,15 +97,15 @@ public let v8Profile = Profile(
     additionalBuiltins: [
         "gc"    : .function([.opt(gcOptions.instanceType)] => (.undefined | .jsPromise)),
         "d8"    : .jsD8,
-        "Worker": .constructor([.jsAnything, .object()] => .object(withMethods: ["postMessage","getMessage"])),
+        "Worker": .jsWorkerConstructor,
         // via --expose-externalize-string:
         "externalizeString": .function([.plain(.jsString)] => .jsString),
         "isOneByteString": .function([.plain(.jsString)] => .boolean),
         "createExternalizableString": .function([.plain(.jsString)] => .jsString),
         "createExternalizableTwoByteString": .function([.plain(.jsString)] => .jsString),
     ],
 
-    additionalObjectGroups: [jsD8, jsD8Test, jsD8FastCAPI, gcOptions],
+    additionalObjectGroups: [jsD8, jsD8Test, jsD8FastCAPI, gcOptions, .jsWorkers, .jsWorkerPrototype, .jsWorkerConstructors],
 
     additionalEnumerations: [.gcTypeEnum, .gcExecutionEnum],