Jsfunfuzz has found 1500+ javascript bugs in Firefox
blog.regehr.org
blog.regehr.org
Since every change can re-break a test, it's also possible that certain bugs have re-appeared during that time. There's no indication that the bugs found by the fuzzer have become part of the Javascript engine's test cases, but I hope they have.
I think we owe a debt of gratitude to Jesse for the work he's done to make Javascript more robust. Thanks, Jesse
http://code.google.com/p/google-caja/source/browse/trunk/thi...