<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>252719</bug_id>
          
          <creation_ts>2023-02-21 19:27:04 -0800</creation_ts>
          <short_desc>[Wasm-GC] Air and B3 generate struct.get/set code with wrong offsets</short_desc>
          <delta_ts>2023-03-20 17:34:01 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebAssembly</component>
          <version>WebKit Local Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          <blocked>247394</blocked>
          <everconfirmed>1</everconfirmed>
          <reporter name="Tim Chevalier">tjc</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1935710</commentid>
    <comment_count>0</comment_count>
    <who name="Tim Chevalier">tjc</who>
    <bug_when>2023-02-21 19:27:04 -0800</bug_when>
    <thetext>The following test:

```
//@ runWebAssemblySuite(&quot;--useWebAssemblyTypedFunctionReferences=true&quot;, &quot;--useWebAssemblyGC=true&quot;)

import * as assert from &quot;../assert.js&quot;;
import { compile, instantiate } from &quot;./wast-wrapper.js&quot;;

function module(bytes, valid = true) {
  let buffer = new ArrayBuffer(bytes.length);
  let view = new Uint8Array(buffer);
  for (let i = 0; i &lt; bytes.length; ++i) {
    view[i] = bytes.charCodeAt(i);
  }
  return new WebAssembly.Module(buffer);
}

let iterations = 10;

function testIntFields() {

  let m = instantiate(`
    (module
      (type $s (struct (field i32) (field i32)))

      (func $new (export &quot;new&quot;) (result (ref $s))
         (struct.new_canon $s (i32.const 1) (i32.const 5)))

      (func (export &quot;len0&quot;) (result i32)
         (struct.get $s 0 (call $new)))
      (func (export &quot;len1&quot;) (result i32)
         (struct.get $s 1 (call $new))))`);

    for (var i = 0; i &lt; 10; i++) {
        assert.eq(m.exports.len0(), 1);
        assert.eq(m.exports.len1(), 5);
    }
}
testIntFields();
```

fails, because the `addStructGet` and `addStructSet` methods in `WasmAirIRGeneratorBase.h` emit a load of `s.m_payload.m_storage` (if `s` is the struct object being operated on) followed by a load or store with the offset for the field being read from/written to. This is incorrect because the field offset is relative to `s.m_payload.m_storage.data()`, not `s.m_payload.m_storage`. 

I&apos;ll be submitting a PR.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1935716</commentid>
    <comment_count>1</comment_count>
    <who name="Tim Chevalier">tjc</who>
    <bug_when>2023-02-21 20:02:52 -0800</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/10490</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1937635</commentid>
    <comment_count>2</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2023-02-28 19:28:14 -0800</bug_when>
    <thetext>&lt;rdar://problem/106065099&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1942737</commentid>
    <comment_count>3</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2023-03-20 17:33:45 -0700</bug_when>
    <thetext>Committed 261899@main (2e2ee48591cd): &lt;https://commits.webkit.org/261899@main&gt;

Reviewed commits have been landed. Closing PR #10490 and removing active labels.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>