Bug 220313

Summary: [WASM-References] Active element segments stored before an out-of-bounds access persist after the instantiation failure
Product: WebKit Reporter: Dmitry <dbezhetskov>
Component: WebAssemblyAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

Dmitry
Reported 2021-01-05 02:21:47 PST
By the reference types specification "active element segments stored before an out-of-bounds access persist after the instantiation failure". See https://github.com/WebAssembly/reference-types/blob/master/test/core/linking.wast#L264 Right now we just throw link error and don't handle elements segments properly.
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2021-01-12 02:22:13 PST
<rdar://problem/73033152>
Note You need to log in before you can comment on or make changes to this bug.