T0b1/wasmtime
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix a panic with an invalid name section (#3509)

Browse Source 
This commit fixes a panic which can happen on a module with an invalid
name section where one of the functions named has the index `u32::MAX`.
Previously Wasmtime would create a new `FuncIndex` with the indices
found in the name section but the sentinel `u32::MAX` causes a panic.

Cranelift otherwise limits the number of functions through `wasmparser`
which has a hard limit (lower than `u32::MAX`) so this commit applies a
fix of only recording function names for function indices that are
actually present in the module.
This commit is contained in:
Alex Crichton
2021-11-05 15:08:58 -05:00
committed by GitHub
parent 6bcee7f5f7
commit 6be0f82b96
2 changed files with 53 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
tests/misc_testsuite/empty.wast
View File

@@ -1,3 +1,46 @@
(module (func (export "empty")))
(invoke "empty")
(module binary
"\00asm\01\00\00\00" ;; module header
"\00" ;; custom section id 0
"\0e" ;; section size
"\04name" ;; this is the `name` custom section
"\01" ;; function name subsection
"\07" ;; function name subsection size
"\01" ;; 1 function name mapping
"\ff\ff\ff\ff\0f" ;; index == u32::MAX
"\00" ;; empty string name
)
(module binary
"\00asm\01\00\00\00" ;; module header
"\00" ;; custom section id 0
"\10" ;; section size
"\04name" ;; this is the `name` custom section
"\02" ;; local name subsection
"\09" ;; local name subsection size
"\01" ;; 1 indirect name map
"\ff\ff\ff\ff\0f" ;; index == u32::MAX (function)
"\01" ;; 1 name mapping
"\00" ;; index == 0 (local)
"\00" ;; empty string name
)
(module binary
"\00asm\01\00\00\00" ;; module header
"\00" ;; custom section id 0
"\10" ;; section size
"\04name" ;; this is the `name` custom section
"\02" ;; local name subsection
"\09" ;; local name subsection size
"\01" ;; 1 indirect name map
"\00" ;; index == 0 (function)
"\01" ;; 1 name mapping
"\ff\ff\ff\ff\0f" ;; index == u32::MAX (local)
"\00" ;; empty string name
)