* Return `anyhow::Error` from host functions instead of `Trap` This commit refactors how errors are modeled when returned from host functions and additionally refactors how custom errors work with `Trap`. At a high level functions in Wasmtime that previously worked with `Result<T, Trap>` now work with `Result<T>` instead where the error is `anyhow::Error`. This includes functions such as: * Host-defined functions in a `Linker<T>` * `TypedFunc::call` * Host-related callbacks like call hooks Errors are now modeled primarily as `anyhow::Error` throughout Wasmtime. This subsequently removes the need for `Trap` to have the ability to represent all host-defined errors as it previously did. Consequently the `From` implementations for any error into a `Trap` have been removed here and the only embedder-defined way to create a `Trap` is to use `Trap::new` with a custom string. After this commit the distinction between a `Trap` and a host error is the wasm backtrace that it contains. Previously all errors in host functions would flow through a `Trap` and get a wasm backtrace attached to them, but now this only happens if a `Trap` itself is created meaning that arbitrary host-defined errors flowing from a host import to the other side won't get backtraces attached. Some internals of Wasmtime itself were updated or preserved to use `Trap::new` to capture a backtrace where it seemed useful, such as when fuel runs out. The main motivation for this commit is that it now enables hosts to thread a concrete error type from a host function all the way through to where a wasm function was invoked. Previously this could not be done since the host error was wrapped in a `Trap` that didn't provide the ability to get at the internals. A consequence of this commit is that when a host error is returned that isn't a `Trap` we'll capture a backtrace and then won't have a `Trap` to attach it to. To avoid losing the contextual information this commit uses the `Error::context` method to attach the backtrace as contextual information to ensure that the backtrace is itself not lost. This is a breaking change for likely all users of Wasmtime, but it's hoped to be a relatively minor change to workaround. Most use cases can likely change `-> Result<T, Trap>` to `-> Result<T>` and otherwise explicit creation of a `Trap` is largely no longer necessary. * Fix some doc links * add some tests and make a backtrace type public (#55) * Trap: avoid a trailing newline in the Display impl which in turn ends up with three newlines between the end of the backtrace and the `Caused by` in the anyhow Debug impl * make BacktraceContext pub, and add tests showing downcasting behavior of anyhow::Error to traps or backtraces * Remove now-unnecesary `Trap` downcasts in `Linker::module` * Fix test output expectations * Remove `Trap::i32_exit` This commit removes special-handling in the `wasmtime::Trap` type for the i32 exit code required by WASI. This is now instead modeled as a specific `I32Exit` error type in the `wasmtime-wasi` crate which is returned by the `proc_exit` hostcall. Embedders which previously tested for i32 exits now downcast to the `I32Exit` value. * Remove the `Trap::new` constructor This commit removes the ability to create a trap with an arbitrary error message. The purpose of this commit is to continue the prior trend of leaning into the `anyhow::Error` type instead of trying to recreate it with `Trap`. A subsequent simplification to `Trap` after this commit is that `Trap` will simply be an `enum` of trap codes with no extra information. This commit is doubly-motivated by the desire to always use the new `BacktraceContext` type instead of sometimes using that and sometimes using `Trap`. Most of the changes here were around updating `Trap::new` calls to `bail!` calls instead. Tests which assert particular error messages additionally often needed to use the `:?` formatter instead of the `{}` formatter because the prior formats the whole `anyhow::Error` and the latter only formats the top-most error, which now contains the backtrace. * Merge `Trap` and `TrapCode` With prior refactorings there's no more need for `Trap` to be opaque or otherwise contain a backtrace. This commit parse down `Trap` to simply an `enum` which was the old `TrapCode`. All various tests and such were updated to handle this. The main consequence of this commit is that all errors have a `BacktraceContext` context attached to them. This unfortunately means that the backtrace is printed first before the error message or trap code, but given all the prior simplifications that seems worth it at this time. * Rename `BacktraceContext` to `WasmBacktrace` This feels like a better name given how this has turned out, and additionally this commit removes having both `WasmBacktrace` and `BacktraceContext`. * Soup up documentation for errors and traps * Fix build of the C API Co-authored-by: Pat Hickey <pat@moreproductive.org>
429 lines
13 KiB
Rust
429 lines
13 KiB
Rust
use crate::wasm_trap_t;
|
|
use crate::{
|
|
wasm_extern_t, wasm_functype_t, wasm_store_t, wasm_val_t, wasm_val_vec_t, wasmtime_error_t,
|
|
wasmtime_extern_t, wasmtime_val_t, wasmtime_val_union, CStoreContext, CStoreContextMut,
|
|
};
|
|
use anyhow::{Error, Result};
|
|
use std::any::Any;
|
|
use std::ffi::c_void;
|
|
use std::mem::{self, MaybeUninit};
|
|
use std::panic::{self, AssertUnwindSafe};
|
|
use std::ptr;
|
|
use std::str;
|
|
use wasmtime::{AsContextMut, Caller, Extern, Func, Trap, Val, ValRaw};
|
|
|
|
#[derive(Clone)]
|
|
#[repr(transparent)]
|
|
pub struct wasm_func_t {
|
|
ext: wasm_extern_t,
|
|
}
|
|
|
|
wasmtime_c_api_macros::declare_ref!(wasm_func_t);
|
|
|
|
pub type wasm_func_callback_t = extern "C" fn(
|
|
args: *const wasm_val_vec_t,
|
|
results: *mut wasm_val_vec_t,
|
|
) -> Option<Box<wasm_trap_t>>;
|
|
|
|
pub type wasm_func_callback_with_env_t = extern "C" fn(
|
|
env: *mut std::ffi::c_void,
|
|
args: *const wasm_val_vec_t,
|
|
results: *mut wasm_val_vec_t,
|
|
) -> Option<Box<wasm_trap_t>>;
|
|
|
|
impl wasm_func_t {
|
|
pub(crate) fn try_from(e: &wasm_extern_t) -> Option<&wasm_func_t> {
|
|
match &e.which {
|
|
Extern::Func(_) => Some(unsafe { &*(e as *const _ as *const _) }),
|
|
_ => None,
|
|
}
|
|
}
|
|
|
|
pub(crate) fn func(&self) -> Func {
|
|
match self.ext.which {
|
|
Extern::Func(f) => f,
|
|
_ => unsafe { std::hint::unreachable_unchecked() },
|
|
}
|
|
}
|
|
}
|
|
|
|
unsafe fn create_function(
|
|
store: &mut wasm_store_t,
|
|
ty: &wasm_functype_t,
|
|
func: impl Fn(*const wasm_val_vec_t, *mut wasm_val_vec_t) -> Option<Box<wasm_trap_t>>
|
|
+ Send
|
|
+ Sync
|
|
+ 'static,
|
|
) -> Box<wasm_func_t> {
|
|
let ty = ty.ty().ty.clone();
|
|
let func = Func::new(
|
|
store.store.context_mut(),
|
|
ty,
|
|
move |_caller, params, results| {
|
|
let params: wasm_val_vec_t = params
|
|
.iter()
|
|
.cloned()
|
|
.map(|p| wasm_val_t::from_val(p))
|
|
.collect::<Vec<_>>()
|
|
.into();
|
|
let mut out_results: wasm_val_vec_t = vec![wasm_val_t::default(); results.len()].into();
|
|
let out = func(¶ms, &mut out_results);
|
|
if let Some(trap) = out {
|
|
return Err(trap.error);
|
|
}
|
|
|
|
let out_results = out_results.as_slice();
|
|
for i in 0..results.len() {
|
|
results[i] = out_results[i].val();
|
|
}
|
|
Ok(())
|
|
},
|
|
);
|
|
Box::new(wasm_func_t {
|
|
ext: wasm_extern_t {
|
|
store: store.store.clone(),
|
|
which: func.into(),
|
|
},
|
|
})
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasm_func_new(
|
|
store: &mut wasm_store_t,
|
|
ty: &wasm_functype_t,
|
|
callback: wasm_func_callback_t,
|
|
) -> Box<wasm_func_t> {
|
|
create_function(store, ty, move |params, results| callback(params, results))
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasm_func_new_with_env(
|
|
store: &mut wasm_store_t,
|
|
ty: &wasm_functype_t,
|
|
callback: wasm_func_callback_with_env_t,
|
|
data: *mut c_void,
|
|
finalizer: Option<extern "C" fn(arg1: *mut std::ffi::c_void)>,
|
|
) -> Box<wasm_func_t> {
|
|
let finalizer = crate::ForeignData { data, finalizer };
|
|
create_function(store, ty, move |params, results| {
|
|
drop(&finalizer); // move entire finalizer into this closure
|
|
callback(finalizer.data, params, results)
|
|
})
|
|
}
|
|
|
|
/// Places the `args` into `dst` and additionally reserves space in `dst` for `results_size`
|
|
/// returns. The params/results slices are then returned separately.
|
|
fn translate_args<'a>(
|
|
dst: &'a mut Vec<Val>,
|
|
args: impl ExactSizeIterator<Item = Val>,
|
|
results_size: usize,
|
|
) -> (&'a [Val], &'a mut [Val]) {
|
|
debug_assert!(dst.is_empty());
|
|
let num_args = args.len();
|
|
dst.reserve(args.len() + results_size);
|
|
dst.extend(args);
|
|
dst.extend((0..results_size).map(|_| Val::null()));
|
|
let (a, b) = dst.split_at_mut(num_args);
|
|
(a, b)
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasm_func_call(
|
|
func: &mut wasm_func_t,
|
|
args: *const wasm_val_vec_t,
|
|
results: *mut wasm_val_vec_t,
|
|
) -> *mut wasm_trap_t {
|
|
let f = func.func();
|
|
let results = (*results).as_uninit_slice();
|
|
let args = (*args).as_slice();
|
|
let mut dst = Vec::new();
|
|
let (wt_params, wt_results) =
|
|
translate_args(&mut dst, args.iter().map(|i| i.val()), results.len());
|
|
|
|
// We're calling arbitrary code here most of the time, and we in general
|
|
// want to try to insulate callers against bugs in wasmtime/wasi/etc if we
|
|
// can. As a result we catch panics here and transform them to traps to
|
|
// allow the caller to have any insulation possible against Rust panics.
|
|
let result = panic::catch_unwind(AssertUnwindSafe(|| {
|
|
f.call(func.ext.store.context_mut(), wt_params, wt_results)
|
|
}));
|
|
match result {
|
|
Ok(Ok(())) => {
|
|
for (slot, val) in results.iter_mut().zip(wt_results.iter().cloned()) {
|
|
crate::initialize(slot, wasm_val_t::from_val(val));
|
|
}
|
|
ptr::null_mut()
|
|
}
|
|
Ok(Err(err)) => Box::into_raw(Box::new(wasm_trap_t::new(err))),
|
|
Err(panic) => {
|
|
let err = error_from_panic(panic);
|
|
let trap = Box::new(wasm_trap_t::new(err));
|
|
Box::into_raw(trap)
|
|
}
|
|
}
|
|
}
|
|
|
|
fn error_from_panic(panic: Box<dyn Any + Send>) -> Error {
|
|
if let Some(msg) = panic.downcast_ref::<String>() {
|
|
Error::msg(msg.clone())
|
|
} else if let Some(msg) = panic.downcast_ref::<&'static str>() {
|
|
Error::msg(*msg)
|
|
} else {
|
|
Error::msg("rust panic happened")
|
|
}
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasm_func_type(f: &wasm_func_t) -> Box<wasm_functype_t> {
|
|
Box::new(wasm_functype_t::new(f.func().ty(f.ext.store.context())))
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasm_func_param_arity(f: &wasm_func_t) -> usize {
|
|
f.func().ty(f.ext.store.context()).params().len()
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasm_func_result_arity(f: &wasm_func_t) -> usize {
|
|
f.func().ty(f.ext.store.context()).results().len()
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub extern "C" fn wasm_func_as_extern(f: &mut wasm_func_t) -> &mut wasm_extern_t {
|
|
&mut (*f).ext
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub extern "C" fn wasm_func_as_extern_const(f: &wasm_func_t) -> &wasm_extern_t {
|
|
&(*f).ext
|
|
}
|
|
|
|
#[repr(C)]
|
|
pub struct wasmtime_caller_t<'a> {
|
|
caller: Caller<'a, crate::StoreData>,
|
|
}
|
|
|
|
pub type wasmtime_func_callback_t = extern "C" fn(
|
|
*mut c_void,
|
|
*mut wasmtime_caller_t,
|
|
*const wasmtime_val_t,
|
|
usize,
|
|
*mut wasmtime_val_t,
|
|
usize,
|
|
) -> Option<Box<wasm_trap_t>>;
|
|
|
|
pub type wasmtime_func_unchecked_callback_t = extern "C" fn(
|
|
*mut c_void,
|
|
*mut wasmtime_caller_t,
|
|
*mut ValRaw,
|
|
usize,
|
|
) -> Option<Box<wasm_trap_t>>;
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasmtime_func_new(
|
|
store: CStoreContextMut<'_>,
|
|
ty: &wasm_functype_t,
|
|
callback: wasmtime_func_callback_t,
|
|
data: *mut c_void,
|
|
finalizer: Option<extern "C" fn(*mut std::ffi::c_void)>,
|
|
func: &mut Func,
|
|
) {
|
|
let ty = ty.ty().ty.clone();
|
|
let cb = c_callback_to_rust_fn(callback, data, finalizer);
|
|
let f = Func::new(store, ty, cb);
|
|
*func = f;
|
|
}
|
|
|
|
pub(crate) unsafe fn c_callback_to_rust_fn(
|
|
callback: wasmtime_func_callback_t,
|
|
data: *mut c_void,
|
|
finalizer: Option<extern "C" fn(*mut std::ffi::c_void)>,
|
|
) -> impl Fn(Caller<'_, crate::StoreData>, &[Val], &mut [Val]) -> Result<()> {
|
|
let foreign = crate::ForeignData { data, finalizer };
|
|
move |mut caller, params, results| {
|
|
drop(&foreign); // move entire foreign into this closure
|
|
|
|
// Convert `params/results` to `wasmtime_val_t`. Use the previous
|
|
// storage in `hostcall_val_storage` to help avoid allocations all the
|
|
// time.
|
|
let mut vals = mem::take(&mut caller.data_mut().hostcall_val_storage);
|
|
debug_assert!(vals.is_empty());
|
|
vals.reserve(params.len() + results.len());
|
|
vals.extend(params.iter().cloned().map(|p| wasmtime_val_t::from_val(p)));
|
|
vals.extend((0..results.len()).map(|_| wasmtime_val_t {
|
|
kind: crate::WASMTIME_I32,
|
|
of: wasmtime_val_union { i32: 0 },
|
|
}));
|
|
let (params, out_results) = vals.split_at_mut(params.len());
|
|
|
|
// Invoke the C function pointer, getting the results.
|
|
let mut caller = wasmtime_caller_t { caller };
|
|
let out = callback(
|
|
foreign.data,
|
|
&mut caller,
|
|
params.as_ptr(),
|
|
params.len(),
|
|
out_results.as_mut_ptr(),
|
|
out_results.len(),
|
|
);
|
|
if let Some(trap) = out {
|
|
return Err(trap.error);
|
|
}
|
|
|
|
// Translate the `wasmtime_val_t` results into the `results` space
|
|
for (i, result) in out_results.iter().enumerate() {
|
|
results[i] = result.to_val();
|
|
}
|
|
|
|
// Move our `vals` storage back into the store now that we no longer
|
|
// need it. This'll get picked up by the next hostcall and reuse our
|
|
// same storage.
|
|
vals.truncate(0);
|
|
caller.caller.data_mut().hostcall_val_storage = vals;
|
|
Ok(())
|
|
}
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasmtime_func_new_unchecked(
|
|
store: CStoreContextMut<'_>,
|
|
ty: &wasm_functype_t,
|
|
callback: wasmtime_func_unchecked_callback_t,
|
|
data: *mut c_void,
|
|
finalizer: Option<extern "C" fn(*mut std::ffi::c_void)>,
|
|
func: &mut Func,
|
|
) {
|
|
let ty = ty.ty().ty.clone();
|
|
let cb = c_unchecked_callback_to_rust_fn(callback, data, finalizer);
|
|
*func = Func::new_unchecked(store, ty, cb);
|
|
}
|
|
|
|
pub(crate) unsafe fn c_unchecked_callback_to_rust_fn(
|
|
callback: wasmtime_func_unchecked_callback_t,
|
|
data: *mut c_void,
|
|
finalizer: Option<extern "C" fn(*mut std::ffi::c_void)>,
|
|
) -> impl Fn(Caller<'_, crate::StoreData>, &mut [ValRaw]) -> Result<()> {
|
|
let foreign = crate::ForeignData { data, finalizer };
|
|
move |caller, values| {
|
|
drop(&foreign); // move entire foreign into this closure
|
|
let mut caller = wasmtime_caller_t { caller };
|
|
match callback(foreign.data, &mut caller, values.as_mut_ptr(), values.len()) {
|
|
None => Ok(()),
|
|
Some(trap) => Err(trap.error),
|
|
}
|
|
}
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasmtime_func_call(
|
|
mut store: CStoreContextMut<'_>,
|
|
func: &Func,
|
|
args: *const wasmtime_val_t,
|
|
nargs: usize,
|
|
results: *mut MaybeUninit<wasmtime_val_t>,
|
|
nresults: usize,
|
|
trap_ret: &mut *mut wasm_trap_t,
|
|
) -> Option<Box<wasmtime_error_t>> {
|
|
let mut store = store.as_context_mut();
|
|
let mut params = mem::take(&mut store.data_mut().wasm_val_storage);
|
|
let (wt_params, wt_results) = translate_args(
|
|
&mut params,
|
|
crate::slice_from_raw_parts(args, nargs)
|
|
.iter()
|
|
.map(|i| i.to_val()),
|
|
nresults,
|
|
);
|
|
|
|
// We're calling arbitrary code here most of the time, and we in general
|
|
// want to try to insulate callers against bugs in wasmtime/wasi/etc if we
|
|
// can. As a result we catch panics here and transform them to traps to
|
|
// allow the caller to have any insulation possible against Rust panics.
|
|
let result = panic::catch_unwind(AssertUnwindSafe(|| {
|
|
func.call(&mut store, wt_params, wt_results)
|
|
}));
|
|
match result {
|
|
Ok(Ok(())) => {
|
|
let results = crate::slice_from_raw_parts_mut(results, nresults);
|
|
for (slot, val) in results.iter_mut().zip(wt_results.iter()) {
|
|
crate::initialize(slot, wasmtime_val_t::from_val(val.clone()));
|
|
}
|
|
params.truncate(0);
|
|
store.data_mut().wasm_val_storage = params;
|
|
None
|
|
}
|
|
Ok(Err(trap)) => {
|
|
if trap.is::<Trap>() {
|
|
*trap_ret = Box::into_raw(Box::new(wasm_trap_t::new(trap)));
|
|
None
|
|
} else {
|
|
Some(Box::new(wasmtime_error_t::from(trap)))
|
|
}
|
|
}
|
|
Err(panic) => {
|
|
let err = error_from_panic(panic);
|
|
*trap_ret = Box::into_raw(Box::new(wasm_trap_t::new(err)));
|
|
None
|
|
}
|
|
}
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasmtime_func_call_unchecked(
|
|
store: CStoreContextMut<'_>,
|
|
func: &Func,
|
|
args_and_results: *mut ValRaw,
|
|
) -> *mut wasm_trap_t {
|
|
match func.call_unchecked(store, args_and_results) {
|
|
Ok(()) => ptr::null_mut(),
|
|
Err(trap) => Box::into_raw(Box::new(wasm_trap_t::new(trap))),
|
|
}
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub extern "C" fn wasmtime_func_type(
|
|
store: CStoreContext<'_>,
|
|
func: &Func,
|
|
) -> Box<wasm_functype_t> {
|
|
Box::new(wasm_functype_t::new(func.ty(store)))
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub extern "C" fn wasmtime_caller_context<'a>(
|
|
caller: &'a mut wasmtime_caller_t,
|
|
) -> CStoreContextMut<'a> {
|
|
caller.caller.as_context_mut()
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasmtime_caller_export_get(
|
|
caller: &mut wasmtime_caller_t,
|
|
name: *const u8,
|
|
name_len: usize,
|
|
item: &mut MaybeUninit<wasmtime_extern_t>,
|
|
) -> bool {
|
|
let name = match str::from_utf8(crate::slice_from_raw_parts(name, name_len)) {
|
|
Ok(name) => name,
|
|
Err(_) => return false,
|
|
};
|
|
let which = match caller.caller.get_export(name) {
|
|
Some(item) => item,
|
|
None => return false,
|
|
};
|
|
crate::initialize(item, which.into());
|
|
true
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasmtime_func_from_raw(
|
|
store: CStoreContextMut<'_>,
|
|
raw: usize,
|
|
func: &mut Func,
|
|
) {
|
|
*func = Func::from_raw(store, raw).unwrap();
|
|
}
|
|
|
|
#[no_mangle]
|
|
pub unsafe extern "C" fn wasmtime_func_to_raw(store: CStoreContextMut<'_>, func: &Func) -> usize {
|
|
func.to_raw(store)
|
|
}
|