[webkit-changes] [WebKit/WebKit] 2f5a0e: ref.as_non_null does not validate argument type

[Daniel Liu]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 2f5a0e40ca697d00c42a3f73f8b4dda5a0d175f1
      https://github.com/WebKit/WebKit/commit/2f5a0e40ca697d00c42a3f73f8b4dda5a0d175f1
  Author: Daniel Liu <danlliu at umich.edu>
  Date:   2024-08-07 (Wed, 07 Aug 2024)

  Changed paths:
    A JSTests/wasm/stress/funcref-types.js
    M Source/JavaScriptCore/wasm/WasmFunctionParser.h

  Log Message:
  -----------
  ref.as_non_null does not validate argument type
https://bugs.webkit.org/show_bug.cgi?id=276097
rdar://130746587

Reviewed by Yusuke Suzuki.

The function parser does not ensure ref.as_not_null takes in the correct type; this may lead to issues downstream because of incorrect validation.

* Source/JavaScriptCore/wasm/WasmFunctionParser.h:
(JSC::Wasm::FunctionParser<Context>::parseExpression):

Originally-landed-as: 5b25ef6f6add. rdar://132956690
Canonical link: https://commits.webkit.org/281941@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications