[webkit-changes] [WebKit/WebKit] 5b5d40: Cherry-pick 282682 at main (f95652711d7e). https://bu...

[David Degazio]

  Branch: refs/heads/webkitglib/2.46
  Home:   https://github.com/WebKit/WebKit
  Commit: 5b5d40f02cec784b9e3f6008a37831e75750372d
      https://github.com/WebKit/WebKit/commit/5b5d40f02cec784b9e3f6008a37831e75750372d
  Author: David Degazio <d_degazio at apple.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    M JSTests/wasm/gc/linking.js
    M Source/JavaScriptCore/wasm/js/WebAssemblyModuleRecord.cpp

  Log Message:
  -----------
  Cherry-pick 282682 at main (f95652711d7e). https://bugs.webkit.org/show_bug.cgi?id=278497

    [WASM] Check subtyping in both directions for mutable globals and tables
    https://bugs.webkit.org/show_bug.cgi?id=278497
    rdar://problem/134450707

    Reviewed by Keith Miller and Yijia Huang.

    Replaces our existing typechecking for imported mutable globals and tables to
    check subtyping both ways. This ensures the type we import a global value or
    table as is not a supertype of the imported value's innate type - we don't want
    to be able to import a non-nullable (ref func) as a nullable (ref null func)
    and violate the original type by assigning it to a null value.

    * Source/JavaScriptCore/wasm/js/WebAssemblyModuleRecord.cpp:
    (JSC::WebAssemblyModuleRecord::initializeImports):

    Canonical link: https://commits.webkit.org/282682@main

Canonical link: https://commits.webkit.org/282416.356@webkitglib/2.46



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications