[webkit-changes] [WebKit/WebKit] c28107: The try_table catch targets should be validated ag...

[Commit Queue]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: c28107072dbb85310d2f7fa07cc9f60131edb766
      https://github.com/WebKit/WebKit/commit/c28107072dbb85310d2f7fa07cc9f60131edb766
  Author: Mark Lam <mark.lam at apple.com>
  Date:   2024-10-16 (Wed, 16 Oct 2024)

  Changed paths:
    A JSTests/wasm/stress/try-table-malformed-catch-label.js
    M Source/JavaScriptCore/wasm/WasmFunctionParser.h

  Log Message:
  -----------
  The try_table catch targets should be validated against the control stack size.
https://bugs.webkit.org/show_bug.cgi?id=281546
rdar://137600598

Reviewed by David Degazio.

This is needed for handling malformed Wasm payloads.  This check was missed in the implementation
of the new Wasm exception spec in 283954 at main.

* JSTests/wasm/stress/try-table-malformed-catch-label.js: Added.
* Source/JavaScriptCore/wasm/WasmFunctionParser.h:
(JSC::Wasm::FunctionParser<Context>::parseExpression):

Canonical link: https://commits.webkit.org/285256@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications