[webkit-changes] [WebKit/WebKit] 015083: Add FunctionSignature checks to the FunctionParser...

[Daniel Liu]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 015083cf076fcd81dd267a2f123e28341e7cd039
      https://github.com/WebKit/WebKit/commit/015083cf076fcd81dd267a2f123e28341e7cd039
  Author: Daniel Liu <danlliu at umich.edu>
  Date:   2025-01-06 (Mon, 06 Jan 2025)

  Changed paths:
    A JSTests/wasm/stress/call-indirect-signature-type.js
    A JSTests/wasm/stress/start-signature-type.js
    M Source/JavaScriptCore/wasm/WasmFunctionParser.h
    M Source/JavaScriptCore/wasm/WasmSectionParser.cpp

  Log Message:
  -----------
  Add FunctionSignature checks to the FunctionParser and SectionParser
https://bugs.webkit.org/show_bug.cgi?id=285444
rdar://142322369

Reviewed by David Degazio.

There are a few places in our code where we cast a type signature to a FunctionSignature without checking, which can lead to
null pointer dereferences from failed casts later on in the code.

* JSTests/wasm/stress/call-indirect-signature-type.js: Added.
* Source/JavaScriptCore/wasm/WasmFunctionParser.h:
(JSC::Wasm::FunctionParser<Context>::parseExpression):

Canonical link: https://commits.webkit.org/288492@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications