[Webkit-unassigned] [Bug 233392] New: WebAssembly: memory.fill returns wrong error on out-of-bounds

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Nov 19 18:29:28 PST 2021


https://bugs.webkit.org/show_bug.cgi?id=233392

            Bug ID: 233392
           Summary: WebAssembly: memory.fill returns wrong error on
                    out-of-bounds
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebAssembly
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: asumu at igalia.com

The following wasm program should produce a memory out of bounds exception when `fill_oob` is called:

```
  (module
    (import "env" "memory" (memory $mem0 1 1))
    (func (export "fill_oob")
      (memory.fill (i32.const 0) (i32.const 42) (i32.const 65537))
    )
  )
```

Right now, JSC will throw "Out of bounds table access" instead.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20211120/02ed7a3d/attachment-0001.htm>


More information about the webkit-unassigned mailing list