[Webkit-unassigned] [Bug 266127] New: [Wasm-GC] Local init tracking should track unreachable local.set too

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=266127

            Bug ID: 266127
           Summary: [Wasm-GC] Local init tracking should track unreachable
                    local.set too
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebAssembly
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: asumu at igalia.com

Example test cases:

```
//@ runWebAssemblySuite("--useWebAssemblyTypedFunctionReferences=true", "--useWebAssemblyGC=true")

import * as assert from "../assert.js";
import { compile } from "./wast-wrapper.js";

function testUnreachable()
{
  // A local.set in unreachable code should still count for init.
  compile(`
    (module
      (type (struct))
      (func (local (ref 0))
        (unreachable)
        (local.set 0 (struct.new 0))
        (local.get 0)
        drop))
  `);

  compile(`
    (module
      (type (struct))
      (func (local (ref 0))
        (unreachable)
        (local.tee 0 (struct.new 0))
        drop
        (local.get 0)
        drop))
  `);
}

testUnreachable()
```

These currently fail but should validate.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20231209/7026be03/attachment-0001.htm>