[Webkit-unassigned] [Bug 267357] New: [Wasm-GC] Fix recursive return type index for struct.new_default

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=267357

            Bug ID: 267357
           Summary: [Wasm-GC] Fix recursive return type index for
                    struct.new_default
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebAssembly
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: asumu at igalia.com

Minimal test case (goes in `structs.js` test):

```
  compile(`
     (module
       (rec (type (struct (field (ref null 0)))))
       (func (param (ref null 0)))
       (func
         (struct.new_default 0 (ref.null 0))
         (call 0))
     )
  `);
```

errors with `wasm.yaml/wasm/gc/structs.js.wasm-no-cjit: ASSERTION FAILED: subRTT.has_value() && parentRTT.has_value()`

The cause is there's a type expansion done at the wrong time in validation for `struct.new_default`, and has a very simple fix.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20240110/551a4fda/attachment.htm>