Closed Bug 1854009 Opened 2 years ago Closed 2 years ago

Use load32 in call_indirect signature check for subtype depth

Categories

(Core :: JavaScript: WebAssembly, defect, P2)

defect

Tracking

()

RESOLVED FIXED
119 Branch
Tracking Status
firefox119 --- fixed

People

(Reporter: rhunt, Assigned: rhunt)

References

Details

Attachments

(2 files)

Only affects the GC proposal. We use load8, when the field is actually 32-bits. With our current limits for GC types, this should not in practice be an issue.

The subtyping depth field on STV is 32-bits, we should use load32.

The hardcoded subtyping depth limit and LEB byte order currently
save us here, but we shouldn't rely on that.

The subtyping depth field on STV is 32-bits, we should use load32.

The hardcoded subtyping depth limit and LEB byte order currently
save us here, but we shouldn't rely on that.

Depends on D188303

Pushed by rhunt@eqrion.net: https://hg.mozilla.org/integration/autoland/rev/644a53a027f5 wasm: Use load32 for loading subtyping depth. r=bvisness
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → 119 Branch
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: