Closed
Bug 1854009
Opened 2 years ago
Closed 2 years ago
Use load32 in call_indirect signature check for subtype depth
Categories
(Core :: JavaScript: WebAssembly, defect, P2)
Core
JavaScript: WebAssembly
Tracking
()
RESOLVED
FIXED
119 Branch
| Tracking | Status | |
|---|---|---|
| firefox119 | --- | fixed |
People
(Reporter: rhunt, Assigned: rhunt)
References
Details
Attachments
(2 files)
Only affects the GC proposal. We use load8, when the field is actually 32-bits. With our current limits for GC types, this should not in practice be an issue.
| Assignee | ||
Comment 1•2 years ago
|
||
The subtyping depth field on STV is 32-bits, we should use load32.
The hardcoded subtyping depth limit and LEB byte order currently
save us here, but we shouldn't rely on that.
| Assignee | ||
Comment 2•2 years ago
|
||
The subtyping depth field on STV is 32-bits, we should use load32.
The hardcoded subtyping depth limit and LEB byte order currently
save us here, but we shouldn't rely on that.
Depends on D188303
Pushed by rhunt@eqrion.net:
https://hg.mozilla.org/integration/autoland/rev/644a53a027f5
wasm: Use load32 for loading subtyping depth. r=bvisness
Comment 4•2 years ago
|
||
| bugherder | ||
Status: NEW → RESOLVED
Closed: 2 years ago
status-firefox119:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 119 Branch
You need to log in
before you can comment on or make changes to this bug.
Description
•