RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-25 15:57:45 +00:00
Code Issues Activity Actions

LibWasm: Disallow out-of-range br_table labels

Browse source
This commit is contained in:
Ali Mohammad Pur 2023-07-03 12:26:11 +03:30 • committed by Ali Mohammad Pur
parent 8668851cb1
commit b005691497
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Userland/Libraries/LibWasm/AbstractMachine/Validator.cpp
View file

@ -2112,6 +2112,8 @@ VALIDATE_INSTRUCTION(br_table)
auto stack_to_check = stack_snapshot; auto stack_to_check = stack_snapshot;
for (auto& label : args.labels) { for (auto& label : args.labels) {
auto& label_types = m_context.labels[label.value()].types(); auto& label_types = m_context.labels[label.value()].types();
if (label_types.size() != arity)
return Errors::invalid("br_table label arity mismatch"sv);
for (size_t i = 0; i < arity; ++i) for (size_t i = 0; i < arity; ++i)
TRY(stack_to_check.take(label_types[label_types.size() - i - 1])); TRY(stack_to_check.take(label_types[label_types.size() - i - 1]));
stack_to_check = stack_snapshot; stack_to_check = stack_snapshot;