LadybirdBrowser/ladybird
1
1
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2024-09-11 13:36:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

LibWasm: Disallow out-of-range br_table labels

Browse Source
This commit is contained in:
Ali Mohammad Pur 2023-07-03 12:26:11 +03:30 committed by Ali Mohammad Pur
parent 8668851cb1
commit b005691497
Notes: sideshowbarker 2024-07-17 06:45:52 +09:00 
Author: https://github.com/alimpfard
Commit: https://github.com/SerenityOS/serenity/commit/b005691497
Pull-request: https://github.com/SerenityOS/serenity/pull/19623
Reviewed-by: https://github.com/ADKaster
Reviewed-by: https://github.com/DanShaders
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Userland/Libraries/LibWasm/AbstractMachine/Validator.cpp
View File

@ -2112,6 +2112,8 @@ VALIDATE_INSTRUCTION(br_table)
auto stack_to_check = stack_snapshot;
for (auto& label : args.labels) {
auto& label_types = m_context.labels[label.value()].types();
if (label_types.size() != arity)
return Errors::invalid("br_table label arity mismatch"sv);
for (size_t i = 0; i < arity; ++i)
TRY(stack_to_check.take(label_types[label_types.size() - i - 1]));
stack_to_check = stack_snapshot;