Lingming Zhang comments

Results 17 comments of


                                            Lingming Zhang

Parse Exception with Block Type But WABT Successfully Parses It

> The issue is probably the same as in #5950 - Binaryen does not support multivalue input params to control flow structures (here, `block (param i32)`). Unfortunately it seems we...

Parse Exception with Block Type But WABT Successfully Parses It

> > Does Binaryen not support table.init, elem.drop, table.copy, table.fill yet? Because I witnessed similar parse errors when dealing with these instructions. > > @tlively just implemented `table.fill`: #5949 Those...

Parse Exception with Block Type But WABT Successfully Parses It

> Hmm, I guess you're right that the error isn't related to table initializers since that example doesn't have any table initializers, but it seems that we're similarly missing support...

[Security] Out-of-Bound Memory Write on "op_CopySlot_64" Function

> (It would be nice if this bot provided WAT, like the one in #465.) > > I think this is because the recursive call in `CopyStackSlotsR` assumes `numSlots` is...

[Security] Heap Buffer Overflow on "op_SetSlot_f64" Function

> Trying small values of `--stack-size` allows this tiny repro: https://gist.github.com/tommie/04d77358c4006df94106f8e63a71cfec > > * It's only using `i32`. > * It fails on the first instruction with stack sizes 20-27....

Problems related to tracking data dependencies during fuzzing

> Hi and sorry for the slow reply! Yeah I agree, this is currently a limitation of the type system (we basically need some form of type nesting). For now...

Problems related to tracking data dependencies during fuzzing

> With "nested type" I just mean something like that would allow you to write: > > ``` > CodeGenerator("WasmExceptionGenerator", inputs: .required(.jsWebAssemblyTagObject)) { tagObject in > let innerTypes = b.typeOf(tagObject).getInnerTypes()...