Browse Source

LibWasm: Disallow out-of-range br_table labels

Ali Mohammad Pur 2 years ago
parent
commit
b005691497
1 changed files with 2 additions and 0 deletions
  1. 2 0
      Userland/Libraries/LibWasm/AbstractMachine/Validator.cpp

+ 2 - 0
Userland/Libraries/LibWasm/AbstractMachine/Validator.cpp

@@ -2112,6 +2112,8 @@ VALIDATE_INSTRUCTION(br_table)
     auto stack_to_check = stack_snapshot;
     auto stack_to_check = stack_snapshot;
     for (auto& label : args.labels) {
     for (auto& label : args.labels) {
         auto& label_types = m_context.labels[label.value()].types();
         auto& label_types = m_context.labels[label.value()].types();
+        if (label_types.size() != arity)
+            return Errors::invalid("br_table label arity mismatch"sv);
         for (size_t i = 0; i < arity; ++i)
         for (size_t i = 0; i < arity; ++i)
             TRY(stack_to_check.take(label_types[label_types.size() - i - 1]));
             TRY(stack_to_check.take(label_types[label_types.size() - i - 1]));
         stack_to_check = stack_snapshot;
         stack_to_check = stack_snapshot;