Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: e942b93cdaa04a323f26b3b0facbed690ca6db63
https://github.com/WebKit/WebKit/commit/e942b93cdaa04a323f26b3b0facbed690ca6db63
Author: Yusuke Suzuki <[email protected]>
Date: 2026-08-04 (Tue, 04 Aug 2026)
Changed paths:
A JSTests/wasm/stress/table64-element-offset.js
M Source/JavaScriptCore/wasm/js/WebAssemblyModuleRecord.cpp
Log Message:
-----------
[JSC] Active element segment offsets are truncated for a table64
https://bugs.webkit.org/show_bug.cgi?id=321008
rdar://184044756
Reviewed by Cole Carley.
This is similar to 317633@main, but for table64.
forEachActiveElement is narrowing down the elementIndex to uint32_t, so
let's not do it. Also elementIndex needs to be read via i64 form in table64.
Test: JSTests/wasm/stress/table64-element-offset.js
* JSTests/wasm/stress/table64-element-offset.js: Added.
(string_appeared_here.f):
(await.assert.throwsAsync.instantiate.module.import.string_appeared_here.string_appeared_here.global.g.i64.table.i64.10.funcref.elem.global.g.f):
(g.new.WebAssembly.Global):
* Source/JavaScriptCore/wasm/js/WebAssemblyModuleRecord.cpp:
(JSC::WebAssemblyModuleRecord::evaluate):
Canonical link: https://commits.webkit.org/318590@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
