alexcrichton requested wasmtime-core-reviewers for a review on PR #12870.
alexcrichton requested dicej for a review on PR #12870.
alexcrichton opened PR #12870 from alexcrichton:fix-write-buffer to bytecodealliance:main:
For component-model-async this fixes logic and undefined behavior issues in the implementation of the
WriteBuffertrait for various types. Notably all types didn't respect theunsafecontract of theWriteBuffer::takemethod by limiting the number of results to what was requested. This flawed detail, when coupled with other implementation details, led to both incorrect results and UB in the case thatVecBuffer<T>was used whereThad aDropimplementation. This is not a security issue because component-model-async is not yet Tier 1 and thus is exempt from the security issue process, but this is nonetheless something needed to be fixed.<!--
Please make sure you include the following information:
If this work has been discussed elsewhere, please include a link to that
conversation. If it was discussed in an issue, just mention "issue #...".Explain why this change is needed. If the details are in an issue already,
this can be brief.Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.htmlPlease ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->
alexcrichton requested wasmtime-default-reviewers for a review on PR #12870.
github-actions[bot] added the label wasmtime:api on PR #12870.
dicej submitted PR review.
alexcrichton added PR #12870 Fix logic and double-drop UB in WriteBuffer impls to the merge queue.
alexcrichton merged PR #12870.
alexcrichton removed PR #12870 Fix logic and double-drop UB in WriteBuffer impls from the merge queue.
Last updated: Apr 12 2026 at 23:10 UTC