fitzgen opened PR #12936 from fitzgen:array-new-elem-missing-stack-map to bytecodealliance:main:
translate_array_new_elemcreated a GC reference (array ref) via a libcall but
did not callbuilder.declare_value_needs_stack_map()on the result. This meant
the reference was not included in stack maps at subsequent safepoints, so if a
GC occurred, the reference became stale (leading to use-after-free within the GC
heap sandbox).Depends on https://github.com/bytecodealliance/wasmtime/pull/12935
fitzgen requested wasmtime-compiler-reviewers for a review on PR #12936.
fitzgen requested wasmtime-core-reviewers for a review on PR #12936.
fitzgen requested cfallin for a review on PR #12936.
cfallin submitted PR review:
r+ on last commit
github-actions[bot] added the label cranelift:area:machinst on PR #12936.
github-actions[bot] added the label cranelift on PR #12936.
fitzgen updated PR #12936.
fitzgen has enabled auto merge for PR #12936.
fitzgen added PR #12936 Add missing stack map declaration for array.new_elem to the merge queue
fitzgen removed PR #12936 Add missing stack map declaration for array.new_elem from the merge queue
fitzgen merged PR #12936.
Last updated: Apr 13 2026 at 00:25 UTC