Wasmtime GitHub notifications bot (Apr 09 2026 at 18:51): Wasmtime GitHub notifications bot (Apr 09 2026 at 18:51):alexcrichton requested wasmtime-core-reviewers for a review on PR #13012.
Wasmtime GitHub notifications bot (Apr 09 2026 at 18:52):alexcrichton opened PR #13012 from alexcrichton:fix-verify-alignment to bytecodealliance:main:
Note: this is a fix for GHSA-jxhv-7h78-9775
This commit updates string transcoding between guest modules to properly verify alignment. Previously alignment was only verified on the first allocation, not reallocations, which is not spec-compliant. This additionally fixes a possible host panic when dealing with unaligned pointers.
<!--
Please make sure you include the following information:
If this work has been discussed elsewhere, please include a link to that
conversation. If it was discussed in an issue, just mention "issue #...".Explain why this change is needed. If the details are in an issue already,
this can be brief.Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.htmlPlease ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->
Wasmtime GitHub notifications bot (Apr 09 2026 at 18:52):alexcrichton requested cfallin for a review on PR #13012.
Wasmtime GitHub notifications bot (Apr 09 2026 at 18:55):cfallin submitted PR review.
Wasmtime GitHub notifications bot (Apr 09 2026 at 18:55):cfallin has enabled auto merge for PR #13012.
Wasmtime GitHub notifications bot (Apr 09 2026 at 19:04):cfallin added PR #13012 Properly verify alignment in string transcoding to the merge queue.
Wasmtime GitHub notifications bot (Apr 09 2026 at 20:05):cfallin merged PR #13012.
Wasmtime GitHub notifications bot (Apr 09 2026 at 20:05):cfallin removed PR #13012 Properly verify alignment in string transcoding from the merge queue.
Last updated: Apr 12 2026 at 23:10 UTC