Stream: git-wasmtime

Topic: wasmtime / PR #13015 Fix panic with out-of-bounds flags i...


view this post on Zulip Wasmtime GitHub notifications bot (Apr 09 2026 at 18:54):

alexcrichton opened PR #13015 from alexcrichton:fix-oob-flags to bytecodealliance:main:

Note: this is a fix for GHSA-m758-wjhj-p3jq

This commit fixes a panic when a component model Value is lifted from a flags value which specifies out-of-bounds bits as 1. This is specified in the component model to ignore the out-of-bounds bits, which flags! correctly did (and thus bindgen!), but Value treated out-of-bounds bits as a panic due to indexing an array.

<!--
Please make sure you include the following information:

Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.html

Please ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->

view this post on Zulip Wasmtime GitHub notifications bot (Apr 09 2026 at 18:54):

alexcrichton requested pchickey for a review on PR #13015.

view this post on Zulip Wasmtime GitHub notifications bot (Apr 09 2026 at 18:54):

alexcrichton requested wasmtime-core-reviewers for a review on PR #13015.

view this post on Zulip Wasmtime GitHub notifications bot (Apr 09 2026 at 20:07):

pchickey submitted PR review.

view this post on Zulip Wasmtime GitHub notifications bot (Apr 09 2026 at 20:07):

pchickey added PR #13015 Fix panic with out-of-bounds flags in Value to the merge queue

view this post on Zulip Wasmtime GitHub notifications bot (Apr 09 2026 at 20:48):

pchickey merged PR #13015.

view this post on Zulip Wasmtime GitHub notifications bot (Apr 09 2026 at 20:48):

pchickey removed PR #13015 Fix panic with out-of-bounds flags in Value from the merge queue


Last updated: Apr 12 2026 at 23:10 UTC