alexcrichton opened PR #13015 from alexcrichton:fix-oob-flags to bytecodealliance:main:
Note: this is a fix for GHSA-m758-wjhj-p3jq
This commit fixes a panic when a component model
Valueis lifted from a flags value which specifies out-of-bounds bits as 1. This is specified in the component model to ignore the out-of-bounds bits, whichflags!correctly did (and thusbindgen!), butValuetreated out-of-bounds bits as a panic due to indexing an array.<!--
Please make sure you include the following information:
If this work has been discussed elsewhere, please include a link to that
conversation. If it was discussed in an issue, just mention "issue #...".Explain why this change is needed. If the details are in an issue already,
this can be brief.Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.htmlPlease ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->
alexcrichton requested pchickey for a review on PR #13015.
alexcrichton requested wasmtime-core-reviewers for a review on PR #13015.
pchickey submitted PR review.
pchickey added PR #13015 Fix panic with out-of-bounds flags in Value to the merge queue
pchickey merged PR #13015.
pchickey removed PR #13015 Fix panic with out-of-bounds flags in Value from the merge queue
Last updated: Apr 12 2026 at 23:10 UTC