Stream: git-wasmtime

Topic: wasmtime / PR #13026 Add missing realloc validation in st...

Wasmtime GitHub notifications bot (Apr 09 2026 at 20:40):

alexcrichton opened PR #13026 from alexcrichton:fix-missing-realloc to bytecodealliance:main:

This commit adds a missing validation that a return value of realloc is inbounds during string transcoding. This was accidentally missing on the transcoding path from utf8 to latin1+utf16 which meant that a nearly-raw pointer could get passed to the host to perform the transcode.

<!--
Please make sure you include the following information:

• If this work has been discussed elsewhere, please include a link to that
  conversation. If it was discussed in an issue, just mention "issue #...".

• Explain why this change is needed. If the details are in an issue already,
  this can be brief.

Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.html

Please ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->

Wasmtime GitHub notifications bot (Apr 09 2026 at 20:40):

alexcrichton requested dicej for a review on PR #13026.

Wasmtime GitHub notifications bot (Apr 09 2026 at 20:40):

alexcrichton requested wasmtime-core-reviewers for a review on PR #13026.

Wasmtime GitHub notifications bot (Apr 09 2026 at 20:42):

dicej submitted PR review.

Wasmtime GitHub notifications bot (Apr 09 2026 at 20:42):

alexcrichton has enabled auto merge for PR #13026.

Wasmtime GitHub notifications bot (Apr 09 2026 at 20:53):

alexcrichton added PR #13026 Add missing realloc validation in string transcoding to the merge queue.

Wasmtime GitHub notifications bot (Apr 09 2026 at 21:23):

alexcrichton merged PR #13026.

Wasmtime GitHub notifications bot (Apr 09 2026 at 21:23):

alexcrichton removed PR #13026 Add missing realloc validation in string transcoding from the merge queue.

Last updated: Apr 13 2026 at 00:25 UTC