Stream: git-wasmtime

Topic: wasmtime / PR #14512 Fix sandboxing in `read_link` on Win...


view this post on Zulip Wasmtime GitHub notifications bot (Oct 03 2026 at 01:25):

alexcrichton opened PR #14512 from alexcrichton:fix-windows-read-link to bytecodealliance:main:

Refactoring in #14370 erroneously forgot to use open_parent to actually sandbox the read_link function, and additionally even had it used that function it would not have passed tests on Windows. This commit adds a test that read_link can't escape the sandbox and it additionally restores the old implementation, with the upstream winx code inline.

<!--
Please make sure you include the following information:

Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.html

Please review the Bytecode Alliance's AI tool usage policy at
https://github.com/bytecodealliance/governance/blob/main/AI_TOOL_POLICY.md

Please ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->

view this post on Zulip Wasmtime GitHub notifications bot (Oct 03 2026 at 01:25):

alexcrichton requested dicej for a review on PR #14512.

view this post on Zulip Wasmtime GitHub notifications bot (Oct 03 2026 at 01:25):

alexcrichton requested wasmtime-wasi-reviewers for a review on PR #14512.

view this post on Zulip Wasmtime GitHub notifications bot (Oct 03 2026 at 04:49):

github-actions[bot] added the label wasi on PR #14512.

view this post on Zulip Wasmtime GitHub notifications bot (Oct 05 2026 at 14:26):

:thumbs_up: dicej submitted PR review.

view this post on Zulip Wasmtime GitHub notifications bot (Oct 05 2026 at 14:27):

alexcrichton added PR #14512 Fix sandboxing in read_link on Windows to the merge queue.

view this post on Zulip Wasmtime GitHub notifications bot (Oct 05 2026 at 14:55):

github-merge-queue[bot] removed PR #14512 Fix sandboxing in read_link on Windows from the merge queue.

view this post on Zulip Wasmtime GitHub notifications bot (Oct 05 2026 at 14:57):

alexcrichton added PR #14512 Fix sandboxing in read_link on Windows to the merge queue.

view this post on Zulip Wasmtime GitHub notifications bot (Oct 05 2026 at 15:37):

:check: alexcrichton merged PR #14512.

view this post on Zulip Wasmtime GitHub notifications bot (Oct 05 2026 at 15:37):

alexcrichton removed PR #14512 Fix sandboxing in read_link on Windows from the merge queue.


Last updated: Oct 11 2026 at 04:10 UTC