alexcrichton opened PR #14733 from alexcrichton:stream-type-mismatch to bytecodealliance:main:
Previously,
UntypedWriteBuffer::get_mutpanicked on type mismatch, which created a hazard for embedders which might receive their own stream back from the guest using a different Rust-level item type despite having the same component-model-level item type. Now we return an error instead.Part of https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-63h4-6cx9-pjfj
<!--
Please make sure you include the following information:
If this work has been discussed elsewhere, please include a link to that
conversation. If it was discussed in an issue, just mention "issue #...".Explain why this change is needed. If the details are in an issue already,
this can be brief.Our development process is documented in the Wasmtime book:
https://docs.wasmtime.dev/contributing-development-process.htmlPlease review the Bytecode Alliance's AI tool usage policy at
https://github.com/bytecodealliance/governance/blob/main/AI_TOOL_POLICY.mdPlease ensure all communication follows the code of conduct:
https://github.com/bytecodealliance/wasmtime/blob/main/CODE_OF_CONDUCT.md
-->
alexcrichton requested cfallin for a review on PR #14733.
alexcrichton requested wasmtime-core-reviewers for a review on PR #14733.
alexcrichton updated PR #14733.
:thumbs_up: cfallin submitted PR review.
cfallin commented on PR #14733:
(merge conflict at the moment)
alexcrichton updated PR #14733.
alexcrichton has enabled auto merge for PR #14733.
alexcrichton updated PR #14733.
alexcrichton added PR #14733 return error instead of panicking on host stream type mismatch to the merge queue.
github-merge-queue[bot] removed PR #14733 return error instead of panicking on host stream type mismatch from the merge queue.
alexcrichton updated PR #14733.
alexcrichton has enabled auto merge for PR #14733.
alexcrichton added PR #14733 return error instead of panicking on host stream type mismatch to the merge queue.
:check: alexcrichton merged PR #14733.
alexcrichton removed PR #14733 return error instead of panicking on host stream type mismatch from the merge queue.
Last updated: Oct 31 2026 at 23:03 UTC