Bug 254760

Summary: [Wasm-GC] Enforce operand limit for `array.new_canon_fixed`
Product: WebKit Reporter: Tim Chevalier <tjc>
Component: WebAssemblyAssignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: d_degazio, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Local Build   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 247394    

Description Tim Chevalier 2023-03-30 12:07:32 PDT 
The spec, https://github.com/WebAssembly/gc/pull/360/files , was recently updated to specify that the maximum number of operands to `array.new_fixed` is 10000 and the implementation should throw a `RuntimeError` if that is exceeded. In the current implementation (about to land; see https://bugs.webkit.org/show_bug.cgi?id=252350 ), no limit is enforced. This should be easy to change in the parser, but unfortunately I'm out of time to work on this.
Comment 1 Radar WebKit Bug Importer 2023-04-06 12:08:16 PDT 
<rdar://problem/107720913>
Comment 2 David Degazio 2024-07-24 15:07:17 PDT 
Keith seems to have resolved this in https://bugs.webkit.org/show_bug.cgi?id=256959.

*** This bug has been marked as a duplicate of bug 256959 ***