diff options
| -rw-r--r-- | src/binary-reader.cc | 2 | ||||
| -rw-r--r-- | test/binary/bad-brtable-too-big.txt | 17 |
2 files changed, 18 insertions, 1 deletions
diff --git a/src/binary-reader.cc b/src/binary-reader.cc index 86bb07bc..9a09560e 100644 --- a/src/binary-reader.cc +++ b/src/binary-reader.cc @@ -656,7 +656,7 @@ Result BinaryReader::ReadFunctionBody(Offset end_offset) { case Opcode::BrTable: { Index num_targets; - CHECK_RESULT(ReadIndex(&num_targets, "br_table target count")); + CHECK_RESULT(ReadCount(&num_targets, "br_table target count")); target_depths_.resize(num_targets); for (Index i = 0; i < num_targets; ++i) { diff --git a/test/binary/bad-brtable-too-big.txt b/test/binary/bad-brtable-too-big.txt new file mode 100644 index 00000000..e3bb5c2e --- /dev/null +++ b/test/binary/bad-brtable-too-big.txt @@ -0,0 +1,17 @@ +;;; TOOL: run-gen-wasm-bad +magic +version +section(TYPE) { count[1] function params[0] results[0] } +section(FUNCTION) { count[1] type[0] } +section(CODE) { + count[1] + func { + locals[0] + br_table leb_i32(0xffffffff) ;; invalid target count + 0 0 0 ;; first few targets + } +} +(;; STDERR ;;; +000001d: error: invalid br_table target count 4294967295, only 4 bytes left in section +000001d: error: invalid br_table target count 4294967295, only 4 bytes left in section +;;; STDERR ;;) |