Enhance security guidelines for identifying vulnerabilities

It incudes a tired-support-list

doc/build_wamr.md

@@ -59,7 +59,7 @@ cmake -DWAMR_BUILD_PLATFORM=linux -DWAMR_BUILD_TARGET=ARM
 
 - **WAMR_BUILD_LIBC_UVWASI**=1/0 (Experiment), build the [WASI](https://github.com/WebAssembly/WASI) libc subset for WASM app based on [uvwasi](https://github.com/nodejs/uvwasi) implementation, default to disable if not set
 
-> Note: for platform which doesn't support **WAMR_BUILD_LIBC_WASI**, e.g. Windows, developer can try using **WAMR_BUILD_LIBC_UVWASI**.
+> Note: WAMR doesn't support a safe sandbox on all platforms. For platforms that do not support **WAMR_BUILD_LIBC_WASI**, e.g. Windows, developers can try using an unsafe uvwasi-based WASI implementation by using **WAMR_BUILD_LIBC_UVWASI**.
 
 ### **Enable Multi-Module feature**
 

doc/tired_support.md

@@ -99,6 +99,7 @@
 | WASI threads                      | B    | Off     |
 | WASI-NN (neural network APIs)     | B    | Off     |
 | Debug AOT                         | C    | Off     |
+| Debug Interpreter                 | B    | Off     |
 
 ---
 
@@ -118,10 +119,10 @@
 | WAMR_BUILD_BULK_MEMORY                      | A     | 1       |           |
 | WAMR_BUILD_COPY_CALL_STACK                  | B     | ND      |           |
 | WAMR_BUILD_CUSTOM_NAME_SECTION              | B     | ND      |           |
-| WAMR_BUILD_DEBUG_AOT                        | B     | ND      |           |
+| WAMR_BUILD_DEBUG_AOT                        | C     | ND      |           |
 | WAMR_BUILD_DEBUG_INTERP                     | B     | ND      |           |
 | WAMR_BUILD_DUMP_CALL_STACK                  | B     | ND      |           |
-| WAMR_BUILD_DYNAMIC_AOT_DEBUG                | B     | ND      |           |
+| WAMR_BUILD_DYNAMIC_AOT_DEBUG                | C     | ND      |           |
 | WAMR_BUILD_EXCE_HANDLING                    | C     | 0       |           |
 | WAMR_BUILD_EXTENDED_CONST_EXPR              | A     | 0       |           |
 | WAMR_BUILD_FAST_INTERP                      | A     | ND      | 1         |
@@ -140,10 +141,10 @@
 | WAMR_BUILD_LIBC_EMCC                        | C     | ND      |           |
 | WAMR_BUILD_LIBC_UVWASI                      | C     | ND      |           |
 | WAMR_BUILD_LIBC_WASI                        | A     | ND      | 1         |
-| WAMR_BUILD_LIB_PTHREAD                      | A     | ND      |           |
+| WAMR_BUILD_LIB_PTHREAD                      | B     | ND      |           |
-| WAMR_BUILD_LIB_PTHREAD_SEMAPHORE            | A     | ND      |           |
+| WAMR_BUILD_LIB_PTHREAD_SEMAPHORE            | B     | ND      |           |
 | WAMR_BUILD_LIB_RATS                         | C     | ND      |           |
-| WAMR_BUILD_LIB_WASI_THREADS                 | A     | ND      |           |
+| WAMR_BUILD_LIB_WASI_THREADS                 | B     | ND      |           |
 | WAMR_BUILD_LINUX_PERF                       | B     | ND      |           |
 | WAMR_BUILD_LOAD_CUSTOM_SECTION              | A     | ND      |           |
 | WAMR_BUILD_MEMORY64                         | A     | 0       |           |
@@ -192,5 +193,5 @@
 
 [^3]: _ND_ represents _not defined_
 [^4]: active if `WAMR_BUILD_AOT` is 1
-[^5]: active if `WAMR_BUILD_FAST_JIT` or `WARM_BUILD_JIT1` is 1
+[^5]: active if `WAMR_BUILD_FAST_JIT` or `WAMR_BUILD_JIT1` is 1
 [^6]: active if `WAMR_BUILD_AOT` or `WAMR_BUILD_JIT` is 1