Enhance security guidelines for identifying vulnerabilities

It incudes a tired-support-list
Update note on WAMR_BUILD_LIBC_UVWASI for Windows (#4583 )
2025-09-05 09:21:42 +00:00 · 2025-09-01 02:58:15 +00:00 · 2025-08-27 13:57:30 +08:00
2 changed files with 8 additions and 7 deletions
--- a/doc/build_wamr.md
+++ b/doc/build_wamr.md
@ -59,7 +59,7 @@ cmake -DWAMR_BUILD_PLATFORM=linux -DWAMR_BUILD_TARGET=ARM

 - **WAMR_BUILD_LIBC_UVWASI**=1/0 (Experiment), build the [WASI](https://github.com/WebAssembly/WASI) libc subset for WASM app based on [uvwasi](https://github.com/nodejs/uvwasi) implementation, default to disable if not set

-> Note: for platform which doesn't support **WAMR_BUILD_LIBC_WASI**, e.g. Windows, developer can try using **WAMR_BUILD_LIBC_UVWASI**.
+> Note: WAMR doesn't support a safe sandbox on all platforms. For platforms that do not support **WAMR_BUILD_LIBC_WASI**, e.g. Windows, developers can try using an unsafe uvwasi-based WASI implementation by using **WAMR_BUILD_LIBC_UVWASI**.

 ### **Enable Multi-Module feature**

--- a/doc/tired_support.md
+++ b/doc/tired_support.md
@ -99,6 +99,7 @@
 | WASI threads                      | B    | Off     |
 | WASI-NN (neural network APIs)     | B    | Off     |
 | Debug AOT                         | C    | Off     |
+| Debug Interpreter                 | B    | Off     |

 ---

@ -118,10 +119,10 @@
 | WAMR_BUILD_BULK_MEMORY                      | A     | 1       |           |
 | WAMR_BUILD_COPY_CALL_STACK                  | B     | ND      |           |
 | WAMR_BUILD_CUSTOM_NAME_SECTION              | B     | ND      |           |
-| WAMR_BUILD_DEBUG_AOT                        | B     | ND      |           |
+| WAMR_BUILD_DEBUG_AOT                        | C     | ND      |           |
 | WAMR_BUILD_DEBUG_INTERP                     | B     | ND      |           |
 | WAMR_BUILD_DUMP_CALL_STACK                  | B     | ND      |           |
-| WAMR_BUILD_DYNAMIC_AOT_DEBUG                | B     | ND      |           |
+| WAMR_BUILD_DYNAMIC_AOT_DEBUG                | C     | ND      |           |
 | WAMR_BUILD_EXCE_HANDLING                    | C     | 0       |           |
 | WAMR_BUILD_EXTENDED_CONST_EXPR              | A     | 0       |           |
 | WAMR_BUILD_FAST_INTERP                      | A     | ND      | 1         |
@ -140,10 +141,10 @@
 | WAMR_BUILD_LIBC_EMCC                        | C     | ND      |           |
 | WAMR_BUILD_LIBC_UVWASI                      | C     | ND      |           |
 | WAMR_BUILD_LIBC_WASI                        | A     | ND      | 1         |
-| WAMR_BUILD_LIB_PTHREAD                      | A     | ND      |           |
-| WAMR_BUILD_LIB_PTHREAD_SEMAPHORE            | A     | ND      |           |
+| WAMR_BUILD_LIB_PTHREAD                      | B     | ND      |           |
+| WAMR_BUILD_LIB_PTHREAD_SEMAPHORE            | B     | ND      |           |
 | WAMR_BUILD_LIB_RATS                         | C     | ND      |           |
-| WAMR_BUILD_LIB_WASI_THREADS                 | A     | ND      |           |
+| WAMR_BUILD_LIB_WASI_THREADS                 | B     | ND      |           |
 | WAMR_BUILD_LINUX_PERF                       | B     | ND      |           |
 | WAMR_BUILD_LOAD_CUSTOM_SECTION              | A     | ND      |           |
 | WAMR_BUILD_MEMORY64                         | A     | 0       |           |
@ -192,5 +193,5 @@

 [^3]: _ND_ represents _not defined_
 [^4]: active if `WAMR_BUILD_AOT` is 1
-[^5]: active if `WAMR_BUILD_FAST_JIT` or `WARM_BUILD_JIT1` is 1
+[^5]: active if `WAMR_BUILD_FAST_JIT` or `WAMR_BUILD_JIT1` is 1
 [^6]: active if `WAMR_BUILD_AOT` or `WAMR_BUILD_JIT` is 1
Author	SHA1	Message	Date
liang.he@intel.com	d1e678c621	Enhance security guidelines for identifying vulnerabilities It incudes a tired-support-list	2025-09-01 02:58:15 +00:00
Oscar Spencer	6c3f6fd017	Update note on WAMR_BUILD_LIBC_UVWASI for Windows (#4583 )	2025-08-27 13:57:30 +08:00