From 65bf04e98643f9cbccd6cdc5b8e6d82029c52c38 Mon Sep 17 00:00:00 2001 From: "liang.he" Date: Wed, 26 Jun 2024 11:19:05 +0800 Subject: [PATCH] aot loader: Check import global value type before using (#3571) Fix issue reported by Oss-fuzz test (#69798). --- core/iwasm/aot/aot_loader.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/core/iwasm/aot/aot_loader.c b/core/iwasm/aot/aot_loader.c index 52a97620e..11a67dc69 100644 --- a/core/iwasm/aot/aot_loader.c +++ b/core/iwasm/aot/aot_loader.c @@ -2097,6 +2097,10 @@ load_import_globals(const uint8 **p_buf, const uint8 *buf_end, read_string(buf, buf_end, import_globals[i].module_name); read_string(buf, buf_end, import_globals[i].global_name); + if (!is_valid_value_type(import_globals[i].type.val_type)) { + return false; + } + #if WASM_ENABLE_LIBC_BUILTIN != 0 if (wasm_native_lookup_libc_builtin_global( import_globals[i].module_name, import_globals[i].global_name,