2674 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
dependabot[bot]	3185b51d71	build(deps): Bump github/codeql-action from 4.33.0 to 4.34.1 ... Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.33.0 to 4.34.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v4.33.0...v4.34.1) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.34.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-23 10:52:07 +00:00
Vyacheslav Chigrin	8d069c230c	Fix stack overflow detection during ASAN build. (#4642) ... See discussion in issue #4638.	2026-03-23 09:49:42 +08:00
Zhenwei Jin	bdb58e042b	Fix LLVM ORC JIT relocation failure caused by InternalLinkage stack_sizes (#4880) ... Signed-off-by: zhenweijin <zhenwei.jin@intel.com>	2026-03-23 09:44:50 +08:00
Stephen Berard	fcec30e933	Fix/branch hint parse issue (#4878) ... * test,security: added example code for invalid branch hints * security: fixes parsing issue for invalid branch_hint sections * fix: improve comments and logging in branch hint handling * feat: add support for branch hints in build configuration and documentation * test: add regression tests for invalid branch hints handling ```bash $ pwd /workspaces/wasm-micro-runtime/tests/regression/ba-issues $ ./run.py -i 980002,980003 ``` --------- Signed-off-by: Stephen Berard <stephen.berard@outlook.com> Co-authored-by: liang.he@intel.com <liang.he@intel.com>	2026-03-20 10:28:25 +08:00
TianlongLiang	14d84eca0b	fix a wamrc compile warning, and enable system include flag for third-party libraries to suppresses corresponding compile warnings (#4875)	2026-03-19 09:08:41 +08:00
TianlongLiang	c3a78cd159	fix sign-compare warnings (#4876)	2026-03-17 22:27:17 -07:00
TianlongLiang	c3dda4a7d6	Fix compile error when compiler don't support '__has_feature' (#4874)	2026-03-17 16:06:45 +08:00
liang.he	87a811459f	Update the GC tiered level from B to C. (#4817) ... Several known limitations have been exposed, and a few might impact the estimation when trying to integrate that feature into a product.	2026-03-17 13:04:25 +08:00
James Ring	c9815ef2c7	fix msan errors (#3724) ... Mark argv as initialized so that msan doesn't complain	2026-03-16 19:39:08 -07:00
dependabot[bot]	6370c9e61e	build(deps): Bump github/codeql-action from 4.32.6 to 4.33.0 (#4873) ... Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.6 to 4.33.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v4.32.6...v4.33.0) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.33.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-16 15:57:36 -07:00
Zhenwei Jin	db246776ec	fix: use copy of input for wasm_runtime_load to fix overwrites-const-input in fuzz (#4869) ... Signed-off-by: zhenweijin <zhenwei.jin@intel.com>	2026-03-16 16:25:00 +08:00
Vyacheslav Chigrin	26aa924acd	Move exception lock to ModuleInstance data. (#4772) ... * Move exception lock to ModuleInstance data. This lock acquired on each native function call. This cause performance impact on programs, containing many native function calls, and running in multithreaded environment. Update AOT_CURRENT_VERSION constant.	2026-03-16 16:22:07 +08:00
liang.he	46472ee6c8	Enable Unit test on Mac(m1) (#4841) ... - detecting host arch. and platform instead of hard-coding - fix few compilation errors because of stricter rules involve by appleclang - refactor: modernize wasm-apps CMakeLists.txt to target-specific options and install commands - refactor: modernize memory64 CMakeLists.txt to target-specific options and install commands - Update running-modes CMakeLists.txt: enable AOT and INTERP; JIT/FAST_JIT gating for x86_64. Fix typo in JIT section. - fix: replace deprecated get_binary_path function with get_test_binary_dir for improved portability - fix: adjust size_level test cases for aarch64 architecture compatibility	2026-03-12 15:48:41 -07:00
liang.he	9d1dc3e4d2	Fix: Fix null pointer dereference in wasm_c_api.c (#4863)	2026-03-09 19:10:35 -07:00
liang.he	f159cc56ac	Fix: initialize record_frame in aot_copy_callstack (#4861)	2026-03-09 18:45:24 -07:00
liang.he	9e4aa9c850	fuzzing: reject non-wasm files quickly and execute aot after compilation (#4780) ... * fix: disable unsigned integer overflow sanitization in build configurations FYI: from https://clang.llvm.org/docs/UndefinedBehaviorSanitizer.html `-fsanitize=unsigned-integer-overflow`: Unsigned integer overflow, where the result of an unsigned integer computation cannot be represented in its type. Unlike signed integer overflow, this is not undefined behavior, but it is often unintentional. This sanitizer does not check for lossy implicit conversions performed before such a computation. It brings a more common question: which is better, pre-additional-check or post-additional-check to fix a potential unsigned integer overflow? A pre-additional-check involves using a check to prevent integer overflow from the very beginning. A post-additional-check involves using a check after addition to see if there is an overflow. In this project, post-additional-checking is widely used. let's follow the routine. for performance sensitive logic, use __builtin_add_overflow etc. provide something like 9a5622791e/lib/platform.h (L176-L191) and encourage the use of them. ref. https://github.com/bytecodealliance/wasm-micro-runtime/pull/4549#issuecomment-3218687294 * fix: update AOT compiler configuration and enhance error handling in fuzz tests	2026-03-09 18:24:43 -07:00
dependabot[bot]	46c341bc87	build(deps): Bump github/codeql-action from 4.32.5 to 4.32.6 (#4868) ... Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.5 to 4.32.6. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v4.32.5...v4.32.6) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-09 18:23:27 -07:00
Dan Kouba	d9091cca01	Fix mismatch of enum sizes between WASM and host (#4676) ... - refactor(wasi_types): deprecate enums in platform_wasi_types.h. - Use macros instead. Signed-off-by: Krisztian Szilvasi <34309983+kr-t@users.noreply.github.com> Signed-off-by: Dan Kouba <dan@atym.io>	2026-03-09 10:19:16 +08:00
Yi Liu	163a91b05a	Fix relocation addend sign extension on 32-bit platforms (#4846) ... * Fix relocation addend sign extension on 32-bit platforms When loading relocations on 32-bit platforms, the addend is read as uint32 and zero-extended to uint64, which corrupts negative addends. For example, -4 (0xFFFFFFFC) becomes 4294967292 instead of remaining -4. Use int32 with sign extension to int64, matching the Windows code path which already handles this correctly.	2026-03-09 10:09:28 +08:00
Yi Liu	539bebed9c	Fix missing IS_INVALID_TAGINDEX check in RETHROW handler (#4837) ... * Fix RETHROW handler missing IS_INVALID_TAGINDEX check Add validation for exception_tag_index in the RETHROW opcode handler to prevent out-of-bounds access to module->module->tags[] when the tag index is INVALID_TAGINDEX (0xFFFFFFFF). This matches the existing check in the THROW handler. When CATCH_ALL catches a cross-module exception with an unknown tag, it pushes INVALID_TAGINDEX onto the stack. Without this check, a subsequent RETHROW would access tags[0xFFFFFFFF]. * Fix incorrect code section byte counts in exception handling test The hand-crafted WASM binary in load_module_with_exception_handling had an off-by-one in the code section: body size was declared as 7 but the actual body (local count + try/catch_all/end/end) is only 6 bytes. This caused the WASM loader to fail with "unexpected end" when it tried to read past the available bytes. Fix the body size from 7 to 6 and the code section size from 9 to 8.	2026-03-09 10:04:18 +08:00
Ze Sheng	fe5276a155	fuzz: remove unnecessary internal headers from wasm_mutator_fuzz (#4865) ... Remove `wasm_runtime_common.h` and `bh_read_file.h` includes from the wasm_mutator_fuzz harness. All runtime APIs used by this fuzzer (wasm_runtime_init, wasm_runtime_load, wasm_runtime_instantiate, wasm_runtime_call_wasm_a, wasm_runtime_get_export_count, etc.) are declared in the public `wasm_export.h` header. - `wasm_runtime_common.h` (core/iwasm/common/) is an internal implementation header not intended for external use. - `bh_read_file.h` (core/shared/utils/uncommon/) is an internal utility header whose functions are never called in this fuzzer. Verified that the modified harness compiles and runs correctly for all three build targets (classic-interp, fast-interp, llvm-jit) with identical code coverage.	2026-03-06 21:30:29 +08:00
liang.he	0ec91cee50	Refactoring enclave sample (#4828) ... * refactor(ci): production-ready SGX install script with logging and idempotency - Add comprehensive logging infrastructure to /tmp/install_sgx.log - Implement idempotency checks for SGX packages and SDK - Modularize into functions: platform_detect, install_packages, validate_installation, cleanup - Add strict error handling with set -euo pipefail and error traps - Replace FIXME with proper environment sourcing documentation - Add dynamic platform detection for Ubuntu 20+/Debian 11/12 - Ensure minimal console output (final status only) with all details in log - Verify all acceptance scenarios pass with comprehensive testing * Refactoring enclave-sample aligning sgx BKM. - Buffer interface redesign to separate input and output - prevent untrusted pointer - add module and instance handle release functions for better resource management	2026-03-06 21:19:41 +08:00
Zhenwei Jin	723398263f	fix(ems): avoid abort in gc_migrate when heap metadata is corrupted (#4862) ... Signed-off-by: zhenweijin <zhenwei.jin@intel.com>	2026-03-05 09:13:28 +08:00
Krisztian	fa7c2d37f4	clean(zephyr): reduce warnings on zephyr platform (#4860) ... * clean(warnings): fix [-Wsign-compare] in zephyr_file buf_len is a long unsigned int, while bytes_* can be negative due to error values. We don't need to check bytes_* for negative value, as it was done during read/write op. * clean(warnings): fix "MIN" redefined warning Some platforms, like Zephyr, already define MIN and definition in WAMR cause `warning: "MIN" redefined` warning. Check if it was defined before, and do not redefine it. Signed-off-by: Krisztian Szilvasi <34309983+kr-t@users.noreply.github.com>	2026-03-05 08:58:04 +08:00
Yi Liu	595dcd564f	Fix off-by-one in aot_alloc_tiny_frame overflow check (#4845) ... * Fix off-by-one in aot_alloc_tiny_frame overflow check The boundary check in aot_alloc_tiny_frame only verifies that new_frame itself doesn't exceed top_boundary, but doesn't account for the sizeof(AOTTinyFrame) bytes that are about to be written. When new_frame equals top_boundary exactly, the check passes but the subsequent write to new_frame->func_index goes past the boundary. This matches the correct pattern used in aot_alloc_frame (line 4086) which includes the frame size.	2026-03-03 13:48:42 +08:00
liang.he	01f4ff4cdb	workaround: prevent usage of anyref in struct fields and array elements (#4819) ... Disable corresponding cases in spec test	2026-03-03 13:05:44 +08:00
liang.he	e325a5afff	fix: update shared_heap_test to use os_getpagesize for memory size calculations (#4852)	2026-03-03 13:04:58 +08:00
liang.he	968fbbb4c9	Fix a compilation error by clang-17 (#4812) ... * Fix a compilation error by clang-17 ``` variable-sized object may not be initialized ``` clang-17 is the default version on MacOS Tahoe(26.2) on AppleM1	2026-03-03 13:04:47 +08:00
Yi Liu	3d707f9173	Add bounds checking for output tensor buffer in wasi-nn llama.cpp (#4847) ... * Add bounds checking for output tensor buffer in wasi-nn llama.cpp The get_output function copies LLM output into output_tensor->buf without checking against output_tensor->size, allowing writes past the buffer when the model generates output longer than the caller-provided buffer. Add size checks for both the metadata path and the token output loop. Instead of silently truncating output when the buffer is too small, return the too_large error with a diagnostic message. This makes the behavior consistent with the OpenVINO backend's get_output and allows callers to distinguish between successful completion and insufficient buffer size.	2026-03-02 14:52:16 -08:00
dependabot[bot]	aea4da0df4	build(deps): Bump github/codeql-action from 4.32.4 to 4.32.5 (#4858) ... Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.4 to 4.32.5. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v4.32.4...v4.32.5) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-02 14:50:38 -08:00
dependabot[bot]	c83408ade2	build(deps): Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#4859) ... Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-03-02 14:50:17 -08:00
kogum4	dcf137e961	windows: fix vectored exception handler lifecycle for repeated thread env init/destroy (#4842) ... * Fix Windows VEH registration/removal lifecycle * Remove redundant OS_THREAD_MUTEX_INITIALIZER guards Since the code is already inside #ifdef BH_PLATFORM_WINDOWS, the macro is always defined. Use NULL directly for clarity. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-27 08:20:44 +08:00
Yi Liu	6a504e5ade	Fix sock_connect using wrong rights constant (#4849) ... wasi_ssp_sock_connect checks __WASI_RIGHT_SOCK_BIND instead of __WASI_RIGHT_SOCK_CONNECT when validating file descriptor rights. This was a copy-paste error from wasi_ssp_sock_bind. As a result, connect operations check the wrong capability.	2026-02-27 08:20:10 +08:00
Taylor C. Richberger	9143b1a2e3	fix: WASM_API_EXTERN should get visibility("default") on gcc and clang (#4851) ... This allows the wasm_c_api to work in shared libraries on non-Windows platforms.	2026-02-27 08:18:44 +08:00
Krisztian	ea063cdf5b	Improve zephyr's networking code (#4839) ... * fix: zephyr sockets: fix get/set sockopt usages. In multiple places, setsockopt is used when getsockopt shall be used, and vice-versa. Additionally, pointer isn't checked correctly in two places, this commit fixes those as well. Per man(7), most socket-level options utilize an int argument for optval. Use those for ttl. Signed-off-by: Krisztian Szilvasi <34309983+kr-t@users.noreply.github.com> * feat: zephyr sockets: implement missing networking functions Some of the optvals are implemented by zephyr, some are missing. Call the appropriate function and let set the retval based on that. Signed-off-by: Krisztian Szilvasi <34309983+kr-t@users.noreply.github.com>	2026-02-25 16:40:57 -08:00
dependabot[bot]	8bf91c1c56	build(deps): Bump github/codeql-action from 4.32.3 to 4.32.4 (#4840) ... Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.3 to 4.32.4. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v4.32.3...v4.32.4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-02-25 16:39:57 -08:00
Robert Ismo	041311b772	Fix typo in README from WARM to WAMR (#4843) ... Guessing this was supposed to WAMR not WARM	2026-02-25 16:39:25 -08:00
dependabot[bot]	c46b10dcbc	build(deps): Bump github/codeql-action from 4.32.2 to 4.32.3 (#4838) ... Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.2 to 4.32.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v4.32.2...v4.32.3) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-02-23 12:13:07 +08:00
liang.he	0c9fe614ae	Improve shared_heap test cases. (#4834) ... Aligned allocation size can be significantly greater than the original size, and page size varies across platforms. > macOS on M1 (Apple Silicon) uses a memory page size of 16,384 bytes (16 KB). > This differs from the traditional 4 KB page size used on Intel Macs and many > other ARM64 systems, and is designed to improve performance by reducing page > table overhead and allowing for better cache utilization.	2026-02-15 12:45:48 +08:00
Yi Liu	6db91d7e24	Fix off-by-one in AOT func_index bounds checks (#4836) ... The AOT relocation loader validates func_index using: (func_index = (uint32)atoi(p)) > module->func_count Since func_ptrs is an array of func_count elements (indices 0 to func_count-1), func_index == func_count is out of bounds. The check must use >= instead of > to reject this boundary case. Fix all 4 affected locations in aot_loader.c.	2026-02-13 19:21:54 +08:00
dependabot[bot]	e71bf6e83e	build(deps): Bump github/codeql-action from 4.32.0 to 4.32.2 (#4831) ... Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.0 to 4.32.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v4.32.0...v4.32.2) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-02-10 16:09:10 +08:00
Zhenwei Jin	e4bdddadd1	align quick_aot_entry invoke_* signatures with call sites (#4829) ... Signed-off-by: zhenweijin <zhenwei.jin@intel.com>	2026-02-09 13:47:32 +08:00
vkensou	2a337c4710	Fix compilation error when MSVC is not set to C11 standard (#4588) ... * Fix compilation error when MSVC is not set to C11 standard	2026-02-06 09:20:37 +08:00
Krisztian	c69c7e2261	Reduce warnings relevant to Zephyr platform (#4658) ... This PR is intended to remove following warnings, when build in Zephyr application: wasm-micro-runtime/core/shared/platform/zephyr/platform_internal.h:293: warning: "CLOCK_MONOTONIC" redefined 293 | #define CLOCK_MONOTONIC 4 wasm-micro-runtime/core/shared/platform/zephyr/zephyr_file.c: In function 'zephyr_fs_alloc_obj': wasm-micro-runtime/core/shared/platform/zephyr/zephyr_file.c:123:25: warning: implicit declaration of function 'bh_strdup' [-Wimplicit-function-declaration] 123 | ptr->path = bh_strdup(path); | ^~~~~~~~~ wasm-micro-runtime/core/shared/platform/zephyr/zephyr_file.c:123:23: warning: assignment to 'char *' from 'int' makes pointer from integer without a cast [-Wint-conversion] 123 | ptr->path = bh_strdup(path); | ^ wasm-micro-runtime/core/shared/platform/zephyr/zephyr_file.c: In function 'os_renameat': wasm-micro-runtime/core/shared/platform/zephyr/zephyr_file.c:853:35: warning: initialization of 'char *' from 'int' makes pointer from integer without a cast [-Wint-conversion] 853 | char *new_path_copy = bh_strdup(new_path); | ^~~~~~~~~ [45/462] Building C object CMakeFiles/app.dir/wasm-micro-runtime/core/iwasm/libraries/libc-wasi/sandboxed-system-primitives/src/posix.c.obj wasm-micro-runtime/core/iwasm/libraries/libc-wasi/sandboxed-system-primitives/src/posix.c: In function 'wasmtime_ssp_poll_oneoff': wasm-micro-runtime/core/iwasm/libraries/libc-wasi/sandboxed-system-primitives/src/posix.c:2216:42: warning: initialization of 'os_file_handle' {aka 'struct zephyr_handle *'} from 'int' makes pointer from integer without a cast [-Wint-conversion] 2216 | os_file_handle tfd = fos[i]->file_handle->fd; | ^~~ wasm-micro-runtime/core/iwasm/libraries/libc-wasi/sandboxed-system-primitives/src/posix.c:2222:31: warning: initialization of 'int' from 'os_file_handle' {aka 'struct zephyr_handle *'} makes integer from pointer without a cast [-Wint-conversion] 2222 | .fd = tfd, | ^~~ wasm-micro-runtime/core/iwasm/libraries/libc-wasi/sandboxed-system-primitives/src/posix.c:2222:31: note: (near initialization for '(anonymous).fd') --------- Signed-off-by: Krisztian Szilvasi <34309983+kr-t@users.noreply.github.com>	2026-02-06 09:13:06 +08:00
Alex	aeec8a7410	Fixed build of Go language bindings (#4825)	2026-02-06 08:56:18 +08:00
liang.he	f6fa6922de	disable the misc-no-recursion checker (#4821)	2026-02-06 08:45:31 +08:00
liang.he	753a348b1f	Fix a compilation error about calling os_atomic_cmpxchg (#4822) ... ``` /workspaces/wasm-micro-runtime/core/iwasm/aot/aot_runtime.c:4701:30: error: expected expression return os_atomic_cmpxchg(_Atomic(void *)ptr, &old_val, new_val); ^ /workspaces/wasm-micro-runtime/core/shared/utils/../platform/include/platform_api_extension.h:135:27: note: expanded from macro 'os_atomic_cmpxchg' ```	2026-02-03 13:56:59 +08:00
Zhenwei Jin	55699a72e8	ci: allow .clang-tidy and fix exception type in guidelines check (#4818) ... Signed-off-by: zhenweijin <zhenwei.jin@intel.com>	2026-02-03 07:08:38 +08:00
dependabot[bot]	f3c1c92963	build(deps): Bump github/codeql-action from 4.31.11 to 4.32.0 (#4823) ... Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.11 to 4.32.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v4.31.11...v4.32.0) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-02-03 07:07:30 +08:00
TianlongLiang	d7459e80e8	fix some typo in wamrc (#4807)	2026-01-28 15:59:11 +08:00