Description[wasm] Fix br_table in the wasm interpreter to use varuint32.
The wasm interpreter crashed because it interpreted the table of
br_table as a table of uint8, but according to the spec it is a table of
varint32. Therefore the wasm interpreter misinterpreted 0x80 0x00 as 128
and not as 0, which caused a crash.
R=tizer@chromium.org
BUG=chromium:660262
TEST=cctest/test-run-wasm/RunWasmInterpreted_Regression_660262
Committed: https://crrev.com/a3b77d560e245ee04cdc254e033ff29e55a7cf86
Cr-Commit-Position: refs/heads/master@{#40708}
Patch Set 1 #Patch Set 2 : signed unsigned mismatch #Patch Set 3 : Remove unused variable #
Messages
Total messages: 20 (15 generated)
|