[wasm] Enforce memory and table limits during instantiation.

test/mjsunit/wasm/indirect-tables.js

 // Copyright 2016 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --expose-wasm
 
 load("test/mjsunit/wasm/wasm-constants.js");
 load("test/mjsunit/wasm/wasm-module-builder.js");
 
 function AddFunctions(builder) {
@@ skipping 181 matching lines @@
       kExprGetLocal, 1,   // --
       kExprCallIndirect, 0, kTableZero])  // --
     .exportAs("main");
 
   let m2 = new WebAssembly.Module(builder.toBuffer());
 
   // Run 5 trials at different table bases.
   for (let i = 0; i < 5; i++) {
     print(" base = " + i);
     let table = new WebAssembly.Table({element: "anyfunc",
-                                       initial: kTableSize});
+                                       initial: kTableSize,
+                                       maximum: kTableSize});
     assertEquals(10, table.length);
     let i2 = new WebAssembly.Instance(m2, {q: {base: i, table: table,
                                                js_div: js_div}});
     let main = i2.exports.main;
 
     for (var j = 0; j < i; j++) {
       assertThrows(() => main(0, j));
       assertSame(null, table.get(j));
     }
 
@@ skipping 22 matching lines @@
       if (j < kTableSize) assertSame(null, table.get(j));
     }
   }
 })();
 
 
 (function CumulativeTest() {
   print("CumulativeTest...");
 
   let kTableSize = 10;
-  let table = new WebAssembly.Table({element: "anyfunc", initial: 10});
+  let table = new WebAssembly.Table({element: "anyfunc", initial: kTableSize, maximum: kTableSize});

[rossberg, 2017/01/17 14:22:06]

Nit: line length

[titzer, 2017/01/17 16:47:18]

Done.

 
   var builder = new WasmModuleBuilder();
 
   builder.addImportedTable("x", "table", kTableSize, kTableSize);
   let g = builder.addImportedGlobal("x", "base", kWasmI32);
   let sig_index = builder.addType(kSig_i_v);
   builder.addFunction("g", sig_index)
     .addBody([
       kExprGetGlobal, g
     ]);
@@ skipping 194 matching lines @@
   let new_func = instance.exports.wasm;
 
   for (var j = 10; j < 20; j++) {
     table.set(j, new_func);
     let func = table.get(j);
     assertEquals("function", typeof func);
     assertSame(new_func, table.get(j));
   }
   assertThrows(() => table.grow(11));
 })();
+
+
+(function TestImportTooLarge() {
+  print("TestImportTooLarge...");
+  let builder = new WasmModuleBuilder();
+  builder.addImportedTable("t", "t", 1, 2);
+
+  // initial size is too large
+  assertThrows(() => builder.instantiate({t: {t: new WebAssembly.Table(
+    {element: "anyfunc", initial: 3, maximum: 3})}}));
+
+  // maximum size is too large
+  assertThrows(() => builder.instantiate({t: {t: new WebAssembly.Table(
+    {element: "anyfunc", initial: 1, maximum: 4})}}));
+
+  // no maximum
+  assertThrows(() => builder.instantiate({t: {t: new WebAssembly.Table(
+    {element: "anyfunc", initial: 1})}}));
+})();