/* * Copyright (C) 2016 Apple Inc. All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * THIS SOFTWARE IS PROVIDED BY APPLE INC. ``AS IS'' AND ANY * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ #include "config.h" #include "WebAssemblyInstanceConstructor.h" #if ENABLE(WEBASSEMBLY) #include "FunctionPrototype.h" #include "JSCInlines.h" #include "JSModuleEnvironment.h" #include "JSModuleNamespaceObject.h" #include "JSWebAssemblyInstance.h" #include "JSWebAssemblyLinkError.h" #include "JSWebAssemblyMemory.h" #include "JSWebAssemblyModule.h" #include "WebAssemblyFunction.h" #include "WebAssemblyInstancePrototype.h" #include "WebAssemblyModuleRecord.h" #include "WebAssemblyInstanceConstructor.lut.h" namespace JSC { static const bool verbose = false; const ClassInfo WebAssemblyInstanceConstructor::s_info = { "Function", &Base::s_info, &constructorTableWebAssemblyInstance, CREATE_METHOD_TABLE(WebAssemblyInstanceConstructor) }; /* Source for WebAssemblyInstanceConstructor.lut.h @begin constructorTableWebAssemblyInstance @end */ static EncodedJSValue JSC_HOST_CALL constructJSWebAssemblyInstance(ExecState* exec) { auto& vm = exec->vm(); auto throwScope = DECLARE_THROW_SCOPE(vm); auto* globalObject = exec->lexicalGlobalObject(); // If moduleObject is not a WebAssembly.Module instance, a TypeError is thrown. JSWebAssemblyModule* jsModule = jsDynamicCast(vm, exec->argument(0)); if (!jsModule) return JSValue::encode(throwException(exec, throwScope, createTypeError(exec, ASCIILiteral("first argument to WebAssembly.Instance must be a WebAssembly.Module"), defaultSourceAppender, runtimeTypeForValue(exec->argument(0))))); const Wasm::ModuleInformation& moduleInformation = jsModule->moduleInformation(); // If the importObject parameter is not undefined and Type(importObject) is not Object, a TypeError is thrown. JSValue importArgument = exec->argument(1); JSObject* importObject = importArgument.getObject(); if (!importArgument.isUndefined() && !importObject) return JSValue::encode(throwException(exec, throwScope, createTypeError(exec, ASCIILiteral("second argument to WebAssembly.Instance must be undefined or an Object"), defaultSourceAppender, runtimeTypeForValue(importArgument)))); // If the list of module.imports is not empty and Type(importObject) is not Object, a TypeError is thrown. if (moduleInformation.imports.size() && !importObject) return JSValue::encode(throwException(exec, throwScope, createTypeError(exec, ASCIILiteral("second argument to WebAssembly.Instance must be Object because the WebAssembly.Module has imports"), defaultSourceAppender, runtimeTypeForValue(importArgument)))); Identifier moduleKey = Identifier::fromUid(PrivateName(PrivateName::Description, "WebAssemblyInstance")); WebAssemblyModuleRecord* moduleRecord = WebAssemblyModuleRecord::create(exec, vm, globalObject->webAssemblyModuleRecordStructure(), moduleKey, moduleInformation); RETURN_IF_EXCEPTION(throwScope, encodedJSValue()); Structure* instanceStructure = InternalFunction::createSubclassStructure(exec, exec->newTarget(), globalObject->WebAssemblyInstanceStructure()); RETURN_IF_EXCEPTION(throwScope, encodedJSValue()); JSWebAssemblyInstance* instance = JSWebAssemblyInstance::create(vm, instanceStructure, jsModule, moduleRecord->getModuleNamespace(exec)); RETURN_IF_EXCEPTION(throwScope, encodedJSValue()); { // Always start with a dummy Memory, so that wasm -> wasm thunks avoid checking for a nullptr Memory when trying to set pinned registers. Wasm::Memory memory; instance->setMemory(vm, JSWebAssemblyMemory::create(vm, exec->lexicalGlobalObject()->WebAssemblyMemoryStructure(), WTFMove(memory))); } // Let funcs, memories and tables be initially-empty lists of callable JavaScript objects, WebAssembly.Memory objects and WebAssembly.Table objects, respectively. // Let imports be an initially-empty list of external values. unsigned numImportFunctions = 0; unsigned numImportGlobals = 0; bool hasMemoryImport = false; bool hasTableImport = false; // For each import i in module.imports: for (auto& import : moduleInformation.imports) { // 1. Let o be the resultant value of performing Get(importObject, i.module_name). JSValue importModuleValue = importObject->get(exec, import.module); RETURN_IF_EXCEPTION(throwScope, encodedJSValue()); // 2. If Type(o) is not Object, throw a TypeError. if (!importModuleValue.isObject()) return JSValue::encode(throwException(exec, throwScope, createTypeError(exec, ASCIILiteral("import must be an object"), defaultSourceAppender, runtimeTypeForValue(importModuleValue)))); // 3. Let v be the value of performing Get(o, i.item_name) JSObject* object = jsCast(importModuleValue); JSValue value = object->get(exec, import.field); RETURN_IF_EXCEPTION(throwScope, encodedJSValue()); switch (import.kind) { case Wasm::ExternalKind::Function: { // 4. If i is a function import: // i. If IsCallable(v) is false, throw a WebAssembly.LinkError. if (!value.isFunction()) return JSValue::encode(throwException(exec, throwScope, createJSWebAssemblyLinkError(exec, vm, ASCIILiteral("import function must be callable")))); JSCell* cell = value.asCell(); // ii. If v is an Exported Function Exotic Object: if (WebAssemblyFunction* importedExport = jsDynamicCast(vm, cell)) { // a. If the signature of v does not match the signature of i, throw a WebAssembly.LinkError. Wasm::SignatureIndex importedSignatureIndex = importedExport->signatureIndex(); Wasm::SignatureIndex expectedSignatureIndex = moduleInformation.importFunctionSignatureIndices[import.kindIndex]; if (importedSignatureIndex != expectedSignatureIndex) return JSValue::encode(throwException(exec, throwScope, createJSWebAssemblyLinkError(exec, vm, ASCIILiteral("imported function's signature doesn't match the provided WebAssembly function's signature")))); // b. Let closure be v.[[Closure]]. } // iii. Otherwise: // a. Let closure be a new host function of the given signature which calls v by coercing WebAssembly arguments to JavaScript arguments via ToJSValue and returns the result, if any, by coercing via ToWebAssemblyValue. // Note: done as part of Plan compilation. // iv. Append v to funcs. // Note: adding the JSCell to the instance list fulfills closure requirements b. above (the WebAssembly.Instance wil be kept alive) and v. below (the JSFunction). instance->setImportFunction(vm, cell, numImportFunctions++); // v. Append closure to imports. break; } case Wasm::ExternalKind::Table: { RELEASE_ASSERT(!hasTableImport); // This should be guaranteed by a validation failure. // 7. Otherwise (i is a table import): hasTableImport = true; JSWebAssemblyTable* table = jsDynamicCast(vm, value); // i. If v is not a WebAssembly.Table object, throw a WebAssembly.LinkError. if (!table) return JSValue::encode(throwException(exec, throwScope, createJSWebAssemblyLinkError(exec, vm, ASCIILiteral("Table import is not an instance of WebAssembly.Table")))); uint32_t expectedInitial = moduleInformation.tableInformation.initial(); uint32_t actualInitial = table->size(); if (actualInitial < expectedInitial) return JSValue::encode(throwException(exec, throwScope, createJSWebAssemblyLinkError(exec, vm, ASCIILiteral("Table import provided an 'initial' that is too small")))); if (std::optional expectedMaximum = moduleInformation.tableInformation.maximum()) { std::optional actualMaximum = table->maximum(); if (!actualMaximum) { return JSValue::encode( throwException(exec, throwScope, createJSWebAssemblyLinkError(exec, vm, ASCIILiteral("Table import does not have a 'maximum' but the module requires that it does")))); } if (*actualMaximum > *expectedMaximum) { return JSValue::encode( throwException(exec, throwScope, createJSWebAssemblyLinkError(exec, vm, ASCIILiteral("Imported Table's 'maximum' is larger than the module's expected 'maximum'")))); } } // ii. Append v to tables. // iii. Append v.[[Table]] to imports. instance->setTable(vm, table); break; } case Wasm::ExternalKind::Memory: { // 6. If i is a memory import: RELEASE_ASSERT(!hasMemoryImport); // This should be guaranteed by a validation failure. RELEASE_ASSERT(moduleInformation.memory); hasMemoryImport = true; JSWebAssemblyMemory* memory = jsDynamicCast(vm, value); // i. If v is not a WebAssembly.Memory object, throw a WebAssembly.LinkError. if (!memory) return JSValue::encode(throwException(exec, throwScope, createJSWebAssemblyLinkError(exec, vm, ASCIILiteral("Memory import is not an instance of WebAssembly.Memory")))); Wasm::PageCount expectedInitial = moduleInformation.memory.initial(); Wasm::PageCount actualInitial = memory->memory()->initial(); if (actualInitial < expectedInitial) return JSValue::encode(throwException(exec, throwScope, createJSWebAssemblyLinkError(exec, vm, ASCIILiteral("Memory import provided an 'initial' that is too small")))); if (Wasm::PageCount expectedMaximum = moduleInformation.memory.maximum()) { Wasm::PageCount actualMaximum = memory->memory()->maximum(); if (!actualMaximum) { return JSValue::encode( throwException(exec, throwScope, createJSWebAssemblyLinkError(exec, vm, ASCIILiteral("Memory import did not have a 'maximum' but the module requires that it does")))); } if (actualMaximum > expectedMaximum) { return JSValue::encode( throwException(exec, throwScope, createJSWebAssemblyLinkError(exec, vm, ASCIILiteral("Memory imports 'maximum' is larger than the module's expected 'maximum'")))); } } // ii. Append v to memories. // iii. Append v.[[Memory]] to imports. instance->setMemory(vm, memory); break; } case Wasm::ExternalKind::Global: { // 5. If i is a global import: // i. If i is not an immutable global, throw a TypeError. ASSERT(moduleInformation.globals[import.kindIndex].mutability == Wasm::Global::Immutable); // ii. If Type(v) is not Number, throw a TypeError. if (!value.isNumber()) return JSValue::encode(throwException(exec, throwScope, createJSWebAssemblyLinkError(exec, vm, ASCIILiteral("imported global must be a number")))); // iii. Append ToWebAssemblyValue(v) to imports. switch (moduleInformation.globals[import.kindIndex].type) { case Wasm::I32: instance->setGlobal(numImportGlobals++, value.toInt32(exec)); break; case Wasm::F32: instance->setGlobal(numImportGlobals++, bitwise_cast(value.toFloat(exec))); break; case Wasm::F64: instance->setGlobal(numImportGlobals++, bitwise_cast(value.asNumber())); break; default: RELEASE_ASSERT_NOT_REACHED(); } ASSERT(!throwScope.exception()); break; } } } { if (!!moduleInformation.memory && moduleInformation.memory.isImport()) { // We should either have a Memory import or we should have thrown an exception. RELEASE_ASSERT(hasMemoryImport); } if (moduleInformation.memory && !hasMemoryImport) { RELEASE_ASSERT(!moduleInformation.memory.isImport()); // We create a memory when it's a memory definition. bool failed; Wasm::Memory memory(moduleInformation.memory.initial(), moduleInformation.memory.maximum(), failed); if (failed) return JSValue::encode(throwException(exec, throwScope, createOutOfMemoryError(exec))); instance->setMemory(vm, JSWebAssemblyMemory::create(vm, exec->lexicalGlobalObject()->WebAssemblyMemoryStructure(), WTFMove(memory))); } } { if (!!moduleInformation.tableInformation && moduleInformation.tableInformation.isImport()) { // We should either have a Table import or we should have thrown an exception. RELEASE_ASSERT(hasTableImport); } if (!!moduleInformation.tableInformation && !hasTableImport) { RELEASE_ASSERT(!moduleInformation.tableInformation.isImport()); // We create a Table when it's a Table definition. JSWebAssemblyTable* table = JSWebAssemblyTable::create(exec, vm, exec->lexicalGlobalObject()->WebAssemblyTableStructure(), moduleInformation.tableInformation.initial(), moduleInformation.tableInformation.maximum()); // We should always be able to allocate a JSWebAssemblyTable we've defined. // If it's defined to be too large, we should have thrown a validation error. ASSERT(!throwScope.exception()); ASSERT(table); instance->setTable(vm, table); } } // Globals { ASSERT(numImportGlobals == moduleInformation.firstInternalGlobal); for (size_t globalIndex = numImportGlobals; globalIndex < moduleInformation.globals.size(); ++globalIndex) { const auto& global = moduleInformation.globals[globalIndex]; ASSERT(global.initializationType != Wasm::Global::IsImport); if (global.initializationType == Wasm::Global::FromGlobalImport) { ASSERT(global.initialBitsOrImportNumber < numImportGlobals); instance->setGlobal(globalIndex, instance->loadI64Global(global.initialBitsOrImportNumber)); } else instance->setGlobal(globalIndex, global.initialBitsOrImportNumber); } } moduleRecord->link(exec, instance); RETURN_IF_EXCEPTION(throwScope, encodedJSValue()); if (verbose) moduleRecord->dump(); JSValue startResult = moduleRecord->evaluate(exec); UNUSED_PARAM(startResult); RETURN_IF_EXCEPTION(throwScope, encodedJSValue()); return JSValue::encode(instance); } static EncodedJSValue JSC_HOST_CALL callJSWebAssemblyInstance(ExecState* state) { VM& vm = state->vm(); auto scope = DECLARE_THROW_SCOPE(vm); return JSValue::encode(throwConstructorCannotBeCalledAsFunctionTypeError(state, scope, "WebAssembly.Instance")); } WebAssemblyInstanceConstructor* WebAssemblyInstanceConstructor::create(VM& vm, Structure* structure, WebAssemblyInstancePrototype* thisPrototype) { auto* constructor = new (NotNull, allocateCell(vm.heap)) WebAssemblyInstanceConstructor(vm, structure); constructor->finishCreation(vm, thisPrototype); return constructor; } Structure* WebAssemblyInstanceConstructor::createStructure(VM& vm, JSGlobalObject* globalObject, JSValue prototype) { return Structure::create(vm, globalObject, prototype, TypeInfo(ObjectType, StructureFlags), info()); } void WebAssemblyInstanceConstructor::finishCreation(VM& vm, WebAssemblyInstancePrototype* prototype) { Base::finishCreation(vm, ASCIILiteral("Instance")); putDirectWithoutTransition(vm, vm.propertyNames->prototype, prototype, DontEnum | DontDelete | ReadOnly); putDirectWithoutTransition(vm, vm.propertyNames->length, jsNumber(1), ReadOnly | DontEnum | DontDelete); } WebAssemblyInstanceConstructor::WebAssemblyInstanceConstructor(VM& vm, Structure* structure) : Base(vm, structure) { } ConstructType WebAssemblyInstanceConstructor::getConstructData(JSCell*, ConstructData& constructData) { constructData.native.function = constructJSWebAssemblyInstance; return ConstructType::Host; } CallType WebAssemblyInstanceConstructor::getCallData(JSCell*, CallData& callData) { callData.native.function = callJSWebAssemblyInstance; return CallType::Host; } void WebAssemblyInstanceConstructor::visitChildren(JSCell* cell, SlotVisitor& visitor) { auto* thisObject = jsCast(cell); ASSERT_GC_OBJECT_INHERITS(thisObject, info()); Base::visitChildren(thisObject, visitor); } } // namespace JSC #endif // ENABLE(WEBASSEMBLY)