1/*
2 * Copyright (C) 2017 Apple Inc. All rights reserved.
3 *
4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions
6 * are met:
7 * 1. Redistributions of source code must retain the above copyright
8 * notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright
10 * notice, this list of conditions and the following disclaimer in the
11 * documentation and/or other materials provided with the distribution.
12 *
13 * THIS SOFTWARE IS PROVIDED BY APPLE INC. ``AS IS'' AND ANY
14 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
15 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
16 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR
17 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
18 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
19 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
20 * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
21 * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
22 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
23 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
24 */
25
26#include "config.h"
27#include "WasmInstance.h"
28
29#if ENABLE(WEBASSEMBLY)
30
31#include "JSCInlines.h"
32#include "JSWebAssemblyHelpers.h"
33#include "JSWebAssemblyInstance.h"
34#include "Register.h"
35#include "WasmModuleInformation.h"
36#include <wtf/CheckedArithmetic.h>
37
38namespace JSC { namespace Wasm {
39
40namespace {
41size_t globalMemoryByteSize(Module& module)
42{
43 return (Checked<size_t>(module.moduleInformation().globals.size()) * sizeof(Register)).unsafeGet();
44}
45}
46
47Instance::Instance(Context* context, Ref<Module>&& module, EntryFrame** pointerToTopEntryFrame, void** pointerToActualStackLimit, StoreTopCallFrameCallback&& storeTopCallFrame)
48 : m_context(context)
49 , m_module(WTFMove(module))
50 , m_globals(MallocPtr<GlobalValue>::malloc(globalMemoryByteSize(m_module.get())))
51 , m_globalsToMark(m_module.get().moduleInformation().globals.size())
52 , m_pointerToTopEntryFrame(pointerToTopEntryFrame)
53 , m_pointerToActualStackLimit(pointerToActualStackLimit)
54 , m_storeTopCallFrame(WTFMove(storeTopCallFrame))
55 , m_numImportFunctions(m_module->moduleInformation().importFunctionCount())
56{
57 for (unsigned i = 0; i < m_numImportFunctions; ++i)
58 new (importFunctionInfo(i)) ImportFunctionInfo();
59 memset(static_cast<void*>(m_globals.get()), 0, globalMemoryByteSize(m_module.get()));
60 for (unsigned i = 0; i < m_module->moduleInformation().globals.size(); ++i) {
61 if (isSubtype(m_module.get().moduleInformation().globals[i].type, Anyref))
62 m_globalsToMark.set(i);
63 }
64 memset(bitwise_cast<char*>(this) + offsetOfTablePtr(m_numImportFunctions, 0), 0, m_module->moduleInformation().tableCount() * sizeof(Table*));
65}
66
67Ref<Instance> Instance::create(Context* context, Ref<Module>&& module, EntryFrame** pointerToTopEntryFrame, void** pointerToActualStackLimit, StoreTopCallFrameCallback&& storeTopCallFrame)
68{
69 return adoptRef(*new (NotNull, fastMalloc(allocationSize(module->moduleInformation().importFunctionCount(), module->moduleInformation().tableCount()))) Instance(context, WTFMove(module), pointerToTopEntryFrame, pointerToActualStackLimit, WTFMove(storeTopCallFrame)));
70}
71
72Instance::~Instance() { }
73
74size_t Instance::extraMemoryAllocated() const
75{
76 return globalMemoryByteSize(m_module.get()) + allocationSize(m_numImportFunctions, m_module->moduleInformation().tableCount());
77}
78
79void Instance::setGlobal(unsigned i, JSValue value)
80{
81 ASSERT(m_owner);
82 m_globals.get()[i].anyref.set(*owner<JSWebAssemblyInstance>()->vm(), owner<JSWebAssemblyInstance>(), value);
83}
84
85JSValue Instance::getFunctionWrapper(unsigned i) const
86{
87 JSValue value = m_functionWrappers.get(i).get();
88 if (value.isEmpty())
89 return jsNull();
90 return value;
91}
92
93void Instance::setFunctionWrapper(unsigned i, JSValue value)
94{
95 ASSERT(m_owner);
96 ASSERT(value.isFunction(*owner<JSWebAssemblyInstance>()->vm()));
97 ASSERT(!m_functionWrappers.contains(i));
98 auto locker = holdLock(owner<JSWebAssemblyInstance>()->cellLock());
99 m_functionWrappers.set(i, WriteBarrier<Unknown>(*owner<JSWebAssemblyInstance>()->vm(), owner<JSWebAssemblyInstance>(), value));
100 ASSERT(getFunctionWrapper(i) == value);
101}
102
103Table* Instance::table(unsigned i)
104{
105 RELEASE_ASSERT(i < m_module->moduleInformation().tableCount());
106 return *bitwise_cast<Table**>(bitwise_cast<char*>(this) + offsetOfTablePtr(m_numImportFunctions, i));
107}
108
109void Instance::setTable(unsigned i, Ref<Table>&& table)
110{
111 RELEASE_ASSERT(i < m_module->moduleInformation().tableCount());
112 ASSERT(!this->table(i));
113 *bitwise_cast<Table**>(bitwise_cast<char*>(this) + offsetOfTablePtr(m_numImportFunctions, i)) = &table.leakRef();
114}
115
116EncodedJSValue getWasmTableElement(Instance* instance, unsigned tableIndex, int32_t signedIndex)
117{
118 ASSERT(tableIndex < instance->module().moduleInformation().tableCount());
119 if (signedIndex < 0)
120 return 0;
121
122 uint32_t index = signedIndex;
123 if (index >= instance->table(tableIndex)->length())
124 return 0;
125
126 return JSValue::encode(instance->table(tableIndex)->get(index));
127}
128
129bool setWasmTableElement(Instance* instance, unsigned tableIndex, int32_t signedIndex, EncodedJSValue encValue)
130{
131 ASSERT(tableIndex < instance->module().moduleInformation().tableCount());
132 if (signedIndex < 0)
133 return false;
134
135 uint32_t index = signedIndex;
136 if (index >= instance->table(tableIndex)->length())
137 return false;
138
139 JSValue value = JSValue::decode(encValue);
140 if (instance->table(tableIndex)->type() == Wasm::TableElementType::Anyref)
141 instance->table(tableIndex)->set(index, value);
142 else if (instance->table(tableIndex)->type() == Wasm::TableElementType::Funcref) {
143 WebAssemblyFunction* wasmFunction;
144 WebAssemblyWrapperFunction* wasmWrapperFunction;
145
146 if (isWebAssemblyHostFunction(*instance->owner<JSObject>()->vm(), value, wasmFunction, wasmWrapperFunction)) {
147 ASSERT(!!wasmFunction || !!wasmWrapperFunction);
148 if (wasmFunction)
149 instance->table(tableIndex)->asFuncrefTable()->setFunction(index, jsCast<JSObject*>(value), wasmFunction->importableFunction(), &wasmFunction->instance()->instance());
150 else
151 instance->table(tableIndex)->asFuncrefTable()->setFunction(index, jsCast<JSObject*>(value), wasmWrapperFunction->importableFunction(), &wasmWrapperFunction->instance()->instance());
152 } else if (value.isNull())
153 instance->table(tableIndex)->clear(index);
154 else
155 ASSERT_NOT_REACHED();
156 } else
157 ASSERT_NOT_REACHED();
158
159 return true;
160}
161
162int32_t doWasmTableGrow(Instance* instance, unsigned tableIndex, EncodedJSValue fill, int32_t delta)
163{
164 ASSERT(tableIndex < instance->module().moduleInformation().tableCount());
165 auto oldSize = instance->table(tableIndex)->length();
166 if (delta < 0)
167 return oldSize;
168 auto newSize = instance->table(tableIndex)->grow(delta);
169 if (!newSize || *newSize == oldSize)
170 return -1;
171
172 for (unsigned i = oldSize; i < instance->table(tableIndex)->length(); ++i)
173 setWasmTableElement(instance, tableIndex, i, fill);
174
175 return oldSize;
176}
177
178bool doWasmTableFill(Instance* instance, unsigned tableIndex, int32_t unsafeOffset, EncodedJSValue fill, int32_t unsafeCount)
179{
180 ASSERT(tableIndex < instance->module().moduleInformation().tableCount());
181 if (unsafeOffset < 0 || unsafeCount < 0)
182 return false;
183
184 unsigned offset = unsafeOffset;
185 unsigned count = unsafeCount;
186
187 if (offset >= instance->table(tableIndex)->length() || offset + count > instance->table(tableIndex)->length())
188 return false;
189
190 for (unsigned j = 0; j < count; ++j)
191 setWasmTableElement(instance, tableIndex, offset + j, fill);
192
193 return true;
194}
195
196EncodedJSValue doWasmRefFunc(Instance* instance, uint32_t index)
197{
198 JSValue value = instance->getFunctionWrapper(index);
199 ASSERT(value.isFunction(*instance->owner<JSObject>()->vm()));
200 return JSValue::encode(value);
201}
202
203} } // namespace JSC::Wasm
204
205#endif // ENABLE(WEBASSEMBLY)
206