Coverage Report

Created: 2026-02-20 14:39

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/build/source/src/core/error.rs
Line
Count
Source
1
use crate::validation_stack::ValidationStackEntry;
2
use crate::RefType;
3
use core::fmt::{Display, Formatter};
4
use core::str::Utf8Error;
5
6
use super::indices::FuncIdx;
7
use crate::core::reader::section_header::SectionTy;
8
use crate::core::reader::types::ValType;
9
10
#[derive(Debug, PartialEq, Eq, Clone)]
11
pub enum ValidationError {
12
    /// The magic number at the start of the Wasm bytecode is invalid.
13
    InvalidMagic,
14
    /// The binary format version at the start of the Wasm bytecode is invalid.
15
    InvalidBinaryFormatVersion,
16
    /// The end of the binary file was reached unexpectedly.
17
    Eof,
18
19
    /// A UTF-8 string is malformed.
20
    MalformedUtf8(Utf8Error),
21
    /// The type of a section is malformed.
22
    MalformedSectionTypeDiscriminator(u8),
23
    /// The discriminator of a number type is malformed.
24
    MalformedNumTypeDiscriminator(u8),
25
    /// The discriminator of a vector type is malformed.
26
    MalformedVecTypeDiscriminator(u8),
27
    /// The discriminator of a function type is malformed.
28
    MalformedFuncTypeDiscriminator(u8),
29
    /// The discriminator of a reference type is malformed.
30
    MalformedRefTypeDiscriminator(u8),
31
    /// A valtype is malformed because it is neither a number, reference nor vector type.
32
    MalformedValType,
33
    /// The discriminator of an export description is malformed.
34
    MalformedExportDescDiscriminator(u8),
35
    /// The discriminator of an import description is malformed.
36
    MalformedImportDescDiscriminator(u8),
37
    /// The discriminator of a limits type is malformed.
38
    MalformedLimitsDiscriminator(u8),
39
    /// The min field of a limits type is larger than the max field.
40
    MalformedLimitsMinLargerThanMax {
41
        min: u32,
42
        max: u32,
43
    },
44
    /// The discriminator of a mut type is malformed.
45
    MalformedMutDiscriminator(u8),
46
    /// Block types use a special 33-bit signed integer for encoding type indices.
47
    MalformedBlockTypeTypeIdx(i64),
48
    /// A variable-length integer was read but it overflowed.
49
    MalformedVariableLengthInteger,
50
    /// The discriminator of an element kind is malformed.
51
    MalformedElemKindDiscriminator(u8),
52
53
    /// An index for a type is invalid.
54
    InvalidTypeIdx(u32),
55
    /// An index for a function is invalid.
56
    InvalidFuncIdx(u32),
57
    /// An index for a table is invalid.
58
    InvalidTableIdx(u32),
59
    /// An index for a memory is invalid.
60
    InvalidMemIdx(u32),
61
    /// An index for a global is invalid.
62
    InvalidGlobalIdx(u32),
63
    /// An index for an element segment is invalid.
64
    InvalidElemIdx(u32),
65
    /// An index for a data segment is invalid.
66
    InvalidDataIdx(u32),
67
    /// An index for a local is invalid.
68
    InvalidLocalIdx(u32),
69
    /// An index for a label is invalid.
70
    InvalidLabelIdx(u32),
71
    /// An index for a lane of some vector type is invalid.
72
    InvalidLaneIdx(u8),
73
74
    /// A section with given type is out of order. All section types have a fixed order in which they must occur.
75
    SectionOutOfOrder(SectionTy),
76
    /// A custom section contains more bytes than its section header specifies.
77
    InvalidCustomSectionLength,
78
    ExprMissingEnd,
79
    InvalidInstr(u8),
80
    InvalidMultiByteInstr(u8, u32),
81
    EndInvalidValueStack,
82
    InvalidValidationStackValType(Option<ValType>),
83
    InvalidValidationStackType(ValidationStackEntry),
84
    ExpectedAnOperand,
85
    /// The memory size specified by a mem type exceeds the maximum size.
86
    MemoryTooLarge,
87
    /// An attempt has been made to mutate a const global
88
    MutationOfConstGlobal,
89
    /// An alignment of some memory instruction is invalid
90
    ErroneousAlignment {
91
        alignment: u32,
92
        minimum_required_alignment: u32,
93
    },
94
    /// The validation control stack is empty, even though an entry was expected.
95
    // TODO Reconsider if we want to expose this error. It should probably never happen and thus also never bubble up to the user.
96
    ValidationCtrlStackEmpty,
97
    /// An `else` instruction was found while not inside an `if` block.
98
    ElseWithoutMatchingIf,
99
    /// An `end` for a matching `if` instruction was found, but there was no `else` instruction in between.
100
    IfWithoutMatchingElse,
101
    /// A `table.init` instruction specified a table and an element segment that store different reference types.
102
    MismatchedRefTypesDuringTableInit {
103
        table_ty: RefType,
104
        elem_ty: RefType,
105
    },
106
    /// A `table.copy` instruction referenced two tables that store different reference types.
107
    MismatchedRefTypesDuringTableCopy {
108
        source_table_ty: RefType,
109
        destination_table_ty: RefType,
110
    },
111
    /// An expected reference type did not match the actual reference type on the validation stack.
112
    MismatchedRefTypesOnValidationStack {
113
        expected: RefType,
114
        actual: RefType,
115
    },
116
    /// An indirect call to a table with does not store function references was made.
117
    IndirectCallToNonFuncRefTable(RefType),
118
    /// A reference type was expected to be on the stack, but a value type was found.
119
    ExpectedReferenceTypeOnStack(ValType),
120
    /// When a is referenced in the code section it must be contained in `C.refs`, which was not the case
121
    ReferencingAnUnreferencedFunction(FuncIdx),
122
    /// The select instructions may work with multiple values in the future. However, as of now its vector may only have one element.
123
    InvalidSelectTypeVectorLength(usize),
124
    /// A function specifies too many locals, i.e. more than 2^32 - 1
125
    TooManyLocals(u64),
126
    /// Multiple exports share the same name
127
    DuplicateExportName,
128
    /// Multiple memories are not yet allowed without the proposal.
129
    UnsupportedMultipleMemoriesProposal,
130
    /// An expr in the code section has trailing instructions following its `end` instruction.
131
    CodeExprHasTrailingInstructions,
132
    /// The lengths of the function and code sections must match.
133
    FunctionAndCodeSectionsHaveDifferentLengths,
134
    /// The data count specified in the data count section and the length of the data section must match.
135
    DataCountAndDataSectionsLengthAreDifferent,
136
    InvalidImportType,
137
    /// The function signature of the start function is invalid. It must not specify any parameters or return values.
138
    InvalidStartFunctionSignature,
139
    /// An active element segment's type and its table's type are different.
140
    ActiveElementSegmentTypeMismatch,
141
    /// 33-bit signed integers are sometimes used to encode unsigned 32-bit
142
    /// integers to prevent collisions between bit patterns of different types.
143
    /// Therefore, 33-bit signed integers may never be negative.
144
    I33IsNegative,
145
    /// The data count section is required, if there are instructions that use
146
    /// data indices.
147
    MissingDataCountSection,
148
    /// The mode of a data segment was invalid. Only values in the range 0..=2
149
    /// are allowed.
150
    InvalidDataSegmentMode(u32),
151
    /// The mode of an element was invalid. Only values in the range 0..=7 are
152
    /// allowed.
153
    InvalidElementMode(u32),
154
    /// The module contains too many functions, i.e. imported or locally-defined
155
    /// functions. The maximum number of functions is [`u32::MAX`].
156
    TooManyFunctions,
157
    /// The module contains too many tables, i.e. imported or locally-defined
158
    /// tables. The maximum number of tables is [`u32::MAX`].
159
    TooManyTables,
160
    /// The module contains too many memories, i.e. imported or locally-defined
161
    /// memories. The maximum number of memories is [`u32::MAX`].
162
    TooManyMemories,
163
    /// The module contains too many globals, i.e. imported or locally-defined
164
    /// globals. The maximum number of memories is [`u32::MAX`].
165
    TooManyGlobals,
166
}
167
168
impl core::error::Error for ValidationError {}
169
170
impl Display for ValidationError {
171
2
    fn fmt(&self, f: &mut Formatter<'_>) -> core::fmt::Result {
172
2
        match self {
173
1
            ValidationError::InvalidMagic => write!(f, "The magic number is invalid"),
174
1
            ValidationError::InvalidBinaryFormatVersion => write!(f, "The Wasm binary format version is invalid"),
175
0
            ValidationError::Eof => write!(f, "The end of the Wasm bytecode was reached unexpectedly"),
176
177
0
            ValidationError::MalformedUtf8(utf8_error) => write!(f, "Failed to parse a UTF-8 string: {utf8_error}"),
178
0
            ValidationError::MalformedSectionTypeDiscriminator(byte) => write!(f, "Failed to parse {byte:#x} as a section type discriminator"),
179
0
            ValidationError::MalformedNumTypeDiscriminator(byte) => write!(f, "Failed to parse {byte:#x} as a number type discriminator"),
180
0
            ValidationError::MalformedVecTypeDiscriminator(byte) => write!(f, "Failed to parse {byte:#x} as a vector type discriminator"),
181
0
            ValidationError::MalformedFuncTypeDiscriminator(byte) => write!(f, "Failed to parse {byte:#x} as a function type discriminator"),
182
0
            ValidationError::MalformedRefTypeDiscriminator(byte) => write!(f, "Failed to parse {byte:#x} as a reference type discriminator"),
183
0
            ValidationError::MalformedValType => write!(f, "Failed to read a value type because it is neither a number, reference or vector type"),
184
0
            ValidationError::MalformedExportDescDiscriminator(byte) => write!(f, "Failed to parse {byte:#x} as an export description discriminator"),
185
0
            ValidationError::MalformedImportDescDiscriminator(byte) => write!(f, "Failed to parse {byte:#x} as an import description discriminator"),
186
0
            ValidationError::MalformedLimitsDiscriminator(byte) => write!(f, "Failed to parse {byte:#x} as a limits type discriminator"),
187
0
            ValidationError::MalformedLimitsMinLargerThanMax { min, max } => write!(f, "Limits are malformed because min={min} is larger than max={max}"),
188
0
            ValidationError::MalformedMutDiscriminator(byte) => write!(f, "Failed to parse {byte:#x} as a mute type discriminator"),
189
0
            ValidationError::MalformedBlockTypeTypeIdx(idx) => write!(f, "The type index {idx} which is encoded as a singed 33-bit integer inside a block type is malformed"),
190
0
            ValidationError::MalformedVariableLengthInteger => write!(f, "Reading a variable-length integer overflowed"),
191
0
            ValidationError::MalformedElemKindDiscriminator(byte) => write!(f, "Failed to parse {byte:#x} as an element kind discriminator"),
192
193
0
            ValidationError::InvalidTypeIdx(idx) => write!(f, "The type index {idx} is invalid"),
194
0
            ValidationError::InvalidFuncIdx(idx) => write!(f, "The function index {idx} is invalid"),
195
0
            ValidationError::InvalidTableIdx(idx) => write!(f, "The table index {idx} is invalid"),
196
0
            ValidationError::InvalidMemIdx(idx) => write!(f, "The memory index {idx} is invalid"),
197
0
            ValidationError::InvalidGlobalIdx(idx) => write!(f, "The global index {idx} is invalid"),
198
0
            ValidationError::InvalidElemIdx(idx) => write!(f, "The element segment index {idx} is invalid"),
199
0
            ValidationError::InvalidDataIdx(idx) => write!(f, "The data segment index {idx} is invalid"),
200
0
            ValidationError::InvalidLocalIdx(idx) => write!(f, "The local index {idx} is invalid"),
201
0
            ValidationError::InvalidLabelIdx(idx) => write!(f, "The label index {idx} is invalid"),
202
0
            ValidationError::InvalidLaneIdx(idx) => write!(f, "The lane index {idx} is invalid"),
203
204
0
            ValidationError::SectionOutOfOrder(ty) => write!(f, "A section of type `{ty:?}` is defined out of order"),
205
0
            ValidationError::InvalidCustomSectionLength => write!(f, "A custom section contains more bytes than its section header specifies"),
206
0
            ValidationError::ExprMissingEnd => write!(f, "An expr type is missing an end byte"),
207
0
            ValidationError::InvalidInstr(byte) => write!(f, "The instruction opcode {byte:#x} is invalid"),
208
0
            ValidationError::InvalidMultiByteInstr(first_byte, second_instr) => write!(f, "The multi-byte instruction opcode {first_byte:#x} {second_instr} is invalid"),
209
0
            ValidationError::ActiveElementSegmentTypeMismatch => write!(f, "an element segment's type and its table's type are different"),
210
0
            ValidationError::EndInvalidValueStack => write!(f, "Different value stack types were expected at the end of a block/function"),
211
0
            ValidationError::InvalidValidationStackValType(ty) => write!(f, "An unexpected type `{ty:?}` was found on the stack when trying to pop another"),
212
0
            ValidationError::InvalidValidationStackType(ty) => write!(f, "An unexpected type `{ty:?}` was found on the stack"),
213
0
            ValidationError::ExpectedAnOperand => write!(f, "Expected a value type operand on the stack"),
214
0
            ValidationError::MemoryTooLarge => write!(f, "The size specified by a memory type exceeds the maximum size"),
215
0
            ValidationError::MutationOfConstGlobal => write!(f, "An attempt has been made to mutate a const global"),
216
0
            ValidationError::ErroneousAlignment {alignment , minimum_required_alignment} => write!(f, "The alignment 2^{alignment} is not less or equal to the required alignment 2^{minimum_required_alignment}"),
217
0
            ValidationError::ValidationCtrlStackEmpty => write!(f, "Failed to retrieve last ctrl block because validation ctrl stack is empty"),
218
0
            ValidationError::ElseWithoutMatchingIf => write!(f, "Found `else` without a previous matching `if` instruction"),
219
0
            ValidationError::IfWithoutMatchingElse => write!(f, "Found `end` without a previous matching `else` to an `if` instruction"),
220
0
            ValidationError::MismatchedRefTypesDuringTableInit { table_ty, elem_ty } => write!(f, "Mismatch of table type `{table_ty:?}` and element segment type `{elem_ty:?}` for `table.init` instruction"),
221
0
            ValidationError::MismatchedRefTypesDuringTableCopy { source_table_ty, destination_table_ty } => write!(f, "Mismatch of source table type `{source_table_ty:?}` and destination table type `{destination_table_ty:?}` for `table.copy` instruction"),
222
0
            ValidationError::MismatchedRefTypesOnValidationStack { expected, actual } => write!(f, "Mismatch of reference types on the value stack: Expected `{expected:?}` but got `{actual:?}`"),
223
0
            ValidationError::IndirectCallToNonFuncRefTable(table_ty) => write!(f, "An indirect call to a table which does not store function references but instead `{table_ty:?}` was made"),
224
0
            ValidationError::ExpectedReferenceTypeOnStack(found_valtype) => write!(f, "Expected a reference type but instead found a `{found_valtype:?}` on the stack"),
225
0
            ValidationError::ReferencingAnUnreferencedFunction(func_idx) => write!(f, "Referenced a function with index {func_idx} that was not referenced in prior validation"),
226
0
            ValidationError::InvalidSelectTypeVectorLength(len) => write!(f, "The type vector of a `select` instruction must be of length 1 as of now but it is of length {len} instead"),
227
0
            ValidationError::TooManyLocals(n) => write!(f,"There are {n} locals and this exceeds the maximum allowed number of 2^32-1"),
228
0
            ValidationError::DuplicateExportName => write!(f,"Multiple exports share the same name"),
229
0
            ValidationError::UnsupportedMultipleMemoriesProposal => write!(f,"A memory index other than 1 was used, but the proposal for multiple memories is not yet supported"),
230
0
            ValidationError::CodeExprHasTrailingInstructions => write!(f,"A code expression has invalid trailing instructions following its `end` instruction"),
231
0
            ValidationError::FunctionAndCodeSectionsHaveDifferentLengths => write!(f,"The function and code sections have different lengths"),
232
0
            ValidationError::DataCountAndDataSectionsLengthAreDifferent => write!(f,"The data count section specifies a different length than there are data segments in the data section"),
233
0
            ValidationError::InvalidImportType => f.write_str("Invalid import type"),
234
0
            ValidationError::InvalidStartFunctionSignature => write!(f,"The start function has parameters or return types which it is not allowed to have"),
235
0
            ValidationError::I33IsNegative => f.write_str("An i33 type is negative which is not allowed"),
236
0
            ValidationError::MissingDataCountSection => f.write_str("Some instructions could not be validated because the data count section is missing"),
237
0
            ValidationError::InvalidDataSegmentMode(mode) => write!(f, "The mode of a data segment was invalid (only 0..=2 is allowed): {mode}"),
238
0
            ValidationError::InvalidElementMode(mode) => write!(f, "The mode of an element was invalid (only 0..=7 is allowed): {mode}"),
239
0
            ValidationError::TooManyFunctions => f.write_str("The module contains too many functions. The maximum number of functions (either imported or locally-defined) is 2^32 - 1"),
240
0
            ValidationError::TooManyTables => f.write_str("The module contains too many tables. The maximum number of tables (either imported or locally-defined) is 2^32 - 1"),
241
0
            ValidationError::TooManyMemories => f.write_str("The module contains too many memories. The maximum number of memories (either imported or locally-defined) is 2^32 - 1"),
242
0
            ValidationError::TooManyGlobals => f.write_str("The module contains too many globals. The maximum number of globals (either imported or locally-defined) is 2^32 - 1"),
243
        }
244
2
    }
245
}
246
247
impl ValidationError {
248
    /// Convert this error to a message that is compatible with the error messages used by the official Wasm testsuite.
249
0
    pub fn to_message(&self) -> &'static str {
250
0
        todo!("convert validation error to testsuite message");
251
    }
252
}
253
254
#[cfg(test)]
255
mod test {
256
    use alloc::string::ToString;
257
258
    use crate::ValidationError;
259
260
    #[test]
261
1
    fn fmt_invalid_magic() {
262
1
        assert!(ValidationError::InvalidMagic
263
1
            .to_string()
264
1
            .contains("magic number"));
265
1
    }
266
267
    #[test]
268
1
    fn fmt_invalid_version() {
269
1
        assert!(ValidationError::InvalidBinaryFormatVersion
270
1
            .to_string()
271
1
            .contains("version"));
272
1
    }
273
}