Skip to content

Releases: bytecodealliance/wasmtime

dev: Decrease default guard size from 2G to 32M (#9606)

28 Sep 20:31
e56ffd7
Compare
Choose a tag to compare
* Decrease default guard size from 2G to 32M

This commit follows in the footsteps of SpiderMonkey to reduce the size
of the default guard region from 2GiB to 32MiB. SpiderMonkey performance
an analysis of some wasm modules and found the largest static offset was
20MiB so 32 is the rounded up version of that.

This will reduce the size of the virtual memory reservation per
linear-memory by default. Previously it was 8G due to guards being both
before and after linear memory being 2G in size. Now it'll be 4G+64M
with before/after guards taken into account. This should in theory make
it easier to pack more instances in the pooling allocator for example
and overall reduce the virtual memory footprint.

This is not expected to have any major impact on the performance of
wasm modules as all bounds checks should still practically be elided.
We've been fuzzing differently sized guard regions for quite a long time
as well so there should be a low risk of this having any issues
specifically connected to a smaller guard region.

* Fix expected error message

v26.0.1: Release Wasmtime 26.0.1 (#9561)

05 Nov 19:24
c138e08
Compare
Choose a tag to compare

26.0.1

Released 2024-11-05.

Fixed

  • Update to cap-std 3.4.1, for #9559, which fixes a wasi-filesystem sandbox
    escape on Windows.
    CVE-2024-51745.

v25.0.3: Release Wasmtime 25.0.3 (#9562)

05 Nov 19:24
94c223f
Compare
Choose a tag to compare

25.0.3

Released 2024-11-05.

Fixed

  • Update to cap-std 3.4.1, for #9559, which fixes a wasi-filesystem sandbox
    escape on Windows.
    CVE-2024-51745.

v24.0.2: Release Wasmtime 24.0.2 (#9563)

05 Nov 19:20
c29a9bb
Compare
Choose a tag to compare

24.0.2

Released 2024-11-05.

Fixed

  • Update to cap-std 3.4.1, for #9559, which fixes a wasi-filesystem sandbox
    escape on Windows.
    CVE-2024-51745.

v26.0.0: Release Wasmtime 26.0.0 (#9489)

22 Oct 15:23
c92317b
Compare
Choose a tag to compare

26.0.0

Released 2024-10-22.

Added

  • The "table64" extension of the memory64 proposals to WebAssembly has been
    implemented.
    #9206

  • Initial support has been added for compiling WebAssembly modules with Pulley,
    Wasmtime's interpreter. Note that the interpreter is not feature complete yet.
    #9240

  • Wasmtime can now execute code without relying on host-based signal handlers.
    #9230

  • Work has continued on implementing the GC proposals in Wasmtime.
    #9246
    #9244
    #9271
    #9275
    #9278
    #9282
    #9285
    #9326
    #9341
    #9358

  • Support for ARM64 Windows has been finished with support for unwinding.
    Release binaries are now also available for this platform.
    #9266
    #9283

  • The bindgen! macro now supports multiple paths to load WIT from.
    #9288

  • A new -W async-stack-size=N argument has been added to the CLI.
    #9302

  • A new wasmtime completion subcommand can be used to generate a completion
    script for the Wasmtime CLI.
    #9312

  • Components now support initialize_copy_on_write_image like core modules.
    #9357

  • Initial support for the ISLE verifier Crocus has landed.
    #9178

Changed

  • Wasmtime now requires Rust 1.79.0 to compile.
    #9202

  • The future-trailers.get in wasi-http now returns none when trailers are
    absent.
    #9208

  • The Cranelift instructions iadd_cin and isub_bin were removed. The
    isub_borrow and iadd_carry instructions were renamed to {u,s}add_carry
    and {u,s}sub_borrow.
    #9199

  • Winch now supports multi-value results on AArch64.
    #9218

  • Some issues related to shutdown have been fixed with WASI sockets.
    #9225

  • Cranelift now has a Cargo feature to enable support for all native ISAs and
    not Pulley.
    #9237

  • Cranelift support for StructArgument in the arm64, riscv64, and s390x
    backends has been removed.
    #9258

  • The pooling allocator no longer limits instances/memories/tables by default.
    #9257

  • Stack overflow on an async stack will now print a message that this happened.
    #9304

  • Cranelift's cranelift-wasm crate has been removed and folded directly into
    wasmtime-cranelift.
    #9313

  • Cranelift's TrapCode type is now represented with a single byte.
    #9338

Fixed

  • Stack slots in Cranelift are now aligned from the start instead of the end.
    #9279

  • The WASIp1 adapter now correctly handles allocations where the initial
    alignment consumes the entire allocation.
    #9356

v25.0.2: Release Wasmtime 25.0.2 (#9366)

09 Oct 16:56
52a565b
Compare
Choose a tag to compare

25.0.2

Released 2024-10-09.

Fixed

  • Fix a runtime crash when combining tail-calls with host imports that capture a
    stack trace or trap.
    GHSA-q8hx-mm92-4wvg

  • Fix a race condition could lead to WebAssembly control-flow integrity and type
    safety violations.
    GHSA-7qmx-3fpx-r45m

v24.0.1: Release Wasmtime 24.0.1 (#9370)

09 Oct 16:55
eb42159
Compare
Choose a tag to compare

24.0.1

Released 2024-10-09.

Fixed

  • Fix a runtime crash when combining tail-calls with host imports that capture a
    stack trace or trap.
    GHSA-q8hx-mm92-4wvg

  • Fix a race condition could lead to WebAssembly control-flow integrity and type
    safety violations.
    GHSA-7qmx-3fpx-r45m

v23.0.3: Release Wasmtime 23.0.3 (#9365)

09 Oct 16:59
72bedc1
Compare
Choose a tag to compare

23.0.3

Released 2024-10-09.

Fixed

  • Fix a runtime crash when combining tail-calls with host imports that capture a
    stack trace or trap.
    GHSA-q8hx-mm92-4wvg

  • Fix a race condition could lead to WebAssembly control-flow integrity and type
    safety violations.
    GHSA-7qmx-3fpx-r45m

v22.0.1: Release Wasmtime 22.0.1 (#9364)

09 Oct 16:57
6e4dbe3
Compare
Choose a tag to compare

22.0.1

Released 2024-10-09.

Fixed

  • Fix a runtime crash when combining tail-calls with host imports that capture a
    stack trace or trap.
    GHSA-q8hx-mm92-4wvg

  • Fix a race condition could lead to WebAssembly control-flow integrity and type
    safety violations.
    GHSA-7qmx-3fpx-r45m

v21.0.2: Release Wasmtime 21.0.2 (#9363)

09 Oct 17:03
70ceccd
Compare
Choose a tag to compare

21.0.2

Released 2024-10-09.

Fixed

  • Fix a runtime crash when combining tail-calls with host imports that capture a
    stack trace or trap.
    GHSA-q8hx-mm92-4wvg

  • Fix a race condition could lead to WebAssembly control-flow integrity and type
    safety violations.
    GHSA-7qmx-3fpx-r45m