Segfault in ctor-eval when optimizing an imported table of funcrefs

I ran the following example from main to see whether the no-op function call would get optimized away:

;; repro.wast
;; bin/wasm-ctor-eval --ctors=test repro.wast
(module
  (import "env" "table" (table $t 1 funcref))
  (type $v (func))
  (func $target (type $v)
    (nop)
  )
  (elem (table $t) (i32.const 0) func $target)

  (func $test
    (call_indirect $t (type $v) (i32.const 0))
  )
  (export "test" (func $test))
)

Unlike other similar issues, this one does import from env which is expected to work.

From checking lldb, the crash is from dereferencing null in tableSize: link. Maybe this is related to the comment immediately above?

Fixed by #8194.

 bin/wasm-ctor-eval --ctors=test repro.wast -S -o repro-out.wast
  ...stopping since could not create module instance: Imported table access.

FWIW the no-op function call is not optimized away:

(module
 (type $v (func))
 (import "env" "table" (table $t 1 funcref))
 (elem $0 (i32.const 0) $target)
 (export "test" (func $test))
 (func $target
  (nop)
 )
 (func $test
  (call_indirect (type $v)
   (i32.const 0)
  )
 )
)

Navigation Menu

Repository navigation

Segfault in ctor-eval when optimizing an imported table of funcrefs #8209

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Segfault in ctor-eval when optimizing an imported table of funcrefs #8209

Description

Activity

stevenfontanella commented on Jan 22, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions