WebAssembly Weekly - WebAssembly Weekly News

View this email in your browser
A free weekly round-up of all things WebAssembly

Issue #151


Exploitation of a JavaScriptCore WebAssembly Vulnerability

RET2.IO

This is a fascinating, but quite in-depth, article that describe a vulnerability (which has been patched) that some researchers found in JavaScriptCore, the JavaScript engine used in WebKit and Apple Safari. This article also gives some interesting insight into WebAssembly execution, which follows a similar tiered approach to JavaScipt, starting with running the wasm module within an interpreter and followed by multiple tiers of JIT optimisation.

In brief, this exploit focusses on the WebAssembly Interpreter. Through inspection of the code they realised that if the stack size exceeded 0xffffffff, it would overflow to zero, allowing them to escape from their allocated stack. Whilst a stack depth of 0xffffffff seems improbable, they found a creative way to achieve this.

Overflowing of integers is a tricky issue to address, sadly Rust doesn’t have a solid solution to this problem either.

Mastershot

MASTERSOT.APP

Mastershot is a web-based video editor, based on the WebAssembly version of FFmpeg which I wrote about a few months ago. By running the entire application client-side, Mastershot is able to provide a secure, fast and simple service. I’m sure we’ll see more WebAssembly-based browser applications in the future.

Making JavaScript run fast on WebAssembly

BYTECODEALLIANCE.ORG

This blog post looks at optimisation of JavaScript running within WebAssemly. - “Hang on”, I hear you say, “WebAssembly runs within the browser, alongside JavaScript, why would I run JavaScript within WebAssembly?” - good question!

The WebAssembly is being adopted as a runtime for various other environments, e.g. serverless, smart contracts, plugin host. In many of these instances there is a desire to run JavaScript code. So in a somewhat surprising ‘turning of the tables’, WebAssembly becomes the host for JavaScript.

let me help you

Unfortunately, many of the techniques used to make JavaScript run quickly within the browser (JIT) don’t work when it runs within WebAssembly.

This blog post covers a whole host of creative new ideas that make JavaScript run much more quickly within a WebAssembly host environment.

How to make plugins system with Rust and WebAssembly

ARCANA.RS

Talking of using WebAssembly as a host, this blog post explores gives a practical introduction to incoporating WebAssembly so that it can host plugins.

kalker

STRCT.NET

Kallker is a feature-rich scientific calculator that runs in the browser. It’s written in Rust, with the sourcecode all available on GitHub.




https://twitter.com/WasmWeekly
Website
Copyright © 2021 WebAssemblyWeekly, All rights reserved.
You received this email because you signed up to the WebAssemblyWeekly newsletter

Our mailing address is:
WebAssemblyWeekly
Scott Logic
1 St. James Place
Newcastle, NE1 4XF
United Kingdom

Add us to your address book


Want to change how you receive these emails?
You can update your preferences or unsubscribe from this list.

Email Marketing Powered by Mailchimp

Older messages

WebAssembly Weekly News

Friday, May 28, 2021

A free weekly round-up of all things WebAssembly View this email in your browser A free weekly round-up of all things WebAssembly Issue #150 Introducing WebContainers: Run Node.js natively in your

WebAssembly Weekly News

Friday, May 14, 2021

A free weekly round-up of all things WebAssembly View this email in your browser A free weekly round-up of all things WebAssembly Issue #149 I'm really looking forward to being the track host for

WebAssembly Weekly News

Friday, April 30, 2021

A free weekly round-up of all things WebAssembly View this email in your browser A free weekly round-up of all things WebAssembly Issue #148 Welcome to issue #148 of WebAssembly (sometimes) Weekly, I

WebAssembly Weekly News

Friday, April 9, 2021

A free weekly round-up of all things WebAssembly View this email in your browser A free weekly round-up of all things WebAssembly Issue #147 Speeding Up Webamp's Music Visualizer with WebAssembly

WebAssembly Weekly News

Friday, March 26, 2021

A free weekly round-up of all things WebAssembly View this email in your browser A free weekly round-up of all things WebAssembly Issue #146 VM Matters: A Comparison of WASM VMs and EVMs in the

You Might Also Like

Charted | Global Economic Confidence in 2025, by Country 🌎

Wednesday, December 25, 2024

While emerging markets in Asia have the strongest confidence in the global economy looking ahead, European countries are most pessimistic. View Online | Subscribe | Download Our App FEATURED STORY

Top Tech Deals 🎅 Sony Headphones, iPhone Cases, 4K Projector, and More!

Wednesday, December 25, 2024

The season of giving is upon us. How-To Geek Logo December 25, 2024 Top Tech Deals: Sony Headphones, iPhone Cases, 4K Projector, and More! The season of giving is upon us. Happy Holidays! If you're

Why the Race to AGI is Humanitys Defining Moment

Wednesday, December 25, 2024

Top Tech Content sent at Noon! Boost Your Article on HackerNoon for $159.99! Read this email in your browser How are you, @newsletterest1? 🪐 What's happening in tech today, December 25, 2024? The

Iran's Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware

Wednesday, December 25, 2024

THN Daily Updates Newsletter cover The Data Science Handbook, 2nd Edition ($60.00 Value) FREE for a Limited Time Practical, accessible guide to becoming a data scientist, updated to include the latest

Software Testing Weekly - Issue 251

Wednesday, December 25, 2024

GitHub Copilot is free! 🤖 View on the Web Archives ISSUE 251 December 25th 2024 COMMENT Welcome to the 251st issue! In case you missed it — GitHub Copilot is free! The free version works with Visual

Daily Coding Problem: Problem #1647 [Medium]

Tuesday, December 24, 2024

Daily Coding Problem Good morning! Here's your coding interview problem for today. This problem was asked by Square. In front of you is a row of N coins, with values v 1 , v 1 , ..., v n . You are

Sentiment Analysis, Topological Sort, Web Security, and More

Tuesday, December 24, 2024

Exploring Modern Sentiment Analysis Approaches in Python #661 – DECEMBER 24, 2024 VIEW IN BROWSER The PyCoder's Weekly Logo Exploring Modern Sentiment Analysis Approaches in Python What are the

🤫 Do Not Disturb Mode Is My Secret to Sanity — 8 Gadgets I Want To See Nintendo Make

Tuesday, December 24, 2024

Also: The Best Christmas Movies to Watch on Netflix, and More! How-To Geek Logo December 24, 2024 Did You Know Their association with the Christmas season might make you think poinsettias hail from a

😱 AzureEdge.net DNS Retiring Jan. 2025, 🚀 Microsoft Phi-4 AI Outperforms, 🔒 Microsoft Secure Future Initiative

Tuesday, December 24, 2024

Blog | Advertise | View Online Your trusted source for Cloud, AI and DevOps guidance with industry expert Chris Pietschmann! Phi-4: Microsoft's New Small Language Model Outperforms Giants in AI

Mapped | The Top Health Insurance Companies by State 🏥

Tuesday, December 24, 2024

In 13 US states, a single company dominates the health insurance market, holding at least half of the total market share. View Online | Subscribe | Download Our App Presented by: Global X ETFs Power