Commit b87e712
committed
feat: improved WASI sandboxing
Implements a restricted subset of the WASI ABI (wasi_snapshot_preview1) to support proxy-wasm modules that require base level WASI functionality. This implementation adds a ABI_WASI class to handle WASI-specific functions:
- Supports core WASI functions required by proxy-wasm spec
- Implements fd_write for stdout/stderr logging
- Adds support for clock, random, environment, and args functions
This should result in a better sandboxing of the guest modules.1 parent 59b7566 commit b87e712
File tree
4 files changed
+390
-64
lines changed- proxy-wasm-java-host/src/main/java/io/roastedroot/proxywasm
- internal
4 files changed
+390
-64
lines changedLines changed: 0 additions & 15 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
8 | | - | |
9 | 8 | | |
10 | 9 | | |
11 | 10 | | |
| |||
319 | 318 | | |
320 | 319 | | |
321 | 320 | | |
322 | | - | |
323 | | - | |
324 | | - | |
325 | | - | |
326 | | - | |
327 | | - | |
328 | | - | |
329 | | - | |
330 | | - | |
331 | | - | |
332 | | - | |
333 | | - | |
334 | | - | |
335 | | - | |
336 | 321 | | |
337 | 322 | | |
338 | 323 | | |
| |||
Lines changed: 14 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
8 | 8 | | |
9 | 9 | | |
10 | 10 | | |
| 11 | + | |
11 | 12 | | |
12 | 13 | | |
13 | 14 | | |
| |||
1921 | 1922 | | |
1922 | 1923 | | |
1923 | 1924 | | |
| 1925 | + | |
| 1926 | + | |
| 1927 | + | |
| 1928 | + | |
| 1929 | + | |
| 1930 | + | |
| 1931 | + | |
| 1932 | + | |
| 1933 | + | |
| 1934 | + | |
| 1935 | + | |
| 1936 | + | |
| 1937 | + | |
1924 | 1938 | | |
0 commit comments