Security and Correctness in Wasmtime
Talkat WasmCon 2023 · on Thursday, 2023-09-07· at 15:30· Grand Ballroom I, Hyatt Regency Bellevue, 900 Bellevue Way NE·
summary
Wasmtime implements its runtime in Rust to eliminate memory-safety bugs, uses cargo-vet to require manual audits of new dependencies, and achieves microsecond instantiation so servers can create disposable instances per request. Continuous 24/7 fuzzing with libFuzzer, wasm-smith generators, differential runs against V8 and a verified spec, and custom oracles find logic and miscompilation bugs. Ongoing formal work includes a verawasM translation validator that proves sandboxing for Cranelift output and a verifier for instruction selection (Aisle); Spectre mitigations and a two-release backport policy complete the stack.
AI-written summary · about
chapters (5)
- 0:00Start
- 0:05A Safe Implementation Language
- 7:33Ubiquitous Fuzzing
- 21:44microarchitecture side effects
- 25:32A Plan For When Things Go Wrong
related talks
26mSyscall Me by Your Name: Sandboxing Wasm Programs
32mRunning Wasmtime in Hardware-Isolated Microenvironments
34mPlaying Safely in the...
40mFull-Stack Correctness in Wasm: Eliminating Bugs Inside and Outside the Sandbox
29mWASM in the Kernel: evolving threat detection at runtime
17mWaltzz: WebAssembly Runtime Fuzzing with Stack-Invariant Transformation
48mDon't Trust Anything! Real-world Uses For WebAssembly
42mAdventures in Making Wasm Fast and More Secure