[Security] Out-of-Bound Memory Read on "Environment_ReleaseCodePages" Function

[mobsceneZ]

Environment

OS               : Linux 5.15.146.1-microsoft-standard-WSL2 #1 SMP Thu Jan 11 04:09:03 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
Commit           : 139076a98b8321b67f850a844f558b5e91b5ac83
Version          : 0.5.0
Clang Verison    : 13.0.0
Build            : mkdir -p build && cd build && export CC="clang" CXX="clang++" CFLAGS="-fsanitize=address -g" CXXFLAGS="-fsanitize=address -g" && cmake .. && make -j8
Affected Tool    : wasm3
Enabled Features : None
Impact           : Out-of-Bound Memory Read
Command          : wasm3/build/wasm3 --func main poc.wasm
Validation       : Invalid **(therefore possibly related to incomplete validation in wasm3)**

Proof of Concept

wasm3-poc-19.zip

Stack Trace Provide By AddressSanitizer

Error: function lookup failed
AddressSanitizer:DEADLYSIGNAL
=================================================================
==6714==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000030 (pc 0x000000538eb6 bp 0x7ffff3d6ab50 sp 0x7ffff3d69f80 T0)
==6714==The signal is caused by a READ memory access.
==6714==Hint: address points to the zero page.
    #0 0x538eb6 in Environment_ReleaseCodePages /home/lain/wasm3/source/m3_env.c
    #1 0x538eb6 in Runtime_Release /home/lain/wasm3/source/m3_env.c:234:5
    #2 0x538eb6 in m3_FreeRuntime /home/lain/wasm3/source/m3_env.c:248:9
    #3 0x4fba46 in main /home/lain/wasm3/platforms/app/main.c:722:5
    #4 0x7fba1a7c4082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16
    #5 0x41ea5d in _start (/home/lain/wasm3/build/wasm3+0x41ea5d)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /home/lain/wasm3/source/m3_env.c in Environment_ReleaseCodePages
==6714==ABORTING