1 use crate::linker::{Definition, DefinitionType};
2 use crate::prelude::*;
3 use crate::runtime::vm::{
4     self, Imports, ModuleRuntimeInfo, VMFuncRef, VMFunctionImport, VMGlobalImport, VMMemoryImport,
5     VMStore, VMTableImport, VMTagImport,
6 };
7 use crate::store::{
8     AllocateInstanceKind, Asyncness, InstanceId, StoreInstanceId, StoreOpaque, StoreResourceLimiter,
9 };
10 use crate::types::matching;
11 use crate::{
12     AsContextMut, Engine, Export, Extern, Func, Global, Memory, Module, ModuleExport, SharedMemory,
13     StoreContext, StoreContextMut, Table, Tag, TypedFunc,
14 };
15 use alloc::sync::Arc;
16 use core::ptr::NonNull;
17 use wasmparser::WasmFeatures;
18 use wasmtime_environ::{
19     EntityIndex, EntityType, FuncIndex, GlobalIndex, MemoryIndex, TableIndex, TagIndex, TypeTrace,
20 };
21 
22 /// An instantiated WebAssembly module.
23 ///
24 /// This type represents the instantiation of a [`Module`]. Once instantiated
25 /// you can access the [`exports`](Instance::exports) which are of type
26 /// [`Extern`] and provide the ability to call functions, set globals, read
27 /// memory, etc. When interacting with any wasm code you'll want to make an
28 /// [`Instance`] to call any code or execute anything.
29 ///
30 /// Instances are owned by a [`Store`](crate::Store) which is passed in at
31 /// creation time. It's recommended to create instances with
32 /// [`Linker::instantiate`](crate::Linker::instantiate) or similar
33 /// [`Linker`](crate::Linker) methods, but a more low-level constructor is also
34 /// available as [`Instance::new`].
35 #[derive(Copy, Clone, Debug, PartialEq, Eq)]
36 #[repr(C)]
37 pub struct Instance {
38     pub(crate) id: StoreInstanceId,
39 }
40 
41 // Double-check that the C representation in `instance.h` matches our in-Rust
42 // representation here in terms of size/alignment/etc.
43 const _: () = {
44     #[repr(C)]
45     struct C(u64, usize);
46     assert!(core::mem::size_of::<C>() == core::mem::size_of::<Instance>());
47     assert!(core::mem::align_of::<C>() == core::mem::align_of::<Instance>());
48     assert!(core::mem::offset_of!(Instance, id) == 0);
49 };
50 
51 impl Instance {
52     /// Creates a new [`Instance`] from the previously compiled [`Module`] and
53     /// list of `imports` specified.
54     ///
55     /// This method instantiates the `module` provided with the `imports`,
56     /// following the procedure in the [core specification][inst] to
57     /// instantiate. Instantiation can fail for a number of reasons (many
58     /// specified below), but if successful the `start` function will be
59     /// automatically run (if specified in the `module`) and then the
60     /// [`Instance`] will be returned.
61     ///
62     /// Per the WebAssembly spec, instantiation includes running the module's
63     /// start function, if it has one (not to be confused with the `_start`
64     /// function, which is not run).
65     ///
66     /// Note that this is a low-level function that just performs an
67     /// instantiation. See the [`Linker`](crate::Linker) struct for an API which
68     /// provides a convenient way to link imports and provides automatic Command
69     /// and Reactor behavior.
70     ///
71     /// ## Providing Imports
72     ///
73     /// The entries in the list of `imports` are intended to correspond 1:1
74     /// with the list of imports returned by [`Module::imports`]. Before
75     /// calling [`Instance::new`] you'll want to inspect the return value of
76     /// [`Module::imports`] and, for each import type, create an [`Extern`]
77     /// which corresponds to that type.  These [`Extern`] values are all then
78     /// collected into a list and passed to this function.
79     ///
80     /// Note that this function is intentionally relatively low level. For an
81     /// easier time passing imports by doing name-based resolution it's
82     /// recommended to instead use the [`Linker`](crate::Linker) type.
83     ///
84     /// ## Errors
85     ///
86     /// This function can fail for a number of reasons, including, but not
87     /// limited to:
88     ///
89     /// * The number of `imports` provided doesn't match the number of imports
90     ///   returned by the `module`'s [`Module::imports`] method.
91     /// * The type of any [`Extern`] doesn't match the corresponding
92     ///   [`ExternType`] entry that it maps to.
93     /// * The `start` function in the instance, if present, traps.
94     /// * Module/instance resource limits are exceeded.
95     /// * The `store` provided requires the use of [`Instance::new_async`]
96     ///   instead, such as if epochs or fuel are configured.
97     ///
98     /// When instantiation fails it's recommended to inspect the return value to
99     /// see why it failed, or bubble it upwards. If you'd like to specifically
100     /// check for trap errors, you can use `error.downcast::<Trap>()`. For more
101     /// about error handling see the [`Trap`] documentation.
102     ///
103     /// [`Trap`]: crate::Trap
104     ///
105     /// # Panics
106     ///
107     /// This function will panic if any [`Extern`] supplied is not owned by
108     /// `store`.
109     ///
110     /// [inst]: https://webassembly.github.io/spec/core/exec/modules.html#exec-instantiation
111     /// [`ExternType`]: crate::ExternType
112     pub fn new(
113         mut store: impl AsContextMut,
114         module: &Module,
115         imports: &[Extern],
116     ) -> Result<Instance> {
117         let mut store = store.as_context_mut();
118         store.0.validate_sync_call()?;
119         let imports = Instance::typecheck_externs(store.0, module, imports)?;
120         // Note that the unsafety here should be satisfied by the call to
121         // `typecheck_externs` above which satisfies the condition that all
122         // the imports are valid for this module.
123         vm::assert_ready(unsafe {
124             Instance::new_started(&mut store, module, imports.as_ref(), Asyncness::No)
125         })
126     }
127 
128     /// Same as [`Instance::new`], except for usage in [asynchronous stores].
129     ///
130     /// For more details about this function see the documentation on
131     /// [`Instance::new`]. The only difference between these two methods is that
132     /// this one will asynchronously invoke the wasm start function in case it
133     /// calls any imported function which is an asynchronous host function (e.g.
134     /// created with [`Func::new_async`](crate::Func::new_async).
135     ///
136     /// # Panics
137     ///
138     /// This function will panic, like [`Instance::new`], if any [`Extern`]
139     /// specified does not belong to `store`.
140     ///
141     /// # Examples
142     ///
143     /// An example of using this function:
144     ///
145     /// ```
146     /// use wasmtime::{Result, Store, Engine, Module, Instance};
147     ///
148     /// #[tokio::main]
149     /// async fn main() -> Result<()> {
150     ///     let engine = Engine::default();
151     ///
152     ///     // For this example, a module with no imports is being used hence
153     ///     // the empty array to `Instance::new_async`.
154     ///     let module = Module::new(&engine, "(module)")?;
155     ///     let mut store = Store::new(&engine, ());
156     ///     let instance = Instance::new_async(&mut store, &module, &[]).await?;
157     ///
158     ///     // ... use `instance` and exports and such ...
159     ///
160     ///     Ok(())
161     /// }
162     /// ```
163     ///
164     /// Note, though, that the future returned from this function is only
165     /// `Send` if the store's own data is `Send` meaning that this does not
166     /// compile for example:
167     ///
168     /// ```compile_fail
169     /// use wasmtime::{Result, Store, Engine, Module, Instance};
170     /// use std::rc::Rc;
171     ///
172     /// #[tokio::main]
173     /// async fn main() -> Result<()> {
174     ///     let engine = Engine::default();
175     ///
176     ///     let module = Module::new(&engine, "(module)")?;
177     ///
178     ///     // Note that `Rc<()>` is NOT `Send`, which is what many future
179     ///     // runtimes require and below will cause a failure.
180     ///     let mut store = Store::new(&engine, Rc::new(()));
181     ///
182     ///     // Compile failure because `Store<Rc<()>>` is not `Send`
183     ///     assert_send(Instance::new_async(&mut store, &module, &[])).await?;
184     ///
185     ///     Ok(())
186     /// }
187     ///
188     /// fn assert_send<T: Send>(t: T) -> T { t }
189     /// ```
190     #[cfg(feature = "async")]
191     pub async fn new_async(
192         mut store: impl AsContextMut,
193         module: &Module,
194         imports: &[Extern],
195     ) -> Result<Instance> {
196         let mut store = store.as_context_mut();
197         let imports = Instance::typecheck_externs(store.0, module, imports)?;
198         // See `new` for notes on this unsafety
199         unsafe { Instance::new_started(&mut store, module, imports.as_ref(), Asyncness::Yes).await }
200     }
201 
202     fn typecheck_externs(
203         store: &mut StoreOpaque,
204         module: &Module,
205         imports: &[Extern],
206     ) -> Result<OwnedImports> {
207         for import in imports {
208             if !import.comes_from_same_store(store) {
209                 bail!("cross-`Store` instantiation is not currently supported");
210             }
211         }
212 
213         typecheck(module, imports, |cx, ty, item| {
214             let item = DefinitionType::from(store, item);
215             cx.definition(ty, &item)
216         })?;
217 
218         // When pushing functions into `OwnedImports` it's required that their
219         // `wasm_call` fields are all filled out. This `module` is guaranteed
220         // to have any trampolines necessary for functions so register the
221         // module with the store and then attempt to fill out any outstanding
222         // holes.
223         //
224         // Note that under normal operation this shouldn't do much as the list
225         // of funcs-with-holes should generally be empty. As a result the
226         // process of filling this out is not super optimized at this point.
227         let (modules, engine, breakpoints) = store.modules_and_engine_and_breakpoints_mut();
228         modules.register_module(module, engine, breakpoints)?;
229         let (funcrefs, modules) = store.func_refs_and_modules();
230         funcrefs.fill(modules);
231 
232         let mut owned_imports = OwnedImports::new(module)?;
233         for import in imports {
234             owned_imports.push(import, store)?;
235         }
236         Ok(owned_imports)
237     }
238 
239     /// Internal function to create an instance and run the start function.
240     ///
241     /// This function's unsafety is the same as `Instance::new_raw`.
242     pub(crate) async unsafe fn new_started<T>(
243         store: &mut StoreContextMut<'_, T>,
244         module: &Module,
245         imports: Imports<'_>,
246         asyncness: Asyncness,
247     ) -> Result<Instance> {
248         let (instance, start) = {
249             let (mut limiter, store) = store.0.resource_limiter_and_store_opaque();
250             // SAFETY: the safety contract of `new_raw` is the same as this
251             // function.
252             unsafe { Instance::new_raw(store, limiter.as_mut(), module, imports, asyncness).await? }
253         };
254         if let Some(start) = start {
255             if asyncness == Asyncness::No {
256                 instance.start_raw(store, start)?;
257             } else {
258                 #[cfg(feature = "async")]
259                 {
260                     store
261                         .on_fiber(|store| instance.start_raw(store, start))
262                         .await??;
263                 }
264                 #[cfg(not(feature = "async"))]
265                 unreachable!();
266             }
267         }
268         Ok(instance)
269     }
270 
271     /// Internal function to create an instance which doesn't have its `start`
272     /// function run yet.
273     ///
274     /// This is not intended to be exposed from Wasmtime, it's intended to
275     /// refactor out common code from `new_started` and `new_started_async`.
276     ///
277     /// Note that this step needs to be run on a fiber in async mode even
278     /// though it doesn't do any blocking work because an async resource
279     /// limiter may need to yield.
280     ///
281     /// # Unsafety
282     ///
283     /// This method is unsafe because it does not type-check the `imports`
284     /// provided. The `imports` provided must be suitable for the module
285     /// provided as well.
286     async unsafe fn new_raw(
287         store: &mut StoreOpaque,
288         mut limiter: Option<&mut StoreResourceLimiter<'_>>,
289         module: &Module,
290         imports: Imports<'_>,
291         asyncness: Asyncness,
292     ) -> Result<(Instance, Option<FuncIndex>)> {
293         if !Engine::same(store.engine(), module.engine()) {
294             bail!("cross-`Engine` instantiation is not currently supported");
295         }
296         store.bump_resource_counts(module)?;
297 
298         // Allocate the GC heap, if necessary.
299         if module.env_module().needs_gc_heap {
300             store.ensure_gc_store(limiter.as_deref_mut()).await?;
301         }
302 
303         let compiled_module = module.compiled_module();
304 
305         // Register the module just before instantiation to ensure we keep the module
306         // properly referenced while in use by the store.
307         let (modules, engine, breakpoints) = store.modules_and_engine_and_breakpoints_mut();
308         let module_id = modules.register_module(module, engine, breakpoints)?;
309 
310         // The first thing we do is issue an instance allocation request
311         // to the instance allocator. This, on success, will give us an
312         // instance handle.
313         //
314         // SAFETY: this module, by construction, was already validated within
315         // the store.
316         let id = unsafe {
317             store
318                 .allocate_instance(
319                     limiter.as_deref_mut(),
320                     AllocateInstanceKind::Module(module_id),
321                     &ModuleRuntimeInfo::Module(module.clone()),
322                     imports,
323                 )
324                 .await?
325         };
326 
327         // Additionally, before we start doing fallible instantiation, we
328         // do one more step which is to insert an `InstanceData`
329         // corresponding to this instance. This `InstanceData` can be used
330         // via `Caller::get_export` if our instance's state "leaks" into
331         // other instances, even if we don't return successfully from this
332         // function.
333         //
334         // We don't actually load all exports from the instance at this
335         // time, instead preferring to lazily load them as they're demanded.
336         // For module/instance exports, though, those aren't actually
337         // stored in the instance handle so we need to immediately handle
338         // those here.
339         let instance = Instance::from_wasmtime(id, store);
340 
341         // Now that we've recorded all information we need to about this
342         // instance within a `Store` we can start performing fallible
343         // initialization. Note that we still defer the `start` function to
344         // later since that may need to run asynchronously.
345         //
346         // If this returns an error (or if the start function traps) then
347         // any other initialization which may have succeeded which placed
348         // items from this instance into other instances should be ok when
349         // those items are loaded and run we'll have all the metadata to
350         // look at them.
351         let bulk_memory = store
352             .engine()
353             .features()
354             .contains(WasmFeatures::BULK_MEMORY);
355 
356         vm::initialize_instance(
357             store,
358             limiter,
359             id,
360             compiled_module.module(),
361             bulk_memory,
362             asyncness,
363         )
364         .await?;
365 
366         Ok((instance, compiled_module.module().start_func))
367     }
368 
369     pub(crate) fn from_wasmtime(id: InstanceId, store: &mut StoreOpaque) -> Instance {
370         Instance {
371             id: StoreInstanceId::new(store.id(), id),
372         }
373     }
374 
375     fn start_raw<T>(&self, store: &mut StoreContextMut<'_, T>, start: FuncIndex) -> Result<()> {
376         // If a start function is present, invoke it. Make sure we use all the
377         // trap-handling configuration in `store` as well.
378         let store_id = store.0.id();
379         let (mut instance, registry) = self.id.get_mut_and_module_registry(store.0);
380         // SAFETY: the `store_id` is the id of the store that owns this
381         // instance and any function stored within the instance.
382         let f = unsafe {
383             instance
384                 .as_mut()
385                 .get_exported_func(registry, store_id, start)
386         };
387         let caller_vmctx = instance.vmctx();
388         unsafe {
389             let funcref = f.vm_func_ref(store.0);
390             super::func::invoke_wasm_and_catch_traps(store, |_default_caller, vm| {
391                 VMFuncRef::array_call(funcref, vm, caller_vmctx, NonNull::from(&mut []))
392             })?;
393         }
394         Ok(())
395     }
396 
397     /// Get this instance's module.
398     pub fn module<'a, T: 'static>(&self, store: impl Into<StoreContext<'a, T>>) -> &'a Module {
399         self._module(store.into().0)
400     }
401 
402     pub(crate) fn _module<'a>(&self, store: &'a StoreOpaque) -> &'a Module {
403         store.module_for_instance(self.id).unwrap()
404     }
405 
406     /// Returns the list of exported items from this [`Instance`].
407     ///
408     /// # Panics
409     ///
410     /// Panics if `store` does not own this instance.
411     pub fn exports<'a, T: 'static>(
412         &'a self,
413         store: impl Into<StoreContextMut<'a, T>>,
414     ) -> impl ExactSizeIterator<Item = Export<'a>> + 'a {
415         self._exports(store.into().0)
416     }
417 
418     fn _exports<'a>(
419         &'a self,
420         store: &'a mut StoreOpaque,
421     ) -> impl ExactSizeIterator<Item = Export<'a>> + 'a {
422         let module = store[self.id].env_module().clone();
423         let mut items = Vec::new();
424         for (_name, entity) in module.exports.iter() {
425             items.push(self._get_export(store, *entity));
426         }
427         let module = store[self.id].env_module();
428         module
429             .exports
430             .iter()
431             .zip(items)
432             .map(|((name, _), item)| Export::new(&module.strings[name], item))
433     }
434 
435     /// Looks up an exported [`Extern`] value by name.
436     ///
437     /// This method will search the module for an export named `name` and return
438     /// the value, if found.
439     ///
440     /// Returns `None` if there was no export named `name`.
441     ///
442     /// # Panics
443     ///
444     /// Panics if `store` does not own this instance.
445     ///
446     /// # Why does `get_export` take a mutable context?
447     ///
448     /// This method requires a mutable context because an instance's exports are
449     /// lazily populated, and we cache them as they are accessed. This makes
450     /// instantiating a module faster, but also means this method requires a
451     /// mutable context.
452     pub fn get_export(&self, mut store: impl AsContextMut, name: &str) -> Option<Extern> {
453         let store = store.as_context_mut().0;
454         let module = store[self.id].env_module();
455         let name = module.strings.get_atom(name)?;
456         let entity = *module.exports.get(&name)?;
457         Some(self._get_export(store, entity))
458     }
459 
460     /// Looks up an exported [`Extern`] value by a [`ModuleExport`] value.
461     ///
462     /// This is similar to [`Instance::get_export`] but uses a [`ModuleExport`] value to avoid
463     /// string lookups where possible. [`ModuleExport`]s can be obtained by calling
464     /// [`Module::get_export_index`] on the [`Module`] that this instance was instantiated with.
465     ///
466     /// This method will search the module for an export with a matching entity index and return
467     /// the value, if found.
468     ///
469     /// Returns `None` if there was no export with a matching entity index.
470     ///
471     /// # Panics
472     ///
473     /// Panics if `store` does not own this instance.
474     pub fn get_module_export(
475         &self,
476         mut store: impl AsContextMut,
477         export: &ModuleExport,
478     ) -> Option<Extern> {
479         let store = store.as_context_mut().0;
480 
481         // Verify the `ModuleExport` matches the module used in this instance.
482         if self._module(store).id() != export.module {
483             return None;
484         }
485 
486         Some(self._get_export(store, export.entity))
487     }
488 
489     fn _get_export(&self, store: &mut StoreOpaque, entity: EntityIndex) -> Extern {
490         let id = store.id();
491         // SAFETY: the store `id` owns this instance and all exports contained
492         // within.
493         let export = unsafe {
494             let (instance, registry) = self.id.get_mut_and_module_registry(store);
495             instance.get_export_by_index_mut(registry, id, entity)
496         };
497         Extern::from_wasmtime_export(export, store)
498     }
499 
500     /// Looks up an exported [`Func`] value by name.
501     ///
502     /// Returns `None` if there was no export named `name`, or if there was but
503     /// it wasn't a function.
504     ///
505     /// # Panics
506     ///
507     /// Panics if `store` does not own this instance.
508     pub fn get_func(&self, store: impl AsContextMut, name: &str) -> Option<Func> {
509         self.get_export(store, name)?.into_func()
510     }
511 
512     /// Looks up an exported [`Func`] value by name and with its type.
513     ///
514     /// This function is a convenience wrapper over [`Instance::get_func`] and
515     /// [`Func::typed`]. For more information see the linked documentation.
516     ///
517     /// Returns an error if `name` isn't a function export or if the export's
518     /// type did not match `Params` or `Results`
519     ///
520     /// # Panics
521     ///
522     /// Panics if `store` does not own this instance.
523     pub fn get_typed_func<Params, Results>(
524         &self,
525         mut store: impl AsContextMut,
526         name: &str,
527     ) -> Result<TypedFunc<Params, Results>>
528     where
529         Params: crate::WasmParams,
530         Results: crate::WasmResults,
531     {
532         let f = self
533             .get_export(store.as_context_mut(), name)
534             .and_then(|f| f.into_func())
535             .ok_or_else(|| format_err!("failed to find function export `{name}`"))?;
536         Ok(f.typed::<Params, Results>(store)
537             .with_context(|| format!("failed to convert function `{name}` to given type"))?)
538     }
539 
540     /// Looks up an exported [`Table`] value by name.
541     ///
542     /// Returns `None` if there was no export named `name`, or if there was but
543     /// it wasn't a table.
544     ///
545     /// # Panics
546     ///
547     /// Panics if `store` does not own this instance.
548     pub fn get_table(&self, store: impl AsContextMut, name: &str) -> Option<Table> {
549         self.get_export(store, name)?.into_table()
550     }
551 
552     /// Looks up an exported [`Memory`] value by name.
553     ///
554     /// Returns `None` if there was no export named `name`, or if there was but
555     /// it wasn't a memory.
556     ///
557     /// # Panics
558     ///
559     /// Panics if `store` does not own this instance.
560     pub fn get_memory(&self, store: impl AsContextMut, name: &str) -> Option<Memory> {
561         self.get_export(store, name)?.into_memory()
562     }
563 
564     /// Looks up an exported [`SharedMemory`] value by name.
565     ///
566     /// Returns `None` if there was no export named `name`, or if there was but
567     /// it wasn't a shared memory.
568     ///
569     /// # Panics
570     ///
571     /// Panics if `store` does not own this instance.
572     pub fn get_shared_memory(
573         &self,
574         mut store: impl AsContextMut,
575         name: &str,
576     ) -> Option<SharedMemory> {
577         let mut store = store.as_context_mut();
578         self.get_export(&mut store, name)?.into_shared_memory()
579     }
580 
581     /// Looks up an exported [`Global`] value by name.
582     ///
583     /// Returns `None` if there was no export named `name`, or if there was but
584     /// it wasn't a global.
585     ///
586     /// # Panics
587     ///
588     /// Panics if `store` does not own this instance.
589     pub fn get_global(&self, store: impl AsContextMut, name: &str) -> Option<Global> {
590         self.get_export(store, name)?.into_global()
591     }
592 
593     /// Looks up a tag [`Tag`] by name.
594     ///
595     /// Returns `None` if there was no export named `name`, or if there was but
596     /// it wasn't a tag.
597     ///
598     /// # Panics
599     ///
600     /// Panics if `store` does not own this instance.
601     pub fn get_tag(&self, store: impl AsContextMut, name: &str) -> Option<Tag> {
602         self.get_export(store, name)?.into_tag()
603     }
604 
605     #[allow(
606         dead_code,
607         reason = "c-api crate does not yet support exnrefs and causes this method to be dead."
608     )]
609     pub(crate) fn id(&self) -> InstanceId {
610         self.id.instance()
611     }
612 
613     /// Return a unique-within-Store index for this `Instance`.
614     ///
615     /// Allows distinguishing instance identities when introspecting
616     /// the `Store`, e.g. via debug APIs.
617     ///
618     /// This index will match the instance's position in the sequence
619     /// returned by `Store::debug_all_instances()`.
620     #[cfg(feature = "debug")]
621     pub fn debug_index_in_store(&self) -> u32 {
622         self.id.instance().as_u32()
623     }
624 
625     /// Get all globals within this instance.
626     ///
627     /// Returns both import and defined globals.
628     ///
629     /// Returns both exported and non-exported globals.
630     ///
631     /// Gives access to the full globals space.
632     #[cfg(feature = "coredump")]
633     pub(crate) fn all_globals<'a>(
634         &'a self,
635         store: &'a mut StoreOpaque,
636     ) -> impl ExactSizeIterator<Item = (GlobalIndex, Global)> + 'a {
637         let store_id = store.id();
638         store[self.id].all_globals(store_id)
639     }
640 
641     /// Get all memories within this instance.
642     ///
643     /// Returns both import and defined memories.
644     ///
645     /// Returns both exported and non-exported memories.
646     ///
647     /// Gives access to the full memories space.
648     #[cfg(feature = "coredump")]
649     pub(crate) fn all_memories<'a>(
650         &'a self,
651         store: &'a StoreOpaque,
652     ) -> impl ExactSizeIterator<Item = (MemoryIndex, vm::ExportMemory)> + 'a {
653         let store_id = store.id();
654         store[self.id].all_memories(store_id)
655     }
656 }
657 
658 pub(crate) struct OwnedImports {
659     functions: TryPrimaryMap<FuncIndex, VMFunctionImport>,
660     tables: TryPrimaryMap<TableIndex, VMTableImport>,
661     memories: TryPrimaryMap<MemoryIndex, VMMemoryImport>,
662     globals: TryPrimaryMap<GlobalIndex, VMGlobalImport>,
663     tags: TryPrimaryMap<TagIndex, VMTagImport>,
664 }
665 
666 impl OwnedImports {
667     fn new(module: &Module) -> Result<OwnedImports, OutOfMemory> {
668         let mut ret = OwnedImports::empty();
669         ret.reserve(module)?;
670         Ok(ret)
671     }
672 
673     pub(crate) fn empty() -> OwnedImports {
674         OwnedImports {
675             functions: TryPrimaryMap::new(),
676             tables: TryPrimaryMap::new(),
677             memories: TryPrimaryMap::new(),
678             globals: TryPrimaryMap::new(),
679             tags: TryPrimaryMap::new(),
680         }
681     }
682 
683     pub(crate) fn reserve(&mut self, module: &Module) -> Result<(), OutOfMemory> {
684         let raw = module.compiled_module().module();
685         self.functions.reserve(raw.num_imported_funcs)?;
686         self.tables.reserve(raw.num_imported_tables)?;
687         self.memories.reserve(raw.num_imported_memories)?;
688         self.globals.reserve(raw.num_imported_globals)?;
689         self.tags.reserve(raw.num_imported_tags)?;
690         Ok(())
691     }
692 
693     #[cfg(feature = "component-model")]
694     pub(crate) fn clear(&mut self) {
695         self.functions.clear();
696         self.tables.clear();
697         self.memories.clear();
698         self.globals.clear();
699         self.tags.clear();
700     }
701 
702     fn push(&mut self, item: &Extern, store: &mut StoreOpaque) -> Result<(), OutOfMemory> {
703         match item {
704             Extern::Func(i) => {
705                 self.functions.push(i.vmimport(store))?;
706             }
707             Extern::Global(i) => {
708                 self.globals.push(i.vmimport(store))?;
709             }
710             Extern::Table(i) => {
711                 self.tables.push(i.vmimport(store))?;
712             }
713             Extern::Memory(i) => {
714                 self.memories.push(i.vmimport(store))?;
715             }
716             Extern::SharedMemory(i) => {
717                 self.memories.push(i.vmimport(store))?;
718             }
719             Extern::Tag(i) => {
720                 self.tags.push(i.vmimport(store))?;
721             }
722         }
723         Ok(())
724     }
725 
726     /// Note that this is unsafe as the validity of `item` is not verified and
727     /// it contains a bunch of raw pointers.
728     #[cfg(feature = "component-model")]
729     pub(crate) fn push_export(
730         &mut self,
731         store: &StoreOpaque,
732         item: &crate::runtime::vm::Export,
733     ) -> Result<(), OutOfMemory> {
734         match item {
735             crate::runtime::vm::Export::Function(f) => {
736                 // SAFETY: the funcref associated with a `Func` is valid to use
737                 // under the `store` that owns the function.
738                 let f = unsafe { f.vm_func_ref(store).as_ref() };
739                 self.functions.push(VMFunctionImport {
740                     wasm_call: f.wasm_call.unwrap(),
741                     array_call: f.array_call,
742                     vmctx: f.vmctx,
743                 })?;
744             }
745             crate::runtime::vm::Export::Global(g) => {
746                 self.globals.push(g.vmimport(store))?;
747             }
748             crate::runtime::vm::Export::Table(t) => {
749                 self.tables.push(t.vmimport(store))?;
750             }
751             crate::runtime::vm::Export::Memory(m) => {
752                 self.memories.push(m.vmimport(store))?;
753             }
754             crate::runtime::vm::Export::SharedMemory(_, vmimport) => {
755                 self.memories.push(*vmimport)?;
756             }
757             crate::runtime::vm::Export::Tag(t) => {
758                 self.tags.push(t.vmimport(store))?;
759             }
760         }
761         Ok(())
762     }
763 
764     pub(crate) fn as_ref(&self) -> Imports<'_> {
765         Imports {
766             tables: self.tables.values().as_slice(),
767             globals: self.globals.values().as_slice(),
768             memories: self.memories.values().as_slice(),
769             functions: self.functions.values().as_slice(),
770             tags: self.tags.values().as_slice(),
771         }
772     }
773 }
774 
775 /// An instance, pre-instantiation, that is ready to be instantiated.
776 ///
777 /// This structure represents an instance *just before* it was instantiated,
778 /// after all type-checking and imports have been resolved. The only thing left
779 /// to do for this instance is to actually run the process of instantiation.
780 ///
781 /// Note that an `InstancePre` may not be tied to any particular [`Store`] if
782 /// none of the imports it closed over are tied to any particular [`Store`].
783 ///
784 /// This structure is created through the [`Linker::instantiate_pre`] method,
785 /// which also has some more information and examples.
786 ///
787 /// [`Store`]: crate::Store
788 /// [`Linker::instantiate_pre`]: crate::Linker::instantiate_pre
789 pub struct InstancePre<T> {
790     module: Module,
791 
792     /// The items which this `InstancePre` use to instantiate the `module`
793     /// provided, passed to `Instance::new_started` after inserting them into a
794     /// `Store`.
795     ///
796     /// Note that this is stored as an `Arc` to quickly move a strong reference
797     /// to everything internally into a `Store<T>` without having to clone each
798     /// individual item.
799     items: Arc<TryVec<Definition>>,
800 
801     /// A count of `Definition::HostFunc` entries in `items` above to
802     /// preallocate space in a `Store` up front for all entries to be inserted.
803     host_funcs: usize,
804 
805     /// The `VMFuncRef`s for the functions in `items` that do not
806     /// have a `wasm_call` trampoline. We pre-allocate and pre-patch these
807     /// `VMFuncRef`s so that we don't have to do it at
808     /// instantiation time.
809     ///
810     /// This is an `Arc` for the same reason as `items`.
811     func_refs: Arc<TryVec<VMFuncRef>>,
812 
813     /// Whether or not any import in `items` is flagged as needing async.
814     ///
815     /// This is used to update stores during instantiation as to whether they
816     /// require async entrypoints.
817     asyncness: Asyncness,
818 
819     _marker: core::marker::PhantomData<fn() -> T>,
820 }
821 
822 /// InstancePre's clone does not require T: Clone
823 impl<T> Clone for InstancePre<T> {
824     fn clone(&self) -> Self {
825         Self {
826             module: self.module.clone(),
827             items: self.items.clone(),
828             host_funcs: self.host_funcs,
829             func_refs: self.func_refs.clone(),
830             asyncness: self.asyncness,
831             _marker: self._marker,
832         }
833     }
834 }
835 
836 impl<T: 'static> InstancePre<T> {
837     /// Creates a new `InstancePre` which type-checks the `items` provided and
838     /// on success is ready to instantiate a new instance.
839     ///
840     /// # Unsafety
841     ///
842     /// This method is unsafe as the `T` of the `InstancePre<T>` is not
843     /// guaranteed to be the same as the `T` within the `Store`, the caller must
844     /// verify that.
845     pub(crate) unsafe fn new(module: &Module, items: TryVec<Definition>) -> Result<InstancePre<T>> {
846         typecheck(module, &items, |cx, ty, item| cx.definition(ty, &item.ty()))?;
847 
848         let mut func_refs = TryVec::with_capacity(items.len())?;
849         let mut host_funcs = 0;
850         let mut asyncness = Asyncness::No;
851         for item in &items {
852             match item {
853                 Definition::Extern(_, _) => {}
854                 Definition::HostFunc(f) => {
855                     host_funcs += 1;
856                     if f.func_ref().wasm_call.is_none() {
857                         func_refs.push(VMFuncRef {
858                             wasm_call: module
859                                 .wasm_to_array_trampoline(f.sig_index())
860                                 .map(|f| f.into()),
861                             ..*f.func_ref()
862                         })?;
863                     }
864                     asyncness = asyncness | f.asyncness();
865                 }
866             }
867         }
868 
869         Ok(InstancePre {
870             module: module.clone(),
871             items: try_new::<Arc<_>>(items)?,
872             host_funcs,
873             func_refs: try_new::<Arc<_>>(func_refs)?,
874             asyncness,
875             _marker: core::marker::PhantomData,
876         })
877     }
878 
879     /// Returns a reference to the module that this [`InstancePre`] will be
880     /// instantiating.
881     pub fn module(&self) -> &Module {
882         &self.module
883     }
884 
885     /// Instantiates this instance, creating a new instance within the provided
886     /// `store`.
887     ///
888     /// This function will run the actual process of instantiation to
889     /// completion. This will use all of the previously-closed-over items as
890     /// imports to instantiate the module that this was originally created with.
891     ///
892     /// For more information about instantiation see [`Instance::new`].
893     ///
894     /// # Panics
895     ///
896     /// Panics if any import closed over by this [`InstancePre`] isn't owned by
897     /// `store`, or if `store` has async support enabled. Additionally this
898     /// function will panic if the `store` provided comes from a different
899     /// [`Engine`] than the [`InstancePre`] originally came from.
900     pub fn instantiate(&self, mut store: impl AsContextMut<Data = T>) -> Result<Instance> {
901         let mut store = store.as_context_mut();
902         let imports = pre_instantiate_raw(
903             &mut store.0,
904             &self.module,
905             &self.items,
906             self.host_funcs,
907             &self.func_refs,
908             self.asyncness,
909         )?;
910 
911         // Note that this is specifically done after `pre_instantiate_raw` to
912         // handle the case that if any imports in this `InstancePre` require
913         // async that it's flagged in the store by that point which will reject
914         // this instantiation to say "use `instantiate_async` instead".
915         store.0.validate_sync_call()?;
916 
917         // This unsafety should be handled by the type-checking performed by the
918         // constructor of `InstancePre` to assert that all the imports we're passing
919         // in match the module we're instantiating.
920         vm::assert_ready(unsafe {
921             Instance::new_started(&mut store, &self.module, imports.as_ref(), Asyncness::No)
922         })
923     }
924 
925     /// Creates a new instance, running the start function asynchronously
926     /// instead of inline.
927     ///
928     /// For more information about asynchronous instantiation see the
929     /// documentation on [`Instance::new_async`].
930     ///
931     /// # Panics
932     ///
933     /// Panics if any import closed over by this [`InstancePre`] isn't owned by
934     /// `store`, or if `store` does not have async support enabled.
935     #[cfg(feature = "async")]
936     pub async fn instantiate_async(
937         &self,
938         mut store: impl AsContextMut<Data = T>,
939     ) -> Result<Instance> {
940         let mut store = store.as_context_mut();
941         let imports = pre_instantiate_raw(
942             &mut store.0,
943             &self.module,
944             &self.items,
945             self.host_funcs,
946             &self.func_refs,
947             self.asyncness,
948         )?;
949 
950         // This unsafety should be handled by the type-checking performed by the
951         // constructor of `InstancePre` to assert that all the imports we're passing
952         // in match the module we're instantiating.
953         unsafe {
954             Instance::new_started(&mut store, &self.module, imports.as_ref(), Asyncness::Yes).await
955         }
956     }
957 }
958 
959 /// Helper function shared between
960 /// `InstancePre::{instantiate,instantiate_async}`
961 ///
962 /// This is an out-of-line function to avoid the generic on `InstancePre` and
963 /// get this compiled into the `wasmtime` crate to avoid having it monomorphized
964 /// elsewhere.
965 fn pre_instantiate_raw(
966     store: &mut StoreOpaque,
967     module: &Module,
968     items: &Arc<TryVec<Definition>>,
969     host_funcs: usize,
970     func_refs: &Arc<TryVec<VMFuncRef>>,
971     asyncness: Asyncness,
972 ) -> Result<OwnedImports> {
973     // Register this module and use it to fill out any funcref wasm_call holes
974     // we can. For more comments on this see `typecheck_externs`.
975     let (modules, engine, breakpoints) = store.modules_and_engine_and_breakpoints_mut();
976     modules.register_module(module, engine, breakpoints)?;
977     let (funcrefs, modules) = store.func_refs_and_modules();
978     funcrefs.fill(modules);
979 
980     if host_funcs > 0 {
981         // Any linker-defined function of the `Definition::HostFunc` variant
982         // will insert a function into the store automatically as part of
983         // instantiation, so reserve space here to make insertion more efficient
984         // as it won't have to realloc during the instantiation.
985         funcrefs.reserve_storage(host_funcs)?;
986 
987         // The usage of `to_extern_store_rooted` requires that the items are
988         // rooted via another means, which happens here by cloning the list of
989         // items into the store once. This avoids cloning each individual item
990         // below.
991         funcrefs.push_instance_pre_definitions(items.clone())?;
992         funcrefs.push_instance_pre_func_refs(func_refs.clone())?;
993     }
994 
995     store.set_async_required(asyncness);
996 
997     let mut func_refs = func_refs.iter().map(|f| NonNull::from(f));
998     let mut imports = OwnedImports::new(module)?;
999     for import in items.iter() {
1000         if !import.comes_from_same_store(store) {
1001             bail!("cross-`Store` instantiation is not currently supported");
1002         }
1003         // This unsafety should be encapsulated in the constructor of
1004         // `InstancePre` where the `T` of the original item should match the
1005         // `T` of the store. Additionally the rooting necessary has happened
1006         // above.
1007         let item = match import {
1008             Definition::Extern(e, _) => e.clone(),
1009             Definition::HostFunc(func) => unsafe {
1010                 func.to_func_store_rooted(
1011                     store,
1012                     if func.func_ref().wasm_call.is_none() {
1013                         Some(func_refs.next().unwrap())
1014                     } else {
1015                         None
1016                     },
1017                 )
1018                 .into()
1019             },
1020         };
1021         imports.push(&item, store)?;
1022     }
1023 
1024     Ok(imports)
1025 }
1026 
1027 fn typecheck<I>(
1028     module: &Module,
1029     import_args: &[I],
1030     check: impl Fn(&matching::MatchCx<'_>, &EntityType, &I) -> Result<()>,
1031 ) -> Result<()> {
1032     let env_module = module.compiled_module().module();
1033     let expected_len = env_module.imports().count();
1034     let actual_len = import_args.len();
1035     if expected_len != actual_len {
1036         bail!("expected {expected_len} imports, found {actual_len}");
1037     }
1038     let cx = matching::MatchCx::new(module.engine());
1039     for ((name, field, expected_ty), actual) in env_module.imports().zip(import_args) {
1040         debug_assert!(expected_ty.is_canonicalized_for_runtime_usage());
1041         check(&cx, &expected_ty, actual)
1042             .with_context(|| format!("incompatible import type for `{name}::{field}`"))?;
1043     }
1044     Ok(())
1045 }
1046