[Security] Global Buffer Overflow on "PreserveRegisterIfOccupied" Function

Question

[Security] Global Buffer Overflow on "PreserveRegisterIfOccupied" Function

mobsceneZ opened this issue 2 months ago · comments

Environment

OS               : Linux 5.15.146.1-microsoft-standard-WSL2 #1 SMP Thu Jan 11 04:09:03 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
Commit           : 139076a98b8321b67f850a844f558b5e91b5ac83
Version          : 0.5.0
Clang Verison    : 13.0.0
Build            : mkdir -p build && cd build && export CC="clang" CXX="clang++" CFLAGS="-fsanitize=address -g" CXXFLAGS="-fsanitize=address -g" && cmake .. && make -j8
Affected Tool    : wasm3
Enabled Features : None
Impact           : Global Buffer Overflow
Command          : wasm3/build/wasm3 --func main poc.wasm
Validation       : Invalid **(therefore possibly related to incomplete validation in wasm3)**

Proof of Concept

wasm3-poc-22.zip

Stack Trace Provide By AddressSanitizer

=================================================================
==9429==ERROR: AddressSanitizer: global-buffer-overflow on address 0x0000005c7238 at pc 0x0000005301b3 bp 0x7ffff92fd9e0 sp 0x7ffff92fd9d8
READ of size 8 at 0x0000005c7238 thread T0
    #0 0x5301b2 in PreserveRegisterIfOccupied /home/lain/wasm3/source/m3_compile.c:492:1
    #1 0x509677 in PreserveRegisters /home/lain/wasm3/source/m3_compile.c:508:1
    #2 0x509677 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1853:1
    #3 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #4 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #5 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #6 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #7 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #8 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #9 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #10 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #11 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #12 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #13 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #14 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #15 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #16 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #17 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #18 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #19 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #20 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #21 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #22 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #23 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #24 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #25 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #26 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #27 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #28 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #29 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #30 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #31 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #32 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #33 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #34 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #35 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #36 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #37 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #38 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #39 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #40 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #41 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #42 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #43 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #44 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #45 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #46 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #47 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #48 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #49 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #50 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #51 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #52 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #53 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #54 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #55 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #56 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #57 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #58 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #59 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #60 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #61 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #62 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #63 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #64 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #65 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #66 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #67 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #68 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #69 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #70 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #71 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #72 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #73 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #74 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #75 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #76 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #77 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #78 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #79 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #80 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #81 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #82 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #83 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #84 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #85 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #86 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #87 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #88 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #89 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #90 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #91 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #92 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #93 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #94 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #95 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #96 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #97 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #98 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #99 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #100 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #101 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #102 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #103 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #104 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #105 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #106 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #107 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #108 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #109 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #110 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #111 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #112 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #113 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #114 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #115 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #116 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #117 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #118 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #119 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #120 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #121 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #122 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #123 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #124 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #125 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #126 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #127 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #128 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #129 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #130 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #131 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #132 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #133 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #134 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #135 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #136 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #137 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #138 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #139 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #140 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #141 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #142 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #143 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #144 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #145 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #146 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #147 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #148 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #149 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #150 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #151 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #152 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #153 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #154 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #155 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #156 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #157 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #158 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #159 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #160 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #161 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #162 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #163 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #164 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #165 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #166 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #167 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #168 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #169 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #170 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #171 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #172 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #173 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #174 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #175 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #176 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #177 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #178 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #179 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #180 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #181 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #182 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #183 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #184 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #185 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #186 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #187 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #188 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #189 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #190 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #191 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #192 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #193 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #194 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #195 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #196 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #197 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #198 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #199 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #200 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #201 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #202 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #203 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #204 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #205 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #206 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #207 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #208 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #209 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #210 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #211 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #212 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #213 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #214 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #215 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #216 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #217 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #218 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #219 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #220 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #221 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #222 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #223 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #224 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #225 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #226 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #227 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #228 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #229 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #230 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #231 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #232 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #233 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #234 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #235 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #236 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #237 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #238 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #239 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #240 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #241 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #242 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #243 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #244 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #245 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #246 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #247 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1
    #248 0x5098e8 in Compile_LoopOrBlock /home/lain/wasm3/source/m3_compile.c:1893:1
    #249 0x529595 in CompileBlockStatements /home/lain/wasm3/source/m3_compile.c:2605:1
    #250 0x52bbf5 in CompileBlock /home/lain/wasm3/source/m3_compile.c:2742:1

0x0000005c7238 is located 40 bytes to the left of global variable '<string literal>' defined in '/home/lain/wasm3/source/m3_compile.c:411:19' (0x5c7260) of size 26
  '<string literal>' is ascii string 'slot usage count overflow'
0x0000005c7238 is located 16 bytes to the right of global variable 'c_setSetOps' defined in '/home/lain/wasm3/source/m3_compile.c:137:27' (0x5c7200) of size 40
SUMMARY: AddressSanitizer: global-buffer-overflow /home/lain/wasm3/source/m3_compile.c:492:1 in PreserveRegisterIfOccupied
Shadow bytes around the buggy address:
  0x0000800b0df0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0000800b0e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0000800b0e10: 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9 f9
  0x0000800b0e20: f9 f9 f9 f9 00 00 00 00 05 f9 f9 f9 f9 f9 f9 f9
  0x0000800b0e30: 00 00 00 02 f9 f9 f9 f9 00 00 00 01 f9 f9 f9 f9
=>0x0000800b0e40: 00 00 00 00 00 f9 f9[f9]f9 f9 f9 f9 00 00 00 02
  0x0000800b0e50: f9 f9 f9 f9 00 00 00 f9 f9 f9 f9 f9 00 00 04 f9
  0x0000800b0e60: f9 f9 f9 f9 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9
  0x0000800b0e70: 00 f9 f9 f9 00 00 00 00 06 f9 f9 f9 f9 f9 f9 f9
  0x0000800b0e80: 00 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9
  0x0000800b0e90: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 00 00 02
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==9429==ABORTING