Validation: Check function type index bounds in import entry

Author: kateinoigakukun

Sources/WasmKit/Execution/StoreAllocator.swift

@@ -277,6 +277,9 @@ extension StoreAllocator {
             switch (importEntry.descriptor, external) {
             case let (.function(typeIndex), .function(externalFunc)):
                 let type = externalFunc.type
+                guard typeIndex < module.types.count else {
+                    throw ValidationError("Function type index out of bounds")
+                }
                 guard engine.internType(module.types[Int(typeIndex)]) == type else {
                     throw ImportError.incompatibleImportType
                 }

Tests/WasmKitTests/SpectestTests.swift

@@ -22,8 +22,6 @@ final class SpectestTests: XCTestCase {
             path: Self.testPaths,
             include: [],
             exclude: [
-                "func.wast",
-                "func_ptrs.wast",
                 "global.wast",
                 "if.wast",
                 "imports.wast",