Repository navigation
C++ bindgen: function with two own<resource> args returns an error handle #1684
Description
Summary: C++ provider component lifts a non-empty string return value as an empty string.
A wit-bindgen-cpp bug where a C++ provider component returns an empty string in place of the actual string value (e.g. "temres26"), observed consistently across all consumer languages.
Environment
| component | version |
|---|---|
| OS | macOS 15.7 (Darwin 24.6.0), x86_64 |
| jco | 1.16.1 (source checkout, tag jco-v1.16.1) |
| Node.js | v22.22.2 |
| wac | wac-cli 0.8.1 |
| wasi-sdk | 27.0 (wasm32-wasip2-clang/clang++) |
Steps to reproduce
The full chain is: compile the guest sources into a provider component and a consumer component, compose them with wac, then run the composed component. Prebuilt copies of every artifact are included (components/provider.wasm, components/consumer.wasm, composed.wasm), so you can also skip straight to step 5.
Github repo:https://github.com/xiaozzzZZzzz240/G051-Cplusplus-string-return-from-a-resource-method-comes-back-empty
-
Clone this repository:
git clone <THIS_REPO_URL> cd <THIS_REPO_DIR>
-
Compile the provider component from the C++ sources in
src/provider-Cpp/(toolchain versions in the table above; the WIT package is inwit/):wasm32-wasip2-clang++ -std=c++23 -fno-exceptions -o components/provider.wasm -mexec-model=reactor src/provider-Cpp/world69-uvfx7r7j_generated.cpp src/provider-Cpp/world69_uvfx7r7j.cpp src/provider-Cpp/world69_uvfx7r7j_component_type.o -
Compile the consumer component from the C sources in
src/consumer-C/:wasm32-wasip2-clang -o components/consumer.wasm -mexec-model=reactor src/consumer-C/world69b-myhp0jr6_generated.c src/consumer-C/world69b_myhp0jr6.c src/consumer-C/world69b_myhp0jr6_component_type.o -
Compose the two components into one runnable component with wac 0.8.1:
wac plug components/consumer.wasm --plug components/provider.wasm -o composed.wasm -
Run the composed component with jco:
npm install -g @bytecodealliance/jco@1.16.1 jco run composed.wasm
Expected result
The composed component should print exactly the following, then exit 0:
"resinst0"
"resinst0"
"foo"
true
true
"temres132"
resource("temres26")
([resource("temres28")], "foo")
true
resource("temres160")
resource("temres161")
true
"temres26"
"temres32"
7
"p"
Actual result
Under jco the same composed.wasm exits with rc=0. stdout:
"resinst0"
"resinst0"
"foo"
true
true
"temres132"
resource("temres26")
([resource("temres28")], "foo")
true
resource("temres160")
resource("temres161")
true
""
"temres32"
7
"p"
stderr:
(empty)
wasmtime on the exact same file: rc=1
"resinst0"
"resinst0"
"foo"
true
true
"temres132"
resource("temres26")
([resource("temres28")], "foo")
true
resource("temres160")
resource("temres161")
true
--- stderr ---
Error: failed to run main module `/Users/myuser/WASM/myProject/Wasm_component_testing/mycode/execute/reportrepo/G051-wit-bindgen-cpp-returns-empty-string-instead-of-original-value/composed.wasm`
Caused by:
0: failed to invoke `run` function
1: error while executing at wasm backtrace:
0: 0x5fe - <unknown>!<wasm function 17>
1: 0xa18f9 - wit-component:shim!indirect-mydefined:package3hl16smu1p/itf-n3bcdaqpyw-f-ywm7quh
2: 0x64eca - consumer.wasm!mydefined_package3hl16smu1p_itf_n3bcdaqpyw_f_ywm7quh
3: 0x642eb - consumer.wasm!exports_wasi_cli_run_run
4: 0x64fd1 - consumer.wasm!__wasm_export_exports_wasi_cli_run_run
note: using the `WASMTIME_BACKTRACE_DETAILS=1` environment variable may show more debugging information
2: unknown handle index 521124
Activity
tschneidereit commentedon Aug 17, 2026
@xiaozzzZZzzz240 once more, please ensure that your reports adhere to our requirements. I assume the
G051-prefix in the title here is something an LLM created as part of a campaign, and not something that's relevant to us. And the title as a whole is not very human-readable.Additionally, and in this case more importantly, the reproducer in the repo you linked to is very far from reduced. Looking at just this directory, there are many thousands of lines of generated code and a
.obinary file.Based on the description this seems like it should be a bug that can be reduced to a single component with far fewer lines of code. But if that's wrong and it really needs interactions between two components, then it should still be reduced to what's truly required.
As-is, a maintainer would have to spend a truly significant amount of time to investigate this and similar reports, which we're unlikely to have the time for.
[-]G051-Cplusplus-string-return-from-a-resource-method-comes-back-empty[/-][+]C++ bindgen: function with two `own<resource>` args returns an error handle[/+]xiaozzzZZzzz240 commentedon Aug 18, 2026
Thanks for your feedback. Sorry for the misunderstanding.
The
G051-prefix was added by myself to help me locate bugs, it has been dropped and the issue retitled.And I tried my best to minimize the test case. You can only focus on the following minimized bug report. And I did try to reduce the test case which contains provider and consumer to a single component, but the bug only occurs when a resource handle crosses the component boundary and later re-enters as an
ownparameter, thus intra-component calls never go through the canonical ABI. Thus, I have to remain the provider consumer structure to reproduce the bug.Minimized Bug Report
Summary
The exported function f: func(a0: own, a1: own) -> own returns std::move(a0), on the provider side, but the caller gets a garbage returned handle.
The bug is in the generated C++ glue code. Each resource object stores its handle index at construction time. The glue never updates this index afterwards. The unused a1 gets dropped at the end of f. The glue frees a1's old index. But that index now belongs to a0. So dropping a1 destroys a0 by mistake. f then returns -1. wasmtime rejects this handle and traps with unknown handle index 4294967295. jco does not check the handle. A later get-name call reads freed memory and prints "". And if f takes only one parameter (f: func(a0: own) -> own, same provider body), both runtimes work fine.
Environment
cppandcbackends)Steps to reproduce
Github repo:https://github.com/xiaozzzZZzzz240/wit-bindgen-1684-repo
Generate the
wit.hruntime header:Generate the bindings:
Compile the C++ provider component:
Compile the C consumer component:
Compose the two components:
wac plug components/consumer.wasm --plug components/provider.wasm -o composed.wasmRun the composed component:
Expected result
Both runtimes print exactly the following and exit 0:
Actual result
jco 1.16.1: rc=0, stdout:
wasmtime 41.0.0, same file: rc=1, no stdout, stderr: