Index: src/tools/wasm-validate.cc
--- src/tools/wasm-validate.cc.orig
+++ src/tools/wasm-validate.cc
@@ -19,6 +19,9 @@
#include <cstdio>
#include <cstdlib>
+#include <err.h>
+#include <unistd.h>
+
#include "wabt/binary-reader-ir.h"
#include "wabt/binary-reader.h"
#include "wabt/error-formatter.h"
@@ -68,6 +71,11 @@ int ProgramMain(int argc, char** argv) {
InitStdio();
ParseOptions(argc, argv);
+
+ if (unveil(s_infile.c_str(), "r") != 0)
+ err(1, "unveil: %s", s_infile.c_str());
+ if (pledge("stdio rpath", NULL) != 0)
+ err(1, "pledge");
std::vector<uint8_t> file_data;
result = ReadFile(s_infile.c_str(), &file_data);