Kenneth Russell wrote:
I hope that the ES6 integration of typed arrays will not require
normalization of NaNs on write, even if other specification changes
need to be made to avoid requiring it.
What other specification changes?
JITs use nan-boxing
(http://wingolog.org/archives/2011/05/18/value-representation-in-javascript-implementations).
If a typed array user could forge a nan-boxed value, they could pwn the
JITting VM.
For interop, JS requires cross-browser (VM) NaN canonicalization to
avoid observably different results on different browsers.
Ergo, ES6 must specify normative handling of NaNs
/be
_______________________________________________
es-discuss mailing list
[email protected]
https://mail.mozilla.org/listinfo/es-discuss
