[Webkit-unassigned] [Bug 160322] Undefined Behavior in JSValue cast from NaN

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Jul 29 13:26:35 PDT 2016


https://bugs.webkit.org/show_bug.cgi?id=160322

--- Comment #5 from Keith Miller <keith_miller at apple.com> ---
I think JSValue(double) is fine. While the cast from double -> int32 is undefined, we only use the int32 if, when cast back to a double it's the same as the original value. As long as the undefinedness of the double -> int32 cast doesn't do anything too crazy, like corrupt memory or other variables, which I think we can rely on, that code should be safe. Perhaps my trust in the saneness of double -> int32 is unfounded.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160729/ce602f7b/attachment-0001.html>


More information about the webkit-unassigned mailing list