Avoid userland re-entrance after a read in Float16Array#spliced

tc39/proposal-change-array-by-copy#89
petamoriken · Jun 26, 2022 · 5259e5f · 5259e5f
1 parent 87fed88
commit 5259e5f
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/Float16Array.mjs b/src/Float16Array.mjs
@@ -1046,6 +1046,11 @@ export class Float16Array {
     }
 
     const insertCount = items.length;
+    const converedItems = [];
+    for (let i = 0; i < insertCount; ++i) {
+      converedItems[i] = ToNumber(items[i]);
+    }
+
     let actualDeleteCount;
     switch (arguments.length) {
       case 0:
@@ -1083,7 +1088,7 @@ export class Float16Array {
     }
 
     for (let i = 0; i < insertCount; ++i) {
-      array[k] = roundToFloat16Bits(items[i]);
+      array[k] = roundToFloat16Bits(converedItems[i]);
       ++k;
     }