From 5259e5f73c1a29da5663ab7256dbad2e9a12d226 Mon Sep 17 00:00:00 2001
From: Kenta Moriuchi <moriken@kimamass.com>
Date: Sun, 26 Jun 2022 16:19:15 +0900
Subject: [PATCH] Avoid userland re-entrance after a read in
 `Float16Array#spliced`

https://github.com/tc39/proposal-change-array-by-copy/pull/89
---
 src/Float16Array.mjs | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/Float16Array.mjs b/src/Float16Array.mjs
index 25abe57f..5a466097 100644
--- a/src/Float16Array.mjs
+++ b/src/Float16Array.mjs
@@ -1046,6 +1046,11 @@ export class Float16Array {
     }
 
     const insertCount = items.length;
+    const converedItems = [];
+    for (let i = 0; i < insertCount; ++i) {
+      converedItems[i] = ToNumber(items[i]);
+    }
+
     let actualDeleteCount;
     switch (arguments.length) {
       case 0:
@@ -1083,7 +1088,7 @@ export class Float16Array {
     }
 
     for (let i = 0; i < insertCount; ++i) {
-      array[k] = roundToFloat16Bits(items[i]);
+      array[k] = roundToFloat16Bits(converedItems[i]);
       ++k;
     }