914908 - Typed arrays should coerce values with ToNumber

Status: RESOLVED DUPLICATE of bug 985733

(Core :: JavaScript Engine, defect)

Description

[Niko Matsakis [:nmatsakis]]

After executing:

    var x = new Float32Array(1);
    x[0] = []

x[0] should have the value 0, but in fact it has NaN.

Justification: the WebIDL type of float32 arrays is unrestricted-float [1], first step to converting is to invoke ToNumber. ToNumber([]), though an incredibly convoluted series of steps, is 0.

[1] http://www.w3.org/TR/WebIDL/#es-unrestricted-float

Comment 1

[Dave Herman [:dherman]]

Note that both V8 and JSC produce 0.

Dave

Comment 2

[André Bargull [:anba]]

No longer reproducible - Resolving as WFM.