Closed Bug 1458011 Opened 3 years ago Closed 3 years ago

Don't allow the backing store behind a TypedObject to be accessed


(Core :: JavaScript Engine, enhancement, P1)




Tracking Status
firefox61 --- fixed


(Reporter: Waldo, Assigned: Waldo)



(1 file)

From Paris just over a week ago, it sounds like typed objects as we're pushing them are not going to expose the underlying memory as ArrayBuffer.  Preserving this complexity in SpiderMonkey doesn't give you much, it's not going to be used in Web Assembly, and there's ongoing maintenance cost to keeping it around.

Let's remove the capability.  That is, let's remove:

*, the function that returns the ArrayBuffer beneath a typed object not containing any/reference
* the ability of TypedObject constructors to accept an ArrayBuffer to view
Attached patch PatchSplinter Review
This seems to pass jstests/jit-tests locally but has not been tryservered.
Attachment #8972114 - Flags: review?(sphink)
Comment on attachment 8972114 [details] [diff] [review]

Review of attachment 8972114 [details] [diff] [review]:

/me pours one out.
Attachment #8972114 - Flags: review?(sphink) → review+
Priority: -- → P1
FWIW this might well come back: transparent Typed Objects aren't required for the current plans for Wasm/JS integration, but they have value for other use cases.

I'm not opposed to removing this for now, but we might need to resurrect it at some point.
Pushed by
Remove the function and |new TypedObject(buffer [, offset])| constructor overload because they're no longer planned to be part of standardization efforts in this area.  r=sfink
Closed: 3 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla61
You need to log in before you can comment on or make changes to this bug.