> As was pointed out earlier with Mozilla source code, integer overflows
> "do not happen". Probably because, in security-conscious code, you are
> supposed to validate your inputs for your actual expected range, and
> when you do, built-in overflow checks are just unnecessary overhead.

If you're referring to Robert's comments, then I read them exactly the
opposite way. He did mention that overflow to BigInts wasn't needed,
but he is on the wants checked math side.

I agree that this is a tradeoff, and that there is probably some
performance loss at which it doesn't make sense. Until we have data on
how expensive such a feature is, we can't make much progress in that
particular debate. I just wanted to note my preference for having it
default to on if it didn't cost too much, whatever "cost too much"
might mean :)

jack.
_______________________________________________
Rust-dev mailing list
Rust-dev@mozilla.org
https://mail.mozilla.org/listinfo/rust-dev

Reply via email to