René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"ffi: optimized calls skip BigInt range validation for pointer arguments","articleBody":"### Version\n\nmain\n\n### Platform\n\n```text\nmacOS\n```\n\n### Subsystem\n\nffi\n\n### What steps will reproduce the bug?\n\n```js\nimport { DynamicLibrary, suffix } from 'node:ffi';\n\nconst lib = new DynamicLibrary(\n  `test/ffi/fixture_library/build/Release/ffi_test_library.${suffix}`);\n\nconst fn = lib.getFunction('pointer_to_usize', {\n  arguments: ['pointer', 'pointer'],\n  return: 'u64',\n});\nfunction call(p) { return fn(p, 0n); }\n\nconst run = (label) => {\n  for (const v of [-1n, 2n ** 64n + 5n]) {\n    try { console.log(label, v, call(v)); } catch (e) { console.log(label, v, e.code); }\n  }\n};\n\nrun('cold');\n%PrepareFunctionForOptimization(call);\ncall(1n);\n%OptimizeFunctionOnNextCall(call);\ncall(1n);\nrun('optimized');\n```\n\nRun with\n```console\nnode --allow-natives-syntax repro.js\n```\n\n### How often does it reproduce? Is there a required condition?\n\nAlways\n\n### What is the expected behavior? Why is that the expected behavior?\n\nBoth calls throw `ERR_INVALID_ARG_VALUE` in both the cold and optimized runs.\n\n### What do you see instead?\n\n```text\ncold -1n ERR_INVALID_ARG_VALUE\ncold 18446744073709551621n ERR_INVALID_ARG_VALUE\noptimized -1n 18446744073709551615n\noptimized 18446744073709551621n 5n\n```\n\n### Additional information\n\n_No response_","author":{"url":"https://github.com/trivikr","@type":"Person","name":"trivikr"},"datePublished":"2026-09-28T05:47:23Z","url":"https://github.com/nodejs/node/issues/66370"}