numcodecs_wasm_host_reproducible/transform/
nan.rs

1use std::collections::VecDeque;
2
3use anyhow::{Error, anyhow};
4use wasm_encoder::reencode::{self, Reencode};
5
6/// Adapted from cranelift's NaN canonicalisation codegen pass
7/// <https://github.com/bytecodealliance/wasmtime/blob/ead6c7cc5dbb876437acbdf429a9190f25b96755/cranelift/codegen/src/nan_canonicalization.rs>
8/// Released under the Apache-2.0 WITH LLVM-exception License
9///
10/// Implementation written referencing:
11/// - WebAssembly Core Specification v2 <https://www.w3.org/TR/2024/WD-wasm-core-2-20240219>
12/// - The "WebAssembly 128-bit packed SIMD Extension" Specification: <https://github.com/WebAssembly/spec/blob/f8114686035f6ffc358771c822ede3c96bf54cd9/proposals/simd/SIMD.md>
13/// - The "Non-trapping Float-to-int Conversions" Extension Specification: <https://github.com/WebAssembly/spec/blob/f8114686035f6ffc358771c822ede3c96bf54cd9/proposals/nontrapping-float-to-int-conversion/Overview.md>
14pub enum NaNCanonicaliser {}
15
16impl NaNCanonicaliser {
17    pub fn apply_to_module(
18        wasm: &[u8],
19        features: wasmparser::WasmFeatures,
20    ) -> Result<Vec<u8>, anyhow::Error> {
21        let mut parser = wasmparser::Parser::new(0);
22        parser.set_features(features);
23
24        let mut module = wasm_encoder::Module::new();
25
26        let mut reencoder = NaNCanonicaliserReencoder {
27            func_type_num_params: Vec::new(),
28            function_type_indices: VecDeque::new(),
29        };
30        reencoder
31            .parse_core_module(&mut module, parser, wasm)
32            .map_err(|err| anyhow::format_err!("{}", err))?;
33
34        let wasm = module.finish();
35        wasmparser::Validator::new_with_features(features).validate_all(&wasm)?;
36        Ok(wasm)
37    }
38}
39
40struct NaNCanonicaliserReencoder {
41    func_type_num_params: Vec<u32>,
42    function_type_indices: VecDeque<usize>,
43}
44
45impl wasm_encoder::reencode::Reencode for NaNCanonicaliserReencoder {
46    type Error = Error;
47
48    fn parse_type_section(
49        &mut self,
50        types: &mut wasm_encoder::TypeSection,
51        section: wasmparser::TypeSectionReader<'_>,
52    ) -> Result<(), reencode::Error<Self::Error>> {
53        for func_ty in section.into_iter_err_on_gc_types() {
54            let func_ty = self.func_type(func_ty?)?;
55            #[expect(clippy::cast_possible_truncation)] // guaranteed by wasm spec
56            let num_params = func_ty.params().len() as u32;
57            self.func_type_num_params.push(num_params);
58            types.ty().func_type(&func_ty);
59        }
60        Ok(())
61    }
62
63    fn parse_function_section(
64        &mut self,
65        functions: &mut wasm_encoder::FunctionSection,
66        section: wasmparser::FunctionSectionReader<'_>,
67    ) -> Result<(), reencode::Error<Self::Error>> {
68        for function in section {
69            let function = self.type_index(function?)?;
70            self.function_type_indices.push_back(function as usize);
71            functions.function(function);
72        }
73        Ok(())
74    }
75
76    fn parse_function_body(
77        &mut self,
78        code: &mut wasm_encoder::CodeSection,
79        func: wasmparser::FunctionBody<'_>,
80    ) -> Result<(), reencode::Error<Self::Error>> {
81        let Some(function_ty) = self.function_type_indices.pop_front() else {
82            return Err(reencode::Error::UserError(anyhow!(
83                "wasm function body without declaration",
84            )));
85        };
86        let Some(num_params) = self.func_type_num_params.get(function_ty).copied() else {
87            return Err(reencode::Error::UserError(anyhow!(
88                "invalid type index for wasm function",
89            )));
90        };
91
92        let locals = func.get_locals_reader()?;
93        let locals = locals.into_iter().collect::<Result<Vec<_>, _>>()?;
94        let mut locals = locals
95            .into_iter()
96            .map(|(count, ty)| self.val_type(ty).map(|ty| (count, ty)))
97            .collect::<Result<Vec<_>, _>>()?;
98        let mut num_locals = locals.iter().map(|(count, _ty)| *count).sum::<u32>();
99
100        let mut stash_f32 = None;
101        let mut stash_f64 = None;
102        let mut stash_v128 = None;
103
104        let instructions = func.get_operators_reader()?;
105        for instruction in instructions {
106            if let Some(kind) = Self::may_produce_non_deterministic_nan(&instruction?)
107                .map_err(|err| reencode::Error::UserError(anyhow!(err)))?
108            {
109                match kind {
110                    MaybeNaNKind::F32 => stash_f32.get_or_insert_with(|| {
111                        let stash_f32 = num_params + num_locals;
112                        locals.push((1, wasm_encoder::ValType::F32));
113                        num_locals += 1;
114                        stash_f32
115                    }),
116                    MaybeNaNKind::F64 => stash_f64.get_or_insert_with(|| {
117                        let stash_f64 = num_params + num_locals;
118                        locals.push((1, wasm_encoder::ValType::F64));
119                        num_locals += 1;
120                        stash_f64
121                    }),
122                    MaybeNaNKind::F32x4 | MaybeNaNKind::F64x2 => {
123                        stash_v128.get_or_insert_with(|| {
124                            let stash_v128 = num_params + num_locals;
125                            locals.push((1, wasm_encoder::ValType::V128));
126                            num_locals += 1;
127                            stash_v128
128                        })
129                    }
130                };
131            }
132        }
133
134        let mut function = wasm_encoder::Function::new(locals);
135
136        for instruction in func.get_operators_reader()? {
137            let instruction = instruction?;
138
139            let kind = Self::may_produce_non_deterministic_nan(&instruction)
140                .map_err(|err| reencode::Error::UserError(anyhow!(err)))?;
141
142            function.instruction(&self.instruction(instruction)?);
143
144            if let Some(kind) = kind {
145                let Some(stash) = (match kind {
146                    MaybeNaNKind::F32 => stash_f32,
147                    MaybeNaNKind::F64 => stash_f64,
148                    MaybeNaNKind::F32x4 | MaybeNaNKind::F64x2 => stash_v128,
149                }) else {
150                    return Err(reencode::Error::UserError(anyhow!(
151                        "wasm float operation without matching canonicalisation stash",
152                    )));
153                };
154
155                for canon_instruction in
156                    Self::generate_nan_canonicalisation_instructions(kind, stash)
157                {
158                    function.instruction(&canon_instruction);
159                }
160            }
161        }
162
163        code.function(&function);
164
165        Ok(())
166    }
167}
168
169impl NaNCanonicaliserReencoder {
170    // Canonical 32-bit and 64-bit NaN values
171    const CANON_NAN_B32: u32 = 0x7FC0_0000;
172    const CANON_NAN_B32X4: u128 = 0x7FC0_0000_7FC0_0000_7FC0_0000_7FC0_0000;
173    const CANON_NAN_B64: u64 = 0x7FF8_0000_0000_0000;
174    const CANON_NAN_B64X2: u128 = 0x7FF8_0000_0000_0000_7FF8_0000_0000_0000;
175
176    fn generate_nan_canonicalisation_instructions(
177        kind: MaybeNaNKind,
178        stash: u32,
179    ) -> impl IntoIterator<Item = wasm_encoder::Instruction<'static>> {
180        match kind {
181            MaybeNaNKind::F32 => [
182                // stack: [x, ...]; stash: ??
183                wasm_encoder::Instruction::LocalSet(stash),
184                // stack: [...]; stash: x
185                // canonical NaN
186                wasm_encoder::Instruction::F32Const(wasm_encoder::Ieee32::from(f32::from_bits(
187                    Self::CANON_NAN_B32,
188                ))),
189                // stack: [canon(NaN), ...]; stash: x
190                wasm_encoder::Instruction::LocalGet(stash),
191                // stack: [x, canon(NaN), ...]; stash: x
192                wasm_encoder::Instruction::LocalGet(stash),
193                // stack: [x, x, canon(NaN), ...]; stash: x
194                wasm_encoder::Instruction::LocalGet(stash),
195                // stack: [x, x, x, canon(NaN), ...]; stash: x
196                // isNaN: x != x
197                wasm_encoder::Instruction::F32Ne,
198                // stack: [isNaN, x, canon(NaN), ...]; stash: x
199                // select expects the stack [c: isNaN, val2: x, val1: canon(NaN), ...]
200                // select returns if c == 0 { val2 } else { val1 }
201                // here if isNaN  then c = 1 and val1 = canon(NaN) is returned
202                //      if !isNaN then c = 0 and val2 = x is returned
203                wasm_encoder::Instruction::Select,
204                // stack: [canon(x), ...]; stash: x
205            ],
206            MaybeNaNKind::F64 => [
207                // stack: [x, ...]; stash: ??
208                wasm_encoder::Instruction::LocalSet(stash),
209                // stack: [...]; stash: x
210                // canonical NaN
211                wasm_encoder::Instruction::F64Const(wasm_encoder::Ieee64::from(f64::from_bits(
212                    Self::CANON_NAN_B64,
213                ))),
214                // stack: [canon(NaN), ...]; stash: x
215                wasm_encoder::Instruction::LocalGet(stash),
216                // stack: [x, canon(NaN), ...]; stash: x
217                wasm_encoder::Instruction::LocalGet(stash),
218                // stack: [x, x, canon(NaN), ...]; stash: x
219                wasm_encoder::Instruction::LocalGet(stash),
220                // stack: [x, x, x, canon(NaN), ...]; stash: x
221                // isNaN: x != x
222                wasm_encoder::Instruction::F64Ne,
223                // stack: [isNaN, x, canon(NaN), ...]; stash: x
224                // select expects the stack [c: isNaN, val2: x, val1: canon(NaN), ...]
225                // select returns if c == 0 { val2 } else { val1 }
226                // here if isNaN  then c = 1 and val1 = canon(NaN) is returned
227                //      if !isNaN then c = 0 and val2 = x is returned
228                wasm_encoder::Instruction::Select,
229                // stack: [canon(x), ...]; stash: x
230            ],
231            MaybeNaNKind::F32x4 => [
232                // stack: [x, ...]; stash: ??
233                wasm_encoder::Instruction::LocalSet(stash),
234                // stack: [...]; stash: x
235                // canonical NaN
236                wasm_encoder::Instruction::V128Const(i128::from_le_bytes(
237                    Self::CANON_NAN_B32X4.to_le_bytes(),
238                )),
239                // stack: [canon(NaN), ...]; stash: x
240                wasm_encoder::Instruction::LocalGet(stash),
241                // stack: [x, canon(NaN), ...]; stash: x
242                wasm_encoder::Instruction::LocalGet(stash),
243                // stack: [x, x, canon(NaN), ...]; stash: x
244                wasm_encoder::Instruction::LocalGet(stash),
245                // stack: [x, x, x, canon(NaN), ...]; stash: x
246                // isNaN: x != x
247                wasm_encoder::Instruction::F32x4Ne,
248                // stack: [isNaN, x, canon(NaN), ...]; stash: x
249                // bitselect expects the stack [c: isNaN, val2: x, val1: canon(NaN), ...]
250                // bitselect returns if c[i] == 0 { val2[i] } else { val1[i] }
251                // here if per-lane isNaN  then c = 1 and val1 = canon(NaN) is returned
252                //      if per-lane !isNaN then c = 0 and val2 = x is returned
253                wasm_encoder::Instruction::V128Bitselect,
254                // stack: [canon(x), ...]; stash: x
255            ],
256            MaybeNaNKind::F64x2 => [
257                // stack: [x, ...]; stash: ??
258                wasm_encoder::Instruction::LocalSet(stash),
259                // stack: [...]; stash: x
260                // canonical NaN
261                wasm_encoder::Instruction::V128Const(i128::from_le_bytes(
262                    Self::CANON_NAN_B64X2.to_le_bytes(),
263                )),
264                // stack: [canon(NaN), ...]; stash: x
265                wasm_encoder::Instruction::LocalGet(stash),
266                // stack: [x, canon(NaN), ...]; stash: x
267                wasm_encoder::Instruction::LocalGet(stash),
268                // stack: [x, x, canon(NaN), ...]; stash: x
269                wasm_encoder::Instruction::LocalGet(stash),
270                // stack: [x, x, x, canon(NaN), ...]; stash: x
271                // isNaN: x != x
272                wasm_encoder::Instruction::F64x2Ne,
273                // stack: [isNaN, x, canon(NaN), ...]; stash: x
274                // bitselect expects the stack [c: isNaN, val2: x, val1: canon(NaN), ...]
275                // bitselect returns if c[i] == 0 { val2[i] } else { val1[i] }
276                // here if per-lane isNaN  then c = 1 and val1 = canon(NaN) is returned
277                //      if per-lane !isNaN then c = 0 and val2 = x is returned
278                wasm_encoder::Instruction::V128Bitselect,
279                // stack: [canon(x), ...]; stash: x
280            ],
281        }
282    }
283
284    #[expect(clippy::too_many_lines)]
285    fn may_produce_non_deterministic_nan(
286        instr: &wasmparser::Operator,
287    ) -> Result<Option<MaybeNaNKind>, NonDeterministicWasmFeature> {
288        match instr {
289            // === MVP ===
290            // non-float operation
291            wasmparser::Operator::Unreachable
292            | wasmparser::Operator::Nop
293            | wasmparser::Operator::Block { .. }
294            | wasmparser::Operator::Loop { .. }
295            | wasmparser::Operator::If { .. }
296            | wasmparser::Operator::Else => Ok(None),
297            // === Exception handling ===
298            // non-float operation
299            wasmparser::Operator::TryTable { .. }
300            | wasmparser::Operator::Throw { .. }
301            | wasmparser::Operator::ThrowRef => Ok(None),
302            // === Legacy exception handling (deprecated) ===
303            // non-float operation
304            wasmparser::Operator::Try { .. }
305            | wasmparser::Operator::Catch { .. }
306            | wasmparser::Operator::Rethrow { .. }
307            | wasmparser::Operator::Delegate { .. }
308            | wasmparser::Operator::CatchAll => Ok(None),
309            // === MVP ===
310            // non-float operation
311            wasmparser::Operator::End
312            | wasmparser::Operator::Br { .. }
313            | wasmparser::Operator::BrIf { .. }
314            | wasmparser::Operator::BrTable { .. }
315            | wasmparser::Operator::Return
316            | wasmparser::Operator::Call { .. }
317            | wasmparser::Operator::CallIndirect { .. } => Ok(None),
318            // === Tail calls ===
319            // non-float operation
320            wasmparser::Operator::ReturnCall { .. }
321            | wasmparser::Operator::ReturnCallIndirect { .. } => Ok(None),
322            // === MVP ===
323            // non-float operation
324            wasmparser::Operator::Drop | wasmparser::Operator::Select => Ok(None),
325            // === Reference types ===
326            // non-float operation
327            wasmparser::Operator::TypedSelect { .. } => Ok(None),
328            // locals may contain floats, but get/set/tee are deterministic
329            wasmparser::Operator::LocalGet { .. }
330            | wasmparser::Operator::LocalSet { .. }
331            | wasmparser::Operator::LocalTee { .. } => Ok(None),
332            // non-float operation
333            wasmparser::Operator::GlobalGet { .. }
334            | wasmparser::Operator::GlobalSet { .. }
335            | wasmparser::Operator::I32Load { .. }
336            | wasmparser::Operator::I64Load { .. } => Ok(None),
337            // loading a float from memory is deterministic, even when a
338            //  non-canonical NaN value is loaded
339            wasmparser::Operator::F32Load { .. } | wasmparser::Operator::F64Load { .. } => Ok(None),
340            // non-float operation
341            wasmparser::Operator::I32Load8S { .. }
342            | wasmparser::Operator::I32Load8U { .. }
343            | wasmparser::Operator::I32Load16S { .. }
344            | wasmparser::Operator::I32Load16U { .. }
345            | wasmparser::Operator::I64Load8S { .. }
346            | wasmparser::Operator::I64Load8U { .. }
347            | wasmparser::Operator::I64Load16S { .. }
348            | wasmparser::Operator::I64Load16U { .. }
349            | wasmparser::Operator::I64Load32S { .. }
350            | wasmparser::Operator::I64Load32U { .. }
351            | wasmparser::Operator::I32Store { .. }
352            | wasmparser::Operator::I64Store { .. } => Ok(None),
353            // storing a float to memory is deterministic, even when a
354            //  non-canonical NaN value is stored
355            wasmparser::Operator::F32Store { .. } | wasmparser::Operator::F64Store { .. } => {
356                Ok(None)
357            }
358            // non-float operation
359            wasmparser::Operator::I32Store8 { .. }
360            | wasmparser::Operator::I32Store16 { .. }
361            | wasmparser::Operator::I64Store8 { .. }
362            | wasmparser::Operator::I64Store16 { .. }
363            | wasmparser::Operator::I64Store32 { .. }
364            | wasmparser::Operator::MemorySize { .. }
365            | wasmparser::Operator::MemoryGrow { .. }
366            | wasmparser::Operator::I32Const { .. }
367            | wasmparser::Operator::I64Const { .. } => Ok(None),
368            // constant float values are deterministic, even when they represent
369            //  non-canonical NaN values
370            wasmparser::Operator::F32Const { .. } | wasmparser::Operator::F64Const { .. } => {
371                Ok(None)
372            }
373            // === Reference types ===
374            // non-float operation
375            wasmparser::Operator::RefNull { .. }
376            | wasmparser::Operator::RefIsNull
377            | wasmparser::Operator::RefFunc { .. } => Ok(None),
378            // === Garbage collection ===
379            // non-float operation
380            wasmparser::Operator::RefEq => Ok(None),
381            // === MVP ===
382            // non-float operation
383            wasmparser::Operator::I32Eqz
384            | wasmparser::Operator::I32Eq
385            | wasmparser::Operator::I32Ne
386            | wasmparser::Operator::I32LtS
387            | wasmparser::Operator::I32LtU
388            | wasmparser::Operator::I32GtS
389            | wasmparser::Operator::I32GtU
390            | wasmparser::Operator::I32LeS
391            | wasmparser::Operator::I32LeU
392            | wasmparser::Operator::I32GeS
393            | wasmparser::Operator::I32GeU
394            | wasmparser::Operator::I64Eqz
395            | wasmparser::Operator::I64Eq
396            | wasmparser::Operator::I64Ne
397            | wasmparser::Operator::I64LtS
398            | wasmparser::Operator::I64LtU
399            | wasmparser::Operator::I64GtS
400            | wasmparser::Operator::I64GtU
401            | wasmparser::Operator::I64LeS
402            | wasmparser::Operator::I64LeU
403            | wasmparser::Operator::I64GeS
404            | wasmparser::Operator::I64GeU => Ok(None),
405            // deterministic float operation
406            wasmparser::Operator::F32Eq
407            | wasmparser::Operator::F32Ne
408            | wasmparser::Operator::F32Lt
409            | wasmparser::Operator::F32Gt
410            | wasmparser::Operator::F32Le
411            | wasmparser::Operator::F32Ge
412            | wasmparser::Operator::F64Eq
413            | wasmparser::Operator::F64Ne
414            | wasmparser::Operator::F64Lt
415            | wasmparser::Operator::F64Gt
416            | wasmparser::Operator::F64Le
417            | wasmparser::Operator::F64Ge => Ok(None),
418            // non-float operation
419            wasmparser::Operator::I32Clz
420            | wasmparser::Operator::I32Ctz
421            | wasmparser::Operator::I32Popcnt
422            | wasmparser::Operator::I32Add
423            | wasmparser::Operator::I32Sub
424            | wasmparser::Operator::I32Mul
425            | wasmparser::Operator::I32DivS
426            | wasmparser::Operator::I32DivU
427            | wasmparser::Operator::I32RemS
428            | wasmparser::Operator::I32RemU
429            | wasmparser::Operator::I32And
430            | wasmparser::Operator::I32Or
431            | wasmparser::Operator::I32Xor
432            | wasmparser::Operator::I32Shl
433            | wasmparser::Operator::I32ShrS
434            | wasmparser::Operator::I32ShrU
435            | wasmparser::Operator::I32Rotl
436            | wasmparser::Operator::I32Rotr
437            | wasmparser::Operator::I64Clz
438            | wasmparser::Operator::I64Ctz
439            | wasmparser::Operator::I64Popcnt
440            | wasmparser::Operator::I64Add
441            | wasmparser::Operator::I64Sub
442            | wasmparser::Operator::I64Mul
443            | wasmparser::Operator::I64DivS
444            | wasmparser::Operator::I64DivU
445            | wasmparser::Operator::I64RemS
446            | wasmparser::Operator::I64RemU
447            | wasmparser::Operator::I64And
448            | wasmparser::Operator::I64Or
449            | wasmparser::Operator::I64Xor
450            | wasmparser::Operator::I64Shl
451            | wasmparser::Operator::I64ShrS
452            | wasmparser::Operator::I64ShrU
453            | wasmparser::Operator::I64Rotl
454            | wasmparser::Operator::I64Rotr => Ok(None),
455            // deterministic float operation
456            wasmparser::Operator::F32Abs | wasmparser::Operator::F32Neg => Ok(None),
457            // non-deterministic float operation that may produce any NaN
458            wasmparser::Operator::F32Ceil
459            | wasmparser::Operator::F32Floor
460            | wasmparser::Operator::F32Trunc
461            | wasmparser::Operator::F32Nearest
462            | wasmparser::Operator::F32Sqrt
463            | wasmparser::Operator::F32Add
464            | wasmparser::Operator::F32Sub
465            | wasmparser::Operator::F32Mul
466            | wasmparser::Operator::F32Div
467            | wasmparser::Operator::F32Min
468            | wasmparser::Operator::F32Max => Ok(Some(MaybeNaNKind::F32)),
469            // deterministic float operation
470            wasmparser::Operator::F32Copysign
471            | wasmparser::Operator::F64Abs
472            | wasmparser::Operator::F64Neg => Ok(None),
473            // non-deterministic float operation that may produce any NaN
474            wasmparser::Operator::F64Ceil
475            | wasmparser::Operator::F64Floor
476            | wasmparser::Operator::F64Trunc
477            | wasmparser::Operator::F64Nearest
478            | wasmparser::Operator::F64Sqrt
479            | wasmparser::Operator::F64Add
480            | wasmparser::Operator::F64Sub
481            | wasmparser::Operator::F64Mul
482            | wasmparser::Operator::F64Div
483            | wasmparser::Operator::F64Min
484            | wasmparser::Operator::F64Max => Ok(Some(MaybeNaNKind::F64)),
485            // deterministic float operation
486            wasmparser::Operator::F64Copysign => Ok(None),
487            // non-float operation
488            wasmparser::Operator::I32WrapI64 => Ok(None),
489            // truncate float to int, which traps to be deterministic
490            wasmparser::Operator::I32TruncF32S
491            | wasmparser::Operator::I32TruncF32U
492            | wasmparser::Operator::I32TruncF64S
493            | wasmparser::Operator::I32TruncF64U => Ok(None),
494            // non-float operation
495            wasmparser::Operator::I64ExtendI32S | wasmparser::Operator::I64ExtendI32U => Ok(None),
496            // truncate float to int, which traps to be deterministic
497            wasmparser::Operator::I64TruncF32S
498            | wasmparser::Operator::I64TruncF32U
499            | wasmparser::Operator::I64TruncF64S
500            | wasmparser::Operator::I64TruncF64U => Ok(None),
501            // convert int to float, deterministic
502            wasmparser::Operator::F32ConvertI32S
503            | wasmparser::Operator::F32ConvertI32U
504            | wasmparser::Operator::F32ConvertI64S
505            | wasmparser::Operator::F32ConvertI64U => Ok(None),
506            // non-deterministic float operation that may produce any NaN
507            wasmparser::Operator::F32DemoteF64 => Ok(Some(MaybeNaNKind::F32)),
508            // convert int to float, deterministic
509            wasmparser::Operator::F64ConvertI32S
510            | wasmparser::Operator::F64ConvertI32U
511            | wasmparser::Operator::F64ConvertI64S
512            | wasmparser::Operator::F64ConvertI64U => Ok(None),
513            // non-deterministic float operation that may produce any NaN
514            wasmparser::Operator::F64PromoteF32 => Ok(Some(MaybeNaNKind::F64)),
515            // float <-> int bit cast, deterministic
516            wasmparser::Operator::I32ReinterpretF32
517            | wasmparser::Operator::I64ReinterpretF64
518            | wasmparser::Operator::F32ReinterpretI32
519            | wasmparser::Operator::F64ReinterpretI64 => Ok(None),
520            // === Sign extension ===
521            // non-float operation
522            wasmparser::Operator::I32Extend8S
523            | wasmparser::Operator::I32Extend16S
524            | wasmparser::Operator::I64Extend8S
525            | wasmparser::Operator::I64Extend16S
526            | wasmparser::Operator::I64Extend32S => Ok(None),
527            // === Garbage collection ===
528            // non-float operation
529            wasmparser::Operator::StructNew { .. }
530            | wasmparser::Operator::StructNewDefault { .. }
531            | wasmparser::Operator::StructGet { .. }
532            | wasmparser::Operator::StructGetS { .. }
533            | wasmparser::Operator::StructGetU { .. }
534            | wasmparser::Operator::StructSet { .. }
535            | wasmparser::Operator::ArrayNew { .. }
536            | wasmparser::Operator::ArrayNewDefault { .. }
537            | wasmparser::Operator::ArrayNewFixed { .. }
538            | wasmparser::Operator::ArrayNewData { .. }
539            | wasmparser::Operator::ArrayNewElem { .. }
540            | wasmparser::Operator::ArrayGet { .. }
541            | wasmparser::Operator::ArrayGetS { .. }
542            | wasmparser::Operator::ArrayGetU { .. }
543            | wasmparser::Operator::ArraySet { .. }
544            | wasmparser::Operator::ArrayLen
545            | wasmparser::Operator::ArrayFill { .. }
546            | wasmparser::Operator::ArrayCopy { .. }
547            | wasmparser::Operator::ArrayInitData { .. }
548            | wasmparser::Operator::ArrayInitElem { .. }
549            | wasmparser::Operator::RefTestNonNull { .. }
550            | wasmparser::Operator::RefTestNullable { .. }
551            | wasmparser::Operator::RefCastNonNull { .. }
552            | wasmparser::Operator::RefCastNullable { .. }
553            | wasmparser::Operator::BrOnCast { .. }
554            | wasmparser::Operator::BrOnCastFail { .. }
555            | wasmparser::Operator::AnyConvertExtern
556            | wasmparser::Operator::ExternConvertAny
557            | wasmparser::Operator::RefI31
558            | wasmparser::Operator::I31GetS
559            | wasmparser::Operator::I31GetU => Ok(None),
560            // === Non-trapping float-to-int conversions ===
561            // truncate float to int, which saturates to be deterministic
562            wasmparser::Operator::I32TruncSatF32S
563            | wasmparser::Operator::I32TruncSatF32U
564            | wasmparser::Operator::I32TruncSatF64S
565            | wasmparser::Operator::I32TruncSatF64U
566            | wasmparser::Operator::I64TruncSatF32S
567            | wasmparser::Operator::I64TruncSatF32U
568            | wasmparser::Operator::I64TruncSatF64S
569            | wasmparser::Operator::I64TruncSatF64U => Ok(None),
570            // === Bulk memory ===
571            // non-float operation
572            wasmparser::Operator::MemoryInit { .. }
573            | wasmparser::Operator::DataDrop { .. }
574            | wasmparser::Operator::MemoryCopy { .. }
575            | wasmparser::Operator::MemoryFill { .. }
576            | wasmparser::Operator::TableInit { .. }
577            | wasmparser::Operator::ElemDrop { .. }
578            | wasmparser::Operator::TableCopy { .. } => Ok(None),
579            // === Reference types ===
580            // non-float operation
581            wasmparser::Operator::TableFill { .. }
582            | wasmparser::Operator::TableGet { .. }
583            | wasmparser::Operator::TableSet { .. }
584            | wasmparser::Operator::TableGrow { .. }
585            | wasmparser::Operator::TableSize { .. } => Ok(None),
586            // === Memory control ===
587            // non-float operation
588            wasmparser::Operator::MemoryDiscard { .. } => Ok(None),
589            // === Threads ===
590            // non-deterministic with potential data races
591            wasmparser::Operator::MemoryAtomicNotify { .. }
592            | wasmparser::Operator::MemoryAtomicWait32 { .. }
593            | wasmparser::Operator::MemoryAtomicWait64 { .. }
594            | wasmparser::Operator::AtomicFence
595            | wasmparser::Operator::I32AtomicLoad { .. }
596            | wasmparser::Operator::I64AtomicLoad { .. }
597            | wasmparser::Operator::I32AtomicLoad8U { .. }
598            | wasmparser::Operator::I32AtomicLoad16U { .. }
599            | wasmparser::Operator::I64AtomicLoad8U { .. }
600            | wasmparser::Operator::I64AtomicLoad16U { .. }
601            | wasmparser::Operator::I64AtomicLoad32U { .. }
602            | wasmparser::Operator::I32AtomicStore { .. }
603            | wasmparser::Operator::I64AtomicStore { .. }
604            | wasmparser::Operator::I32AtomicStore8 { .. }
605            | wasmparser::Operator::I32AtomicStore16 { .. }
606            | wasmparser::Operator::I64AtomicStore8 { .. }
607            | wasmparser::Operator::I64AtomicStore16 { .. }
608            | wasmparser::Operator::I64AtomicStore32 { .. }
609            | wasmparser::Operator::I32AtomicRmwAdd { .. }
610            | wasmparser::Operator::I64AtomicRmwAdd { .. }
611            | wasmparser::Operator::I32AtomicRmw8AddU { .. }
612            | wasmparser::Operator::I32AtomicRmw16AddU { .. }
613            | wasmparser::Operator::I64AtomicRmw8AddU { .. }
614            | wasmparser::Operator::I64AtomicRmw16AddU { .. }
615            | wasmparser::Operator::I64AtomicRmw32AddU { .. }
616            | wasmparser::Operator::I32AtomicRmwSub { .. }
617            | wasmparser::Operator::I64AtomicRmwSub { .. }
618            | wasmparser::Operator::I32AtomicRmw8SubU { .. }
619            | wasmparser::Operator::I32AtomicRmw16SubU { .. }
620            | wasmparser::Operator::I64AtomicRmw8SubU { .. }
621            | wasmparser::Operator::I64AtomicRmw16SubU { .. }
622            | wasmparser::Operator::I64AtomicRmw32SubU { .. }
623            | wasmparser::Operator::I32AtomicRmwAnd { .. }
624            | wasmparser::Operator::I64AtomicRmwAnd { .. }
625            | wasmparser::Operator::I32AtomicRmw8AndU { .. }
626            | wasmparser::Operator::I32AtomicRmw16AndU { .. }
627            | wasmparser::Operator::I64AtomicRmw8AndU { .. }
628            | wasmparser::Operator::I64AtomicRmw16AndU { .. }
629            | wasmparser::Operator::I64AtomicRmw32AndU { .. }
630            | wasmparser::Operator::I32AtomicRmwOr { .. }
631            | wasmparser::Operator::I64AtomicRmwOr { .. }
632            | wasmparser::Operator::I32AtomicRmw8OrU { .. }
633            | wasmparser::Operator::I32AtomicRmw16OrU { .. }
634            | wasmparser::Operator::I64AtomicRmw8OrU { .. }
635            | wasmparser::Operator::I64AtomicRmw16OrU { .. }
636            | wasmparser::Operator::I64AtomicRmw32OrU { .. }
637            | wasmparser::Operator::I32AtomicRmwXor { .. }
638            | wasmparser::Operator::I64AtomicRmwXor { .. }
639            | wasmparser::Operator::I32AtomicRmw8XorU { .. }
640            | wasmparser::Operator::I32AtomicRmw16XorU { .. }
641            | wasmparser::Operator::I64AtomicRmw8XorU { .. }
642            | wasmparser::Operator::I64AtomicRmw16XorU { .. }
643            | wasmparser::Operator::I64AtomicRmw32XorU { .. }
644            | wasmparser::Operator::I32AtomicRmwXchg { .. }
645            | wasmparser::Operator::I64AtomicRmwXchg { .. }
646            | wasmparser::Operator::I32AtomicRmw8XchgU { .. }
647            | wasmparser::Operator::I32AtomicRmw16XchgU { .. }
648            | wasmparser::Operator::I64AtomicRmw8XchgU { .. }
649            | wasmparser::Operator::I64AtomicRmw16XchgU { .. }
650            | wasmparser::Operator::I64AtomicRmw32XchgU { .. }
651            | wasmparser::Operator::I32AtomicRmwCmpxchg { .. }
652            | wasmparser::Operator::I64AtomicRmwCmpxchg { .. }
653            | wasmparser::Operator::I32AtomicRmw8CmpxchgU { .. }
654            | wasmparser::Operator::I32AtomicRmw16CmpxchgU { .. }
655            | wasmparser::Operator::I64AtomicRmw8CmpxchgU { .. }
656            | wasmparser::Operator::I64AtomicRmw16CmpxchgU { .. }
657            | wasmparser::Operator::I64AtomicRmw32CmpxchgU { .. } => {
658                Err(NonDeterministicWasmFeature::Threads)
659            }
660            // === Shared-everything threads ===
661            // non-deterministic with potential data races
662            wasmparser::Operator::GlobalAtomicGet { .. }
663            | wasmparser::Operator::GlobalAtomicSet { .. }
664            | wasmparser::Operator::GlobalAtomicRmwAdd { .. }
665            | wasmparser::Operator::GlobalAtomicRmwSub { .. }
666            | wasmparser::Operator::GlobalAtomicRmwAnd { .. }
667            | wasmparser::Operator::GlobalAtomicRmwOr { .. }
668            | wasmparser::Operator::GlobalAtomicRmwXor { .. }
669            | wasmparser::Operator::GlobalAtomicRmwXchg { .. }
670            | wasmparser::Operator::GlobalAtomicRmwCmpxchg { .. }
671            | wasmparser::Operator::TableAtomicGet { .. }
672            | wasmparser::Operator::TableAtomicSet { .. }
673            | wasmparser::Operator::TableAtomicRmwXchg { .. }
674            | wasmparser::Operator::TableAtomicRmwCmpxchg { .. }
675            | wasmparser::Operator::StructAtomicGet { .. }
676            | wasmparser::Operator::StructAtomicGetS { .. }
677            | wasmparser::Operator::StructAtomicGetU { .. }
678            | wasmparser::Operator::StructAtomicSet { .. }
679            | wasmparser::Operator::StructAtomicRmwAdd { .. }
680            | wasmparser::Operator::StructAtomicRmwSub { .. }
681            | wasmparser::Operator::StructAtomicRmwAnd { .. }
682            | wasmparser::Operator::StructAtomicRmwOr { .. }
683            | wasmparser::Operator::StructAtomicRmwXor { .. }
684            | wasmparser::Operator::StructAtomicRmwXchg { .. }
685            | wasmparser::Operator::StructAtomicRmwCmpxchg { .. }
686            | wasmparser::Operator::ArrayAtomicGet { .. }
687            | wasmparser::Operator::ArrayAtomicGetS { .. }
688            | wasmparser::Operator::ArrayAtomicGetU { .. }
689            | wasmparser::Operator::ArrayAtomicSet { .. }
690            | wasmparser::Operator::ArrayAtomicRmwAdd { .. }
691            | wasmparser::Operator::ArrayAtomicRmwSub { .. }
692            | wasmparser::Operator::ArrayAtomicRmwAnd { .. }
693            | wasmparser::Operator::ArrayAtomicRmwOr { .. }
694            | wasmparser::Operator::ArrayAtomicRmwXor { .. }
695            | wasmparser::Operator::ArrayAtomicRmwXchg { .. }
696            | wasmparser::Operator::ArrayAtomicRmwCmpxchg { .. }
697            | wasmparser::Operator::RefI31Shared => {
698                Err(NonDeterministicWasmFeature::SharedEverythingThreads)
699            }
700            // === SIMD ===
701            // non-float operation, memory loads/stores are deterministic
702            wasmparser::Operator::V128Load { .. }
703            | wasmparser::Operator::V128Load8x8S { .. }
704            | wasmparser::Operator::V128Load8x8U { .. }
705            | wasmparser::Operator::V128Load16x4S { .. }
706            | wasmparser::Operator::V128Load16x4U { .. }
707            | wasmparser::Operator::V128Load32x2S { .. }
708            | wasmparser::Operator::V128Load32x2U { .. }
709            | wasmparser::Operator::V128Load8Splat { .. }
710            | wasmparser::Operator::V128Load16Splat { .. }
711            | wasmparser::Operator::V128Load32Splat { .. }
712            | wasmparser::Operator::V128Load64Splat { .. }
713            | wasmparser::Operator::V128Load32Zero { .. }
714            | wasmparser::Operator::V128Load64Zero { .. }
715            | wasmparser::Operator::V128Store { .. }
716            | wasmparser::Operator::V128Load8Lane { .. }
717            | wasmparser::Operator::V128Load16Lane { .. }
718            | wasmparser::Operator::V128Load32Lane { .. }
719            | wasmparser::Operator::V128Load64Lane { .. }
720            | wasmparser::Operator::V128Store8Lane { .. }
721            | wasmparser::Operator::V128Store16Lane { .. }
722            | wasmparser::Operator::V128Store32Lane { .. }
723            | wasmparser::Operator::V128Store64Lane { .. } => Ok(None),
724            // constant values are deterministic, even when they represent
725            //  non-canonical NaN values
726            wasmparser::Operator::V128Const { .. } => Ok(None),
727            // non-float operation
728            wasmparser::Operator::I8x16Shuffle { .. }
729            | wasmparser::Operator::I8x16ExtractLaneS { .. }
730            | wasmparser::Operator::I8x16ExtractLaneU { .. }
731            | wasmparser::Operator::I8x16ReplaceLane { .. }
732            | wasmparser::Operator::I16x8ExtractLaneS { .. }
733            | wasmparser::Operator::I16x8ExtractLaneU { .. }
734            | wasmparser::Operator::I16x8ReplaceLane { .. }
735            | wasmparser::Operator::I32x4ExtractLane { .. }
736            | wasmparser::Operator::I32x4ReplaceLane { .. }
737            | wasmparser::Operator::I64x2ExtractLane { .. }
738            | wasmparser::Operator::I64x2ReplaceLane { .. } => Ok(None),
739            // extracting or replacing lanes is deterministic
740            wasmparser::Operator::F32x4ExtractLane { .. }
741            | wasmparser::Operator::F32x4ReplaceLane { .. }
742            | wasmparser::Operator::F64x2ExtractLane { .. }
743            | wasmparser::Operator::F64x2ReplaceLane { .. } => Ok(None),
744            // non-float operation
745            wasmparser::Operator::I8x16Swizzle
746            | wasmparser::Operator::I8x16Splat
747            | wasmparser::Operator::I16x8Splat
748            | wasmparser::Operator::I32x4Splat
749            | wasmparser::Operator::I64x2Splat => Ok(None),
750            // splatting is deterministic, even when a non-canonical NaN value
751            //  is splatted
752            wasmparser::Operator::F32x4Splat | wasmparser::Operator::F64x2Splat => Ok(None),
753            // non-float operation
754            wasmparser::Operator::I8x16Eq
755            | wasmparser::Operator::I8x16Ne
756            | wasmparser::Operator::I8x16LtS
757            | wasmparser::Operator::I8x16LtU
758            | wasmparser::Operator::I8x16GtS
759            | wasmparser::Operator::I8x16GtU
760            | wasmparser::Operator::I8x16LeS
761            | wasmparser::Operator::I8x16LeU
762            | wasmparser::Operator::I8x16GeS
763            | wasmparser::Operator::I8x16GeU
764            | wasmparser::Operator::I16x8Eq
765            | wasmparser::Operator::I16x8Ne
766            | wasmparser::Operator::I16x8LtS
767            | wasmparser::Operator::I16x8LtU
768            | wasmparser::Operator::I16x8GtS
769            | wasmparser::Operator::I16x8GtU
770            | wasmparser::Operator::I16x8LeS
771            | wasmparser::Operator::I16x8LeU
772            | wasmparser::Operator::I16x8GeS
773            | wasmparser::Operator::I16x8GeU
774            | wasmparser::Operator::I32x4Eq
775            | wasmparser::Operator::I32x4Ne
776            | wasmparser::Operator::I32x4LtS
777            | wasmparser::Operator::I32x4LtU
778            | wasmparser::Operator::I32x4GtS
779            | wasmparser::Operator::I32x4GtU
780            | wasmparser::Operator::I32x4LeS
781            | wasmparser::Operator::I32x4LeU
782            | wasmparser::Operator::I32x4GeS
783            | wasmparser::Operator::I32x4GeU
784            | wasmparser::Operator::I64x2Eq
785            | wasmparser::Operator::I64x2Ne
786            | wasmparser::Operator::I64x2LtS
787            | wasmparser::Operator::I64x2GtS
788            | wasmparser::Operator::I64x2LeS
789            | wasmparser::Operator::I64x2GeS => Ok(None),
790            // deterministic float operation
791            wasmparser::Operator::F32x4Eq
792            | wasmparser::Operator::F32x4Ne
793            | wasmparser::Operator::F32x4Lt
794            | wasmparser::Operator::F32x4Gt
795            | wasmparser::Operator::F32x4Le
796            | wasmparser::Operator::F32x4Ge
797            | wasmparser::Operator::F64x2Eq
798            | wasmparser::Operator::F64x2Ne
799            | wasmparser::Operator::F64x2Lt
800            | wasmparser::Operator::F64x2Gt
801            | wasmparser::Operator::F64x2Le
802            | wasmparser::Operator::F64x2Ge => Ok(None),
803            // non-float operation
804            wasmparser::Operator::V128Not
805            | wasmparser::Operator::V128And
806            | wasmparser::Operator::V128AndNot
807            | wasmparser::Operator::V128Or
808            | wasmparser::Operator::V128Xor
809            | wasmparser::Operator::V128Bitselect
810            | wasmparser::Operator::V128AnyTrue
811            | wasmparser::Operator::I8x16Abs
812            | wasmparser::Operator::I8x16Neg
813            | wasmparser::Operator::I8x16Popcnt
814            | wasmparser::Operator::I8x16AllTrue
815            | wasmparser::Operator::I8x16Bitmask
816            | wasmparser::Operator::I8x16NarrowI16x8S
817            | wasmparser::Operator::I8x16NarrowI16x8U
818            | wasmparser::Operator::I8x16Shl
819            | wasmparser::Operator::I8x16ShrS
820            | wasmparser::Operator::I8x16ShrU
821            | wasmparser::Operator::I8x16Add
822            | wasmparser::Operator::I8x16AddSatS
823            | wasmparser::Operator::I8x16AddSatU
824            | wasmparser::Operator::I8x16Sub
825            | wasmparser::Operator::I8x16SubSatS
826            | wasmparser::Operator::I8x16SubSatU
827            | wasmparser::Operator::I8x16MinS
828            | wasmparser::Operator::I8x16MinU
829            | wasmparser::Operator::I8x16MaxS
830            | wasmparser::Operator::I8x16MaxU
831            | wasmparser::Operator::I8x16AvgrU
832            | wasmparser::Operator::I16x8ExtAddPairwiseI8x16S
833            | wasmparser::Operator::I16x8ExtAddPairwiseI8x16U
834            | wasmparser::Operator::I16x8Abs
835            | wasmparser::Operator::I16x8Neg
836            | wasmparser::Operator::I16x8Q15MulrSatS
837            | wasmparser::Operator::I16x8AllTrue
838            | wasmparser::Operator::I16x8Bitmask
839            | wasmparser::Operator::I16x8NarrowI32x4S
840            | wasmparser::Operator::I16x8NarrowI32x4U
841            | wasmparser::Operator::I16x8ExtendLowI8x16S
842            | wasmparser::Operator::I16x8ExtendHighI8x16S
843            | wasmparser::Operator::I16x8ExtendLowI8x16U
844            | wasmparser::Operator::I16x8ExtendHighI8x16U
845            | wasmparser::Operator::I16x8Shl
846            | wasmparser::Operator::I16x8ShrS
847            | wasmparser::Operator::I16x8ShrU
848            | wasmparser::Operator::I16x8Add
849            | wasmparser::Operator::I16x8AddSatS
850            | wasmparser::Operator::I16x8AddSatU
851            | wasmparser::Operator::I16x8Sub
852            | wasmparser::Operator::I16x8SubSatS
853            | wasmparser::Operator::I16x8SubSatU
854            | wasmparser::Operator::I16x8Mul
855            | wasmparser::Operator::I16x8MinS
856            | wasmparser::Operator::I16x8MinU
857            | wasmparser::Operator::I16x8MaxS
858            | wasmparser::Operator::I16x8MaxU
859            | wasmparser::Operator::I16x8AvgrU
860            | wasmparser::Operator::I16x8ExtMulLowI8x16S
861            | wasmparser::Operator::I16x8ExtMulHighI8x16S
862            | wasmparser::Operator::I16x8ExtMulLowI8x16U
863            | wasmparser::Operator::I16x8ExtMulHighI8x16U
864            | wasmparser::Operator::I32x4ExtAddPairwiseI16x8S
865            | wasmparser::Operator::I32x4ExtAddPairwiseI16x8U
866            | wasmparser::Operator::I32x4Abs
867            | wasmparser::Operator::I32x4Neg
868            | wasmparser::Operator::I32x4AllTrue
869            | wasmparser::Operator::I32x4Bitmask
870            | wasmparser::Operator::I32x4ExtendLowI16x8S
871            | wasmparser::Operator::I32x4ExtendHighI16x8S
872            | wasmparser::Operator::I32x4ExtendLowI16x8U
873            | wasmparser::Operator::I32x4ExtendHighI16x8U
874            | wasmparser::Operator::I32x4Shl
875            | wasmparser::Operator::I32x4ShrS
876            | wasmparser::Operator::I32x4ShrU
877            | wasmparser::Operator::I32x4Add
878            | wasmparser::Operator::I32x4Sub
879            | wasmparser::Operator::I32x4Mul
880            | wasmparser::Operator::I32x4MinS
881            | wasmparser::Operator::I32x4MinU
882            | wasmparser::Operator::I32x4MaxS
883            | wasmparser::Operator::I32x4MaxU
884            | wasmparser::Operator::I32x4DotI16x8S
885            | wasmparser::Operator::I32x4ExtMulLowI16x8S
886            | wasmparser::Operator::I32x4ExtMulHighI16x8S
887            | wasmparser::Operator::I32x4ExtMulLowI16x8U
888            | wasmparser::Operator::I32x4ExtMulHighI16x8U
889            | wasmparser::Operator::I64x2Abs
890            | wasmparser::Operator::I64x2Neg
891            | wasmparser::Operator::I64x2AllTrue
892            | wasmparser::Operator::I64x2Bitmask
893            | wasmparser::Operator::I64x2ExtendLowI32x4S
894            | wasmparser::Operator::I64x2ExtendHighI32x4S
895            | wasmparser::Operator::I64x2ExtendLowI32x4U
896            | wasmparser::Operator::I64x2ExtendHighI32x4U
897            | wasmparser::Operator::I64x2Shl
898            | wasmparser::Operator::I64x2ShrS
899            | wasmparser::Operator::I64x2ShrU
900            | wasmparser::Operator::I64x2Add
901            | wasmparser::Operator::I64x2Sub
902            | wasmparser::Operator::I64x2Mul
903            | wasmparser::Operator::I64x2ExtMulLowI32x4S
904            | wasmparser::Operator::I64x2ExtMulHighI32x4S
905            | wasmparser::Operator::I64x2ExtMulLowI32x4U
906            | wasmparser::Operator::I64x2ExtMulHighI32x4U => Ok(None),
907            // non-deterministic float operation that may produce any NaN
908            wasmparser::Operator::F32x4Ceil
909            | wasmparser::Operator::F32x4Floor
910            | wasmparser::Operator::F32x4Trunc
911            | wasmparser::Operator::F32x4Nearest => Ok(Some(MaybeNaNKind::F32x4)),
912            // deterministic float operation
913            wasmparser::Operator::F32x4Abs | wasmparser::Operator::F32x4Neg => Ok(None),
914            // non-deterministic float operation that may produce any NaN
915            wasmparser::Operator::F32x4Sqrt
916            | wasmparser::Operator::F32x4Add
917            | wasmparser::Operator::F32x4Sub
918            | wasmparser::Operator::F32x4Mul
919            | wasmparser::Operator::F32x4Div
920            | wasmparser::Operator::F32x4Min
921            | wasmparser::Operator::F32x4Max => Ok(Some(MaybeNaNKind::F32x4)),
922            // deterministic float operation
923            wasmparser::Operator::F32x4PMin | wasmparser::Operator::F32x4PMax => Ok(None),
924            // non-deterministic float operation that may produce any NaN
925            wasmparser::Operator::F64x2Ceil
926            | wasmparser::Operator::F64x2Floor
927            | wasmparser::Operator::F64x2Trunc
928            | wasmparser::Operator::F64x2Nearest => Ok(Some(MaybeNaNKind::F64x2)),
929            // deterministic float operation
930            wasmparser::Operator::F64x2Abs | wasmparser::Operator::F64x2Neg => Ok(None),
931            // non-deterministic float operation that may produce any NaN
932            wasmparser::Operator::F64x2Sqrt
933            | wasmparser::Operator::F64x2Add
934            | wasmparser::Operator::F64x2Sub
935            | wasmparser::Operator::F64x2Mul
936            | wasmparser::Operator::F64x2Div
937            | wasmparser::Operator::F64x2Min
938            | wasmparser::Operator::F64x2Max => Ok(Some(MaybeNaNKind::F64x2)),
939            // deterministic float operation
940            wasmparser::Operator::F64x2PMin | wasmparser::Operator::F64x2PMax => Ok(None),
941            // truncate float to int, which saturates to be deterministic
942            wasmparser::Operator::I32x4TruncSatF32x4S
943            | wasmparser::Operator::I32x4TruncSatF32x4U => Ok(None),
944            // convert int to float, deterministic
945            wasmparser::Operator::F32x4ConvertI32x4S | wasmparser::Operator::F32x4ConvertI32x4U => {
946                Ok(None)
947            }
948            // truncate float to int, which saturates to be deterministic
949            wasmparser::Operator::I32x4TruncSatF64x2SZero
950            | wasmparser::Operator::I32x4TruncSatF64x2UZero => Ok(None),
951            // convert int to float, deterministic
952            wasmparser::Operator::F64x2ConvertLowI32x4S
953            | wasmparser::Operator::F64x2ConvertLowI32x4U => Ok(None),
954            // non-deterministic float operation that may produce any NaN
955            wasmparser::Operator::F32x4DemoteF64x2Zero => Ok(Some(MaybeNaNKind::F32x4)),
956            wasmparser::Operator::F64x2PromoteLowF32x4 => Ok(Some(MaybeNaNKind::F64x2)),
957            // === Relaxed SIMD ===
958            // non-deterministic, result may be platform-dependent
959            wasmparser::Operator::I8x16RelaxedSwizzle
960            | wasmparser::Operator::I32x4RelaxedTruncF32x4S
961            | wasmparser::Operator::I32x4RelaxedTruncF32x4U
962            | wasmparser::Operator::I32x4RelaxedTruncF64x2SZero
963            | wasmparser::Operator::I32x4RelaxedTruncF64x2UZero
964            | wasmparser::Operator::F32x4RelaxedMadd
965            | wasmparser::Operator::F32x4RelaxedNmadd
966            | wasmparser::Operator::F64x2RelaxedMadd
967            | wasmparser::Operator::F64x2RelaxedNmadd
968            | wasmparser::Operator::I8x16RelaxedLaneselect
969            | wasmparser::Operator::I16x8RelaxedLaneselect
970            | wasmparser::Operator::I32x4RelaxedLaneselect
971            | wasmparser::Operator::I64x2RelaxedLaneselect
972            | wasmparser::Operator::F32x4RelaxedMin
973            | wasmparser::Operator::F32x4RelaxedMax
974            | wasmparser::Operator::F64x2RelaxedMin
975            | wasmparser::Operator::F64x2RelaxedMax
976            | wasmparser::Operator::I16x8RelaxedQ15mulrS
977            | wasmparser::Operator::I16x8RelaxedDotI8x16I7x16S
978            | wasmparser::Operator::I32x4RelaxedDotI8x16I7x16AddS => {
979                Err(NonDeterministicWasmFeature::RelaxedSimd)
980            }
981            // === Typed function references ===
982            // non-float operation
983            wasmparser::Operator::CallRef { .. }
984            | wasmparser::Operator::ReturnCallRef { .. }
985            | wasmparser::Operator::RefAsNonNull
986            | wasmparser::Operator::BrOnNull { .. }
987            | wasmparser::Operator::BrOnNonNull { .. } => Ok(None),
988            // === Stack switching ===
989            // non-float operation
990            wasmparser::Operator::ContNew { .. }
991            | wasmparser::Operator::ContBind { .. }
992            | wasmparser::Operator::Suspend { .. }
993            | wasmparser::Operator::Resume { .. }
994            | wasmparser::Operator::ResumeThrow { .. }
995            | wasmparser::Operator::Switch { .. } => Ok(None),
996            // === Wide Arithmetic ===
997            // non-float operation
998            wasmparser::Operator::I64Add128
999            | wasmparser::Operator::I64Sub128
1000            | wasmparser::Operator::I64MulWideS
1001            | wasmparser::Operator::I64MulWideU => Ok(None),
1002            // === FIXME ===
1003            #[cfg(not(test))]
1004            #[expect(clippy::panic)]
1005            _ => panic!("unsupported instruction"),
1006            #[cfg(test)]
1007            #[expect(unsafe_code)]
1008            _ => {
1009                unsafe extern "C" {
1010                    fn nan_canonicaliser_unhandled_operator() -> !;
1011                }
1012                unsafe { nan_canonicaliser_unhandled_operator() }
1013            }
1014        }
1015    }
1016}
1017
1018#[derive(Copy, Clone)]
1019enum MaybeNaNKind {
1020    F32,
1021    F64,
1022    F32x4,
1023    F64x2,
1024}
1025
1026#[derive(Debug, thiserror::Error)]
1027enum NonDeterministicWasmFeature {
1028    #[error(
1029        "WASM uses the non-deterministic relaxed-simd feature, which may produce \
1030         platform-dependent results"
1031    )]
1032    RelaxedSimd,
1033    #[error("WASM uses the non-deterministic threads feature, which may produce data races")]
1034    Threads,
1035    #[error(
1036        "WASM uses the non-deterministic shared-everything threads feature, which may produce \
1037         data races"
1038    )]
1039    SharedEverythingThreads,
1040}