It would be quite useful to protect other code from that. It could easily be a compiler-based protection: any opcode that can generate it from two/one normal

It would be quite useful to protect other code from that. It could easily be a compiler-based protection: any opcode that can generate it from two/one normal input must be checked for normal results. This is similar to how C++ gives few guarantees but "new" and "this" never give null or unallocated values.