ASSERTION Failure: (instr->m_func->GetJITFunctionBody()->IsCoroutine() || !instr->dstIsTempObject)

[anbu1024]

ChakraCore version: commit c3ead3f

Build cmd:

./build.sh --debug --static

Test case:

function opt() {

    let v1 = 1000000000.0;

    const v2 = [];
    let v3 = 0;

    while (v3 < 1) {
        let v5 = {};
        v1 = v2;
        ({"__proto__":v3,"e":v5,"valueOf":v1,...v5} = v5);
    }

    const v8 = new Uint16Array(65489);

    v1[6] = 65489;

    v8[255] = 1;
}

for(let i=0;i<1024;i++)
{
    opt();
}

Execute

./ch ./test.js

Error msg:

ASSERTION 2773824: (ChakraCore/lib/Backend/TempTracker.cpp, line 1437) instr->m_func->GetJITFunctionBody()->IsCoroutine() || !instr->dstIsTempObject
 Failure: (instr->m_func->GetJITFunctionBody()->IsCoroutine() || !instr->dstIsTempObject)
Illegal instruction