Generator ScriptFunctions should only be invoked by generator APIs with the pair of arguments they pass in

[anbu1024]

ChakraCore version: commit c3ead3f

Build cmd:

./build.sh --debug --static

Test case:

function opt(){
    async function foo(a) {
        for (let i = 3705358555; i < foo; i = i + 3705358555) {
            const v7 = await a;
        }
        function bar() {
            'use strict';
            const x = [5.0];
            const y = new Int32Array();
            y[x] = 5.0;
        }
        const z = bar();
    }
    const zz = foo();
    return zz;
}

for(let i=0; i<1024; i++){
    opt();
}

Execute

./ch ./test.js

Error msg:

ASSERTION 2776368: (ChakraCore/lib/Backend/BailOut.cpp, line 1536) Generator ScriptFunctions should only be invoked by generator APIs with the pair of arguments they pass in -- the generator object and a resume yield object
 Failure: (args.Info.Count == 2)
Illegal instruction

[pseudoSOURABH]

i would like to work on this issue?

[ppenzin]

Please go ahead, let me know if you need help.

[rhuanjl]

This bug is yet another generator jit issue - doesn't look like a repeat of the bug that led me to give up on having it ready for our next release.

I think some aspects of the whole approach to generator jit need re-working; I wonder if we should switch it off by default in master?