ICE: Assertion '!!(flags & PARSER_PATTERN_HAS_REST_ELEMENT) == rest_found' failed at jerryscript/jerry-core/parser/js/js-parser-expr.c(parser_parse_object_initializer):3895.
Error: JERRY_FATAL_FAILED_ASSERTION
AddressSanitizer:DEADLYSIGNAL
=================================================================
==3270099==ERROR: AddressSanitizer: ABRT on unknown address 0x03e90031e5d3 (pc 0x7f13bff6703b bp 0x7fff3c593150 sp 0x7fff3c592ee0 T0)
#0 0x7f13bff6703b in raise /build/glibc-sMfBJT/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1
#1 0x7f13bff46858 in abort /build/glibc-sMfBJT/glibc-2.31/stdlib/abort.c:79:7
#2 0x89ef3f in jerry_port_fatal jerryscript/jerry-port/common/jerry-port-process.c:29:5
#3 0x66b742 in jerry_fatal jerryscript/jerry-core/jrt/jrt-fatals.c:63:3
#4 0x66b4da in jerry_assert_fail jerryscript/jerry-core/jrt/jrt-fatals.c:83:3
#5 0x837a4e in parser_parse_object_initializer jerryscript/jerry-core/parser/js/js-parser-expr.c:3895:3
#6 0x8389ce in parser_parse_initializer_by_next_char jerryscript/jerry-core/parser/js/js-parser-expr.c:3944:5
#7 0x879739 in parser_parse_for_statement_start jerryscript/jerry-core/parser/js/js-parser-statm.c:1293:11
#8 0x868f9b in parser_parse_statements jerryscript/jerry-core/parser/js/js-parser-statm.c:2851:9
#9 0x69ae84 in parser_parse_source jerryscript/jerry-core/parser/js/js-parser.c:2280:5
#10 0x69629a in parser_parse_script jerryscript/jerry-core/parser/js/js-parser.c:3326:38
#11 0x4ced00 in jerry_parse_common jerryscript/jerry-core/api/jerryscript.c:412:21
#12 0x4ce473 in jerry_parse jerryscript/jerry-core/api/jerryscript.c:480:10
#13 0x89cc1f in jerryx_source_parse_script jerryscript/jerry-ext/util/sources.c:52:26
#14 0x89cd6e in jerryx_source_exec_script jerryscript/jerry-ext/util/sources.c:63:26
#15 0x4c4d84 in main jerryscript/jerry-main/main-desktop.c:156:20
#16 0x7f13bff480b2 in __libc_start_main /build/glibc-sMfBJT/glibc-2.31/csu/../csu/libc-start.c:308:16
#17 0x41c53d in _start (jerryscript/build/bin/jerry+0x41c53d)
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: ABRT /build/glibc-sMfBJT/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1 in raise
==3270099==ABORTING
Backtrace
bt
#0 [33m__GI_raise[m ([36msig=sig@entry[m=6) at [32m../sysdeps/unix/sysv/linux/raise.c[m:50
#1 [34m0x00007ffff7c33859[m in [33m__GI_abort[m () at [32mabort.c[m:79
#2 [34m0x000000000089ef40[m in [33mjerry_port_fatal[m ([36mcode[m=JERRY_FATAL_FAILED_ASSERTION) at [32mjerryscript/jerry-port/common/jerry-port-process.c[m:29
#3 [34m0x000000000066b743[m in [33mjerry_fatal[m ([36mcode[m=JERRY_FATAL_FAILED_ASSERTION) at [32mjerryscript/jerry-core/jrt/jrt-fatals.c[m:63
#4 [34m0x000000000066b4db[m in [33mjerry_assert_fail[m ([36massertion[m=0x929ea0 <str> "!!(flags & PARSER_PATTERN_HAS_REST_ELEMENT) == rest_found", [36mfile[m=0x929160 <str> "jerryscript/jerry-core/parser/js/js-parser-expr.c", [36mfunction[m=0x929dc0 <__func__.parser_parse_object_initializer> "parser_parse_object_initializer", [36mline[m=3895) at [32mjerryscript/jerry-core/jrt/jrt-fatals.c[m:83
#5 [34m0x0000000000837a4f[m in [33mparser_parse_object_initializer[m ([36mcontext_p[m=0x7fffffffcd20, [36mflags[m=(PARSER_PATTERN_BINDING | PARSER_PATTERN_TARGET_ON_STACK | PARSER_PATTERN_REST_ELEMENT)) at [32mjerryscript/jerry-core/parser/js/js-parser-expr.c[m:3895
#6 [34m0x00000000008389cf[m in [33mparser_parse_initializer_by_next_char[m ([36mcontext_p[m=0x7fffffffcd20, [36mflags[m=(PARSER_PATTERN_BINDING | PARSER_PATTERN_TARGET_ON_STACK)) at [32mjerryscript/jerry-core/parser/js/js-parser-expr.c[m:3944
#7 [34m0x000000000087973a[m in [33mparser_parse_for_statement_start[m ([36mcontext_p[m=0x7fffffffcd20) at [32mjerryscript/jerry-core/parser/js/js-parser-statm.c[m:1293
#8 [34m0x0000000000868f9c[m in [33mparser_parse_statements[m ([36mcontext_p[m=0x7fffffffcd20) at [32mjerryscript/jerry-core/parser/js/js-parser-statm.c[m:2851
#9 [34m0x000000000069ae85[m in [33mparser_parse_source[m ([36msource_p[m=0x7fffffffd3a0, [36mparse_opts[m=0, [36moptions_p[m=0x7fffffffd4d0) at [32mjerryscript/jerry-core/parser/js/js-parser.c[m:2280
#10 [34m0x000000000069629b[m in [33mparser_parse_script[m ([36msource_p[m=0x7fffffffd3a0, [36mparse_opts[m=0, [36moptions_p[m=0x7fffffffd4d0) at [32mjerryscript/jerry-core/parser/js/js-parser.c[m:3326
#11 [34m0x00000000004ced01[m in [33mjerry_parse_common[m ([36msource_p[m=0x7fffffffd3a0, [36moptions_p[m=0x7fffffffd4d0, [36mparse_opts[m=0) at [32mjerryscript/jerry-core/api/jerryscript.c[m:412
#12 [34m0x00000000004ce474[m in [33mjerry_parse[m ([36msource_p[m=0x607000000020 "for ( var { ... r } = o in new Map ( \"\\uFFA2\" ) ) ; ", [36msource_size[m=77, [36moptions_p[m=0x7fffffffd4d0) at [32mjerryscript/jerry-core/api/jerryscript.c[m:480
#13 [34m0x000000000089cc20[m in [33mjerryx_source_parse_script[m ([36mpath_p[m=0x7fffffffde36 "/run/user/1001/fuzzinator/3261026/3270079-FileWriterDecorator-0e4d2c28b2ac47759841127d665b5fff/0.js") at [32mjerryscript/jerry-ext/util/sources.c[m:52
#14 [34m0x000000000089cd6f[m in [33mjerryx_source_exec_script[m ([36mpath_p[m=0x7fffffffde36 "/run/user/1001/fuzzinator/3261026/3270079-FileWriterDecorator-0e4d2c28b2ac47759841127d665b5fff/0.js") at [32mjerryscript/jerry-ext/util/sources.c[m:63
#15 [34m0x00000000004c4d85[m in [33mmain[m ([36margc[m=2, [36margv[m=0x7fffffffdb08) at [32mjerryscript/jerry-main/main-desktop.c[m:156
JerryScript revision
0d496966
Build platform
Linux-5.4.0-104-generic-x86_64-with-glibc2.29
Build steps
Test case
Output
Backtrace
Found by Fuzzinator with grammarinator.