search

jerryscript-project / jerryscript

Ultra-lightweight JavaScript engine for the Internet of Things.
https://jerryscript.net
Apache License 2.0
6.88k stars 666 forks source link

Assertion 'property == ECMA_PROPERTY_TYPE_NOT_FOUND || property == ECMA_PROPERTY_TYPE_NOT_FOUND_AND_STOP' failed #5088

Open voidptr127 opened 1 year ago

voidptr127 commented 1 year ago
JerryScript revision
05dbbd134c3b9e2482998f267857dd3722001cd7
Build platform
Linux-6.2.15-200.fc37.x86_64-x86_64-with-glibc2.34
clang version 14.0.6 (Red Hat 14.0.6-4.el9_1)
Build steps
CC=/usr/bin/clang python3 tools/build.py --clean \
    --debug \
    --strip=off \
    --compile-flag=-fsanitize=address \
    --lto=off \
    --compile-flag=-g \
    --error-messages=on \
    --promise-callback=on \
    --logging=on \
    --line-info=on \
    --stack-limit=128
Test case
new Function(0x1234);
function Function(Array){
delete Array[0];
new Function(new Float64Array(100000000));

}
Execution
./build/bin/jerry poc.js
Output
ICE: Assertion 'property == ECMA_PROPERTY_TYPE_NOT_FOUND || property == ECMA_PROPERTY_TYPE_NOT_FOUND_AND_STOP' failed at /home/rocky/jerryscript/jerry-core/ecma/operations/ecma-objects-general.c(ecma_op_general_object_delete):105.
Error: JERRY_FATAL_FAILED_ASSERTION
Aborted (core dumped)