chakra-core / chakra-core/ChakraCore
Assertion failure at lib/Runtime/Library/JavascriptArray.cpp:5766
Open
- Dominant language
- JavaScript
- Stars
- 9.3k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
The debug build crashes with assertion failure at lib/Runtime/Library/JavascriptArray.cpp:5766.
PoC:
```
const var_0 = new Uint8Array([1, 2, 3, 4]);
Object.defineProperty(var_0, 'length', { value: 4398046507008 });
Array.prototype.reverse.call(var_0);
```
Commit: 62d3d11
Build Option: None
OS: Ubuntu 18.04.1 LTS
Arch: x86_64
Contributor guide
Assessment
This issue has not been assessed yet.