chakra-core / chakra-core/ChakraCore
Crash due to memory corruption in Js::JavascriptNativeIntArray::ValidateArray
Open
- Dominant language
- JavaScript
- Stars
- 9.3k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
The debug build of Chakracore crashes
PoC:
```
var arr = [0, 1, 2, 3, 4, 5, 6, 7];
Array.prototype.push.apply(arr, []);
```
Version= v1.11.12
OS=Ubuntu 16.04.6
Arch=x86_64
Contributor guide
Assessment
This issue has not been assessed yet.