chakra-core / chakra-core/ChakraCore

Null pointer dereference in ValueType::FromObject() when jitting

Open
#6,333 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
9.3k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

```
function foo(){
try{
x = arguments;
throw Error();
} catch(e){
return x.length;
}
var x = {};
}

for(var v0 = 0; v0 < 0x1000; v0++){
foo();
}
```

It is related to #6058 .

ChakraCore Version: ch version 1.11.15.0 (1B6EE856A9F07071BB8D11ED9068CF262DF8285FC9E762E9F77FBB6A3957E365)
Environment: 18.04.2-Ubuntu

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.