A bug of ‘Array.prototype.sort'

I run the following code in Characore-1.11.15 and get an odd output. The code firstly call the function ‘foo’, at this time, it print “false”. But then, when calling the ‘foo’ again in the ‘sort’, it print “true”. So I think a bug maybe exists in the implementation of ‘Array.prototype.sort’. This bug may affect the sort result.

The code:
```
var array = [21, 45, -12, 37, 0];
function foo() {
print(array<1048576);
}
foo();
arr2 = Array.prototype.sort.call(array, foo);
```

The output:
```
false
true
true
true
true
```

ISec Lab
2019.12.21