chakra-core / chakra-core/ChakraCore

ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse

Open
#6,453 0 comments 1 reaction 0 assignees View on GitHub
Bug Debugger
Dominant language
JavaScript
Stars
9.3k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

###### ChakraCore version:
version 1.12.0.0-beta

###### Build Commond
./build.sh --debug

###### OS
Ubuntu 16.04.6 LTS (Linux 4.4.0-142-generic x86_64)

###### Test case
```
function test0() {
var func2 = (async (xsbazt = hkvvxr(x)) => [...[
-2,
]]);
var a = -191;
func3(a);
}

function Run(){
WScript.Echo('PASSED');
}

WScript.Attach(Run);
```

###### Output
```
ASSERTION 202914: (ChakraCore/lib/Runtime/Debug/DebugContext.cpp, line 359) pFuncBody->GetYieldRegister() == oldYieldRegister
Failure: (pFuncBody->GetYieldRegister() == oldYieldRegister)
Illegal instruction
```

Credits: This vulnerability is detected by chong from OWL337.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.