chakra-core / chakra-core/ChakraCore
Assertion failure in JavascriptArray.cpp
Open
Bug
good first issue
- Dominant language
- JavaScript
- Stars
- 9.3k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
the following poc cause a assertion failure in "debug" build on ubuntu.
```
function opt(){
const v2 = [-1000000000.0];
v2.length = 4294967295;
const v3 = v2.copyWithin();
return v3;
}
for(let i=0;i<0x200;i++){
opt(false);
}
```
Contributor guide
Assessment
This issue has not been assessed yet.