chakra-core / chakra-core/ChakraCore

Assertion failure in JavascriptArray.cpp

Open
#6,770 7 comments 0 reactions 0 assignees View on GitHub
Bug good first issue
Dominant language
JavaScript
Stars
9.3k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

the following poc cause a assertion failure in "debug" build on ubuntu.

```
function opt(){
const v2 = [-1000000000.0];
v2.length = 4294967295;
const v3 = v2.copyWithin();
return v3;
}

for(let i=0;i<0x200;i++){
opt(false);
}
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.