chakra-core / chakra-core/ChakraCore

Assertion failure in JavascriptArray.cpp

Open
#6,774 1 comment 0 reactions 0 assignees View on GitHub
Needs More Info
Dominant language
JavaScript
Stars
9.3k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

the following poc cause a assertion failure in "debug" build on ubuntu.

```
const v6 = Array(4294967295);
const v8 = v6["copyWithin"]();
```

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the supplied Array/copyWithin POC in a debug build on Ubuntu, then inspect the assertion path in JavascriptArray.cpp. Done means the POC no longer triggers an assertion and the behavior is covered by an appropriate regression check.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp, javascript
Domain
compilers
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.