chakra-core / chakra-core/ChakraCore
Assertion failure in JavascriptArray.cpp
Open
Needs More Info
- Dominant language
- JavaScript
- Stars
- 9.3k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
the following poc cause a assertion failure in "debug" build on ubuntu.
```
const v6 = Array(4294967295);
const v8 = v6["copyWithin"]();
```
Contributor guide
Research direction
Start by reproducing the supplied Array/copyWithin POC in a debug build on Ubuntu, then inspect the assertion path in JavascriptArray.cpp. Done means the POC no longer triggers an assertion and the behavior is covered by an appropriate regression check.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp, javascript
- Domain
- compilers
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100