chakra-core / chakra-core/ChakraCore

Illegal instruction (core dumped) ASSERTION 1541158: (ChakraCore/lib/Backend/GlobOpt.cpp, line 12838) !isJsArray

Open
#6,934 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
9.3k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

ChakraCore version:
commit c3ead3f8a6e0bb8e32e043adc091c68cba5935e9

Build cmd:
```
./build.sh --debug --static
```

Test case:
```js
function foo() {
let x = new Number(Number,Number,Number);
const y = [];

do {
const z = y.length;
} while (5 < 5);

const t = y.length;
t[4294967295] = t;

for (let i = -9223372036854775807; i >= y; i = i ** x) {
;
}
}

for(let i=0;i<0x300;i++){
foo();
}
```

Error msg:
```
ASSERTION 1541158: (ChakraCore/lib/Backend/GlobOpt.cpp, line 12838) !isJsArray || DoArrayCheckHoist(valueInfo->Type(), implicitCallsLoop) || ( ignoreKnownImplicitCalls && !(implicitCallsLoop ? ImplicitCallFlagsAllowOpts(implicitCallsLoop) : ImplicitCallFlagsAllowOpts(func)) )
Failure: (!isJsArray || DoArrayCheckHoist(valueInfo->Type(), implicitCallsLoop) || ( ignoreKnownImplicitCalls && !(implicitCallsLoop ? ImplicitCallFlagsAllowOpts(implicitCallsLoop) : ImplicitCallFlagsAllowOpts(func)) ))
Illegal instruction (core dumped)
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.