chakra-core / chakra-core/ChakraCore

Segmentation fault (core dumped) in BVUnitT<unsigned long>::Test

Open
#6,939 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
9.3k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

ChakraCore version:
commit c3ead3f8a6e0bb8e32e043adc091c68cba5935e9

Build cmd:
```
./build.sh --debug --static
```

test case
```js

function foo() {
function* zoo(a,...b) {
const wind = /[\w]/msuy;

for (const item in zoo) {

const apple = class Apple {
o() {
a = b;
}
};
}
}

function test() {
const x = 10;
return x;
}

const banana = zoo();

for (const i of banana) {
const j = i || i;
}

const ret = test();
return ret;
}

for(let i=0; i<0x300; i++) {
foo();
}
```

top backtrace
```
#0 0x00007ff7f43013d5 in ?? ()
#1 0x00007fffffff7670 in ?? ()
#2 0x00007fffffff7678 in ?? ()
#3 0x00007fffffff7640 in ?? ()
#4 0x00005555558a26cf in BVUnitT::Test (this=0x5555557b373e , index=32767)
at ChakraCore/lib/Common/DataStructures/UnitBitVector.h:288
#5 0x00005555564a370e in amd64_CallFunction ()
at ChakraCore/lib/Runtime/Library/amd64/JavascriptFunctionA.S:100
#6 0x00005555561d797b in Js::JavascriptFunction::CallFunction (function=0x7ff7f432b230,
entryPoint=0x7ff7f4301000, args=..., useLargeArgCount=false)
at ChakraCore/lib/Runtime/Library/JavascriptFunction.cpp:1364
#7 0x00005555561da3bf in Js::JavascriptGenerator::CallGenerator (this=0x7ff7f4329240, data=0x7ff7f4c75030, resumeKind=Js::ResumeYieldKind::Normal)
at ChakraCore/lib/Runtime/Library/JavascriptGenerator.cpp:198
#8 0x00005555561dada3 in Js::JavascriptGenerator::EntryNext (function=0x7ff7f443c100, callInfo=...)
at ChakraCore/lib/Runtime/Library/JavascriptGenerator.cpp:265
#9 0x00005555564a370e in amd64_CallFunction ()
at ChakraCore/lib/Runtime/Library/amd64/JavascriptFunctionA.S:100
#10 0x00005555561d797b in Js::JavascriptFunction::CallFunction (function=0x7ff7f443c100, entryPoint=0x5555561da790 , args=..., useLargeArgCount=false)
at ChakraCore/lib/Runtime/Library/JavascriptFunction.cpp:1364
#11 0x0000555555ffc758 in Js::InterpreterStackFrame::OP_CallCommon > > __unaligned>(Js::OpLayoutDynamicProfile > > __unaligned const __unaligned*, Js::RecyclableObject*, unsigned int, Js::AuxArray const*) (this=0x7fffffffaed0, playout=0x7ff7f54d518c, function=0x7ff7f443c100, flags=2, spreadIndices=0x0)
at ChakraCore/lib/Runtime/Language/InterpreterStackFrame.cpp:3988
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.