chakra-core / chakra-core/ChakraCore
ASSERTION Failure: (instr->m_func->GetJITFunctionBody()->IsCoroutine() || !instr->dstIsTempObject)
- Dominant language
- JavaScript
- Stars
- 9.3k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
ChakraCore version:
commit c3ead3f
Build cmd:
```shell
./build.sh --debug --static
```
Test case:
```js
function opt() {
let v1 = 1000000000.0;
const v2 = [];
let v3 = 0;
while (v3 < 1) {
let v5 = {};
v1 = v2;
({"__proto__":v3,"e":v5,"valueOf":v1,...v5} = v5);
}
const v8 = new Uint16Array(65489);
v1[6] = 65489;
v8[255] = 1;
}
for(let i=0;i<1024;i++)
{
opt();
}
```
Execute
```shell
./ch ./test.js
```
Error msg:
```
ASSERTION 2773824: (ChakraCore/lib/Backend/TempTracker.cpp, line 1437) instr->m_func->GetJITFunctionBody()->IsCoroutine() || !instr->dstIsTempObject
Failure: (instr->m_func->GetJITFunctionBody()->IsCoroutine() || !instr->dstIsTempObject)
Illegal instruction
```
Contributor guide
Assessment
This issue has not been assessed yet.