chakra-core / chakra-core/ChakraCore

ASSERTION Failure: (instr->m_func->GetJITFunctionBody()->IsCoroutine() || !instr->dstIsTempObject)

Open
#6,959 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
9.3k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

ChakraCore version:
commit c3ead3f

Build cmd:
```shell
./build.sh --debug --static
```

Test case:
```js
function opt() {

let v1 = 1000000000.0;

const v2 = [];
let v3 = 0;

while (v3 < 1) {
let v5 = {};
v1 = v2;
({"__proto__":v3,"e":v5,"valueOf":v1,...v5} = v5);
}

const v8 = new Uint16Array(65489);

v1[6] = 65489;

v8[255] = 1;
}

for(let i=0;i<1024;i++)
{
opt();
}
```

Execute
```shell
./ch ./test.js
```

Error msg:
```
ASSERTION 2773824: (ChakraCore/lib/Backend/TempTracker.cpp, line 1437) instr->m_func->GetJITFunctionBody()->IsCoroutine() || !instr->dstIsTempObject
Failure: (instr->m_func->GetJITFunctionBody()->IsCoroutine() || !instr->dstIsTempObject)
Illegal instruction
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.