Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in parser_parse_function_statement #3821

Closed
owl337 opened this issue Jun 1, 2020 · 0 comments · Fixed by #3838
Assignees
Labels
bug Undesired behaviour parser Related to the JavaScript parser

Comments

@owl337
Copy link

owl337 commented Jun 1, 2020

JerryScript revision

d06c3a7

Build platform

Ubuntu 16.04.6 LTS (Linux 4.15.0-99-generic x86_64)

Build steps
python tools/build.py --profile=es2015-subset --lto=off --compile-flag=-g \
--error-messages=on --debug --compile-flag=-g --strip=off --logging=on \
--compile-flag=-fsanitize=address --stack-limit=15
Test case
function a") {
Output
ICE: Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at /home/JerryScript/jerryscript/jerry-core/parser/js/js-parser-statm.c(parser_parse_function_statement):733.
Error: ERR_FAILED_INTERNAL_ASSERTION
Aborted (core dumped)

Credits: This vulnerability is detected by chong from OWL337.

@rerobika rerobika added bug Undesired behaviour parser Related to the JavaScript parser labels Jun 2, 2020
dbatyai added a commit to dbatyai/jerryscript that referenced this issue Jun 3, 2020
Fixes jerryscript-project#3821.

JerryScript-DCO-1.0-Signed-off-by: Dániel Bátyai dbatyai@inf.u-szeged.hu
dbatyai added a commit to dbatyai/jerryscript that referenced this issue Jun 3, 2020
Fixes jerryscript-project#3821.

JerryScript-DCO-1.0-Signed-off-by: Dániel Bátyai dbatyai@inf.u-szeged.hu
dbatyai added a commit to dbatyai/jerryscript that referenced this issue Jun 3, 2020
Fixes jerryscript-project#3821.

JerryScript-DCO-1.0-Signed-off-by: Dániel Bátyai dbatyai@inf.u-szeged.hu
dbatyai added a commit to dbatyai/jerryscript that referenced this issue Jun 3, 2020
Fixes jerryscript-project#3821.

JerryScript-DCO-1.0-Signed-off-by: Dániel Bátyai dbatyai@inf.u-szeged.hu
dbatyai added a commit to dbatyai/jerryscript that referenced this issue Jun 3, 2020
Fixes jerryscript-project#3821.

JerryScript-DCO-1.0-Signed-off-by: Dániel Bátyai dbatyai@inf.u-szeged.hu
dbatyai added a commit to dbatyai/jerryscript that referenced this issue Jun 3, 2020
Fixes jerryscript-project#3821.

JerryScript-DCO-1.0-Signed-off-by: Dániel Bátyai dbatyai@inf.u-szeged.hu
rerobika pushed a commit that referenced this issue Jun 4, 2020
Fixes #3821.

JerryScript-DCO-1.0-Signed-off-by: Dániel Bátyai dbatyai@inf.u-szeged.hu
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Undesired behaviour parser Related to the JavaScript parser
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants