You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Note about the issue: Due to the recursive first property access in Array.prototype.shift the after the property is deleted by the operation, the previous call frames function object/lexical environment become invalid memory reference.
JerryScript revision
Commit: 42523bd6
Version: v3.0.0
Build platform
Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64)
Build steps
ASAN closed
Test case
Execution steps & Output
$ ./jerryscript/build/bin/jerry poc.js ICE: Assertion 'ecma_is_lexical_environment (object_p)' failed at /home/f1yh0p/jerryscript/jerry-core/ecma/base/ecma-helpers.c(ecma_get_lex_env_type):291. Error: ERR_FAILED_INTERNAL_ASSERTION
Credits: Found by OWL337 team.
The text was updated successfully, but these errors were encountered: