Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array (obj_p)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers.c(ecma_find_named_property):621.

[SwtWld]

JerryScript revision

Commit: a6ab5e9

Version: v3.0.0

Build platform

Ubuntu 18.04.5 LTS (Linux 4.19.128-microsoft-standard x86_64)

Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64)

Build steps

python ./tools/build.py --clean --debug --compile-flag=-fsanitize=address --compile-flag=-m32 --compile-flag=-g --strip=off --lto=off --logging=on --line-info=on --error-message=on --system-allocator=on --stack-limit=20

Test case

poc.js

class JSEtest {
    static set #m(v) {
        this._v = v;
    }

    static setWithEval() {
        eval(' [1].#m = "Test262"');
    }
}

class D {
    static set #m(v) {
        throw new Test262Error('should never be called');
    }
}

JSEtest.setWithEval();
assert.sameValue(JSEtest._v, 'Test262');

assert.throws(TypeError, function () {
    JSEtest.getWithEval.call(D);
}, 'invalid access to a static private getter');

​

Execution steps & Output

$ ./jerryscript/build/bin/jerry poc.js

ICE: Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array (obj_p)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers.c(ecma_find_named_property):621.
Error: ERR_FAILED_INTERNAL_ASSERTION
[1]    5397 abort      jerry poc.js

Credits: Found by OWL337 team.