Assertion `m->len >= sizeof(v)' failed at src/mjs_core.c:372: mjs_pop_val

[hope-fly]

mJS revision

Commit: b1b6eac

Build platform

Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64)

Build steps

vim Makefile
DOCKER_GCC=gcc
$(DOCKER_GCC) $(CFLAGS) $(TOP_MJS_SOURCES) $(TOP_COMMON_SOURCES) -o $(PROG)
# save the makefile then make
make

Test case

poc.js

(function() {
  ((function JSEtest(a) {
    if (a > 3) {
      if ([Object.create.apply({}, [Object])]) {
      JSEtest(Object.create.apply({}, [Object]))
    }
    }
  })(6))
})()

Execution steps & Output

$ ./mjs/build/mjs poc.js
mjs: src/mjs_core.c:372: mjs_pop_val: Assertion `m->len >= sizeof(v)' failed.
[1]    33895 abort      mjs poc.js

Credits: Found by OWL337 team.