ChakraCore icon indicating copy to clipboard operation
ChakraCore copied to clipboard

Assertion failure in JavascriptArray.cpp

Open zhunki opened this issue 3 years ago • 1 comments

the following poc cause a assertion failure in "debug" build on ubuntu.

const v6 = Array(4294967295);
const v8 = v6["copyWithin"]();

zhunki avatar Dec 24 '21 11:12 zhunki

What kind of error are you getting? The example is copying a very large array onto itself, it takes a long time to complete, I would assume it can run out of memory. So far the same behavior is observed in other engines.

ppenzin avatar Feb 03 '22 08:02 ppenzin