ChakraCore icon indicating copy to clipboard operation
ChakraCore copied to clipboard

Assertion failure in CacheOperators.inl

Open zhunki opened this issue 3 years ago • 0 comments

the following poc cause a assertion failure in "debug" build on ubuntu.

function v0(v1,v2) {
    function v3(v4,v5) {
    }
    const v7 = new v3();
    function v8(v9,v10) {
        v2.__proto__ = v7;
        return v2;
    }
    const v11 = v8();
    v11.constructor = Map;
    v11.length = 1;
    return v11;
}
const v14 = new Promise(v0);


zhunki avatar Dec 24 '21 11:12 zhunki