Aborted(core dumped)

[Georgezxh]

JerryScript revision

2.4.0

Build platform

ubuntu20.04

Description

The following code caused an aborted(core dumped) in jerryscript. I guess there may be some problems in the apply() method because jerry can output b.concat(a).length correctly.

Test case

var a = [];
a.length = 2050;
a.fill([]);
var b = []; 
print(b.concat.apply('',a).length);

Output

aborted(core dumped)

Expected behavior

1