Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_REG' in js-scanner-util (scanner_pop_literal_pool)

[hope-fly]

JerryScript revision

4592143

Build platform

Ubuntu 18.04.5 LTS (Linux 4.19.128-microsoft-standard x86_64)

Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64)

Build steps

./tools/build.py --clean --debug --profile=es2015-subset --compile-flag=-fsanitize=address --compile-flag=-m32 --lto=off --logging=on --line-info=on --error-message=on --system-allocator=on --stack-limit=20

Test case

this.__defineSetter__("a", function(){});
function JSEtest (arguments = (function rec(n1, n2) {
    if (n1.length == n2) { m = "CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCAAAA"; }
    rec(n1, n2 + 1);
})([,], 0)
        , m = eval("")
        )
{}
JSEtest(a);

Execution steps & Output

$ ./jerryscript/build/bin/jerry poc.js
ICE: Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_REG' failed at root/jerryscript/jerry-core/parser/js/js-scanner-util.c(scanner_pop_literal_pool):668.
Error: ERR_FAILED_INTERNAL_ASSERTION

Credits: Found by OWL337 team.

[hope-fly]

Got it！ Thanks for your devotion！

…

------------------ 原始邮件 ------------------ 发件人: "Dániel ***@***.***>; 发送时间: 2021年12月7日(星期二) 晚上9:06 收件人: ***@***.***>; 抄送: ***@***.***>; ***@***.***>; 主题: Re: [jerryscript-project/jerryscript] Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_REG' in js-scanner-util (scanner_pop_literal_pool) (Issue #4847) Closed #4847 via #4849. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.