You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
function opt(index) {
var flag = 0;
var tmp = new String('aa');
tmp.x = 2;
var i = 0;
function test() {
testDate('0001-10-13T05:16:33Z');
testDate('0011-10-13T05:16:33Z');
var hiddenValue = getHiddenValue();
var result;
testDate('0111-10-13T05:16:33Z');
testDate('1111-10-13T05:16:33Z');
testDate('-000001-11-13T19:40:33Z');
testDate('-000011-11-13T19:40:33Z');
testDate('-000111-11-13T19:40:33Z');
testDate('-001111-11-13T19:40:33Z');
}
var ary_3 = [
1.1,
2.2,
3.3
];
var error = null;
var DjjB = tmp.trimLeft();
var test12 = new Int32Array(0);
once = 1;
var i = 0;
var go = function (a, b, c) {
a[0] = 1.1;
a[1] = 2.2;
[...c];
var fun = eval(str);
b[0] = a[0];
a[2] = 2.3023e-320;
};
for (let useless in tmp) {
if (once) {
var go = function (a, b, c) {
a[0] = 1.1;
a[1] = 2.2;
[...c];
b[0] = a[0];
a[2] = 2.3023e-320;
};
delete tmp.x;
var fun = eval(str);
var object = {};
var i = 0.26279099966609487;
var f64_1 = new Float64Array(16);
once = 0.2969306068681026;
}
var z = cache.push(i, String() * 42);
tmp.y = index;
for (var ijjkkk = 0; ijjkkk < 594; ++ijjkkk) {
var KaRd = Symbol;
}
tmp.x = 1;
}
return [
1,
tmp.x - 524286
];
}
var cache = [];
for (let i = 0; i < 561; i++) {
opt(1);
}
evil = opt(0);
function shouldBe(actual, expected) {
;
}
var str = 'class x extends Array{}';
var f64_1 = new Float64Array(16);
evil[0] = 1.1;
functionopt(){vartmp=newString('aa');tmp.x=2;for(letuselessintmp){deletetmp.x;eval('class x extends Array{}');tmp.y=1;tmp.x=1;}}for(vari=0;i<561;i++){opt();}
The crash is something to do with jitting the let useless statement inside the loop control block BUT only occurs with all of the other components present (the deletion, the assignments AND the eval).
The same assertion is hit if you switch to const useless BUT the code can run to completion if it's var useless
enviroment
ubuntu 18
poc
callstack
The text was updated successfully, but these errors were encountered: