Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Assertion literal_index <= CBC_MAXIMUM_SMALL_VALUE in parser_post_processing #3114

Closed
renatahodovan opened this issue Sep 13, 2019 · 0 comments · Fixed by #3118
Closed

Assertion literal_index <= CBC_MAXIMUM_SMALL_VALUE in parser_post_processing #3114

renatahodovan opened this issue Sep 13, 2019 · 0 comments · Fixed by #3118
Labels
bug Undesired behaviour parser Related to the JavaScript parser

Comments

@renatahodovan
Copy link
Contributor

JerryScript revision

376cfea

Build platform

Linux-4.15.0-62-generic-x86_64-with-Ubuntu-18.04-bionic

Build steps
./tools/build.py --clean --debug --compile-flag=-fsanitize=address \
--compile-flag=-m32 --compile-flag=-fno-omit-frame-pointer \
--compile-flag=-fno-common --compile-flag=-g \
--strip=off --system-allocator=on --logging=on \
--linker-flag=-fuse-ld=gold --error-messages=on --profile=es2015-subset
Test case

Attached

Output
ICE: Assertion 'literal_index <= CBC_MAXIMUM_SMALL_VALUE' failed at jerryscript/jerry-core/parser/js/js-parser.c(parser_post_processing):1620.
Error: ERR_FAILED_INTERNAL_ASSERTION
Backtrace
bt
#0  0xf7fd5079 in __kernel_vsyscall ()
#1  0xf77fc832 in raise () from /lib/i386-linux-gnu/libc.so.6
#2  0xf77fdcc1 in abort () from /lib/i386-linux-gnu/libc.so.6
#3  0x565797ef in jerry_port_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at jerryscript/jerry-port/default/default-fatal.c:71
#4  0x5661336b in jerry_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at jerryscript/jerry-core/jrt/jrt-fatals.c:58
#5  0x566133ac in jerry_assert_fail (assertion=0x566b2ea0 "literal_index <= CBC_MAXIMUM_SMALL_VALUE", file=0x566b2420 "jerryscript/jerry-core/parser/js/js-parser.c", function=0x5668b800 <__func__.5362.lto_priv.20> "parser_post_processing", line=1620) at jerryscript/jerry-core/jrt/jrt-fatals.c:82
#6  0x5661ddcb in parser_post_processing.lto_priv.441 (context_p=0xffffc4b0) at jerryscript/jerry-core/parser/js/js-parser.c:1620
#7  0x565d3801 in parser_parse_function (context_p=0xffffc4b0, status_flags=6) at jerryscript/jerry-core/parser/js/js-parser.c:2783
#8  0x565971af in lexer_construct_function_object (context_p=0xffffc4b0, extra_status_flags=6) at jerryscript/jerry-core/parser/js/js-lexer.c:1978
#9  0x565acc0d in parser_parse_function_statement.lto_priv.192 (context_p=0xffffc4b0) at jerryscript/jerry-core/parser/js/js-parser-statm.c:469
#10 0x5656faa3 in parser_parse_statements (context_p=0xffffc4b0) at jerryscript/jerry-core/parser/js/js-parser-statm.c:2371
#11 0x565d1817 in parser_parse_source (arg_list_p=0x0, arg_list_size=0, source_p=0x566eda80 <buffer.lto_priv> "this .WScript .LoadScriptFile ( \"..\\\\UnitTestFramework\\\\SimdJsHelpers.js\" ) ; \nfunction asmModule ( stdlib , imports , buffer ) { \"use asm\" ; \nvar id_0 = stdlib .SIMD .id_1 ; \nvar id_1 = id_2 .check ;"..., source_size=31805, parse_opts=0, error_location_p=0xffffc6c0) at jerryscript/jerry-core/parser/js/js-parser.c:2530
#12 0x565d457d in parser_parse_script (arg_list_p=0x0, arg_list_size=0, source_p=0x566eda80 <buffer.lto_priv> "this .WScript .LoadScriptFile ( \"..\\\\UnitTestFramework\\\\SimdJsHelpers.js\" ) ; \nfunction asmModule ( stdlib , imports , buffer ) { \"use asm\" ; \nvar id_0 = stdlib .SIMD .id_1 ; \nvar id_1 = id_2 .check ;"..., source_size=31805, parse_opts=0, bytecode_data_p=0xffffc780) at jerryscript/jerry-core/parser/js/js-parser.c:2993
#13 0x56646c57 in jerry_parse (resource_name_p=0xffffcd98 "/home/reni/.fuzzinator_28260//jerryscript/picireny/131726975157091339968786748300990941533.js", resource_name_length=93, source_p=0x566eda80 <buffer.lto_priv> "this .WScript .LoadScriptFile ( \"..\\\\UnitTestFramework\\\\SimdJsHelpers.js\" ) ; \nfunction asmModule ( stdlib , imports , buffer ) { \"use asm\" ; \nvar id_0 = stdlib .SIMD .id_1 ; \nvar id_1 = id_2 .check ;"..., source_size=31805, parse_opts=0) at jerryscript/jerry-core/api/jerry.c:420
#14 0x56643bac in main (argc=3, argv=0xffffcb14) at jerryscript/jerry-main/main-unix.c:734

Found by Fuzzinator with grammarinator.

@rerobika rerobika added bug Undesired behaviour parser Related to the JavaScript parser labels Sep 13, 2019
rerobika added a commit to rerobika/jerryscript that referenced this issue Sep 13, 2019
dbatyai pushed a commit that referenced this issue Sep 16, 2019
)

This patch fixes #3114.

JerryScript-DCO-1.0-Signed-off-by: Robert Fancsik [email protected]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Undesired behaviour parser Related to the JavaScript parser
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants