Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Assertion ECMA_PROPERTY_GET_TYPE (property) == ECMA_PROPERTY_TYPE_NAMEDDATA || ECMA_PROPERTY_GET_TYPE (property) == ECMA_PROPERTY_TYPE_NAMEDACCESSOR || ECMA_PROPERTY_GET_TYPE (property) == ECMA_PROPERTY_TYPE_VIRTUAL in ecma_is_property_configurable #3267

Closed
renatahodovan opened this issue Oct 31, 2019 · 0 comments
Labels
bug Undesired behaviour

Comments

@renatahodovan
Copy link
Contributor

JerryScript revision

cc9a657

Build platform

Linux-4.15.0-62-generic-x86_64-with-Ubuntu-18.04-bionic

Build steps
./tools/build.py --clean --debug --compile-flag=-fsanitize=address \
--compile-flag=-m32 --compile-flag=-fno-omit-frame-pointer \
--compile-flag=-fno-common --compile-flag=-g \
--strip=off --system-allocator=on --logging=on \
--linker-flag=-fuse-ld=gold --error-messages=on --profile=es2015-subset
Test case
var hasProp = $ => { }
Object.preventExtensions(hasProp)
Object.isSealed(hasProp)
Output
ICE: Assertion 'ECMA_PROPERTY_GET_TYPE (property) == ECMA_PROPERTY_TYPE_NAMEDDATA || ECMA_PROPERTY_GET_TYPE (property) == ECMA_PROPERTY_TYPE_NAMEDACCESSOR || ECMA_PROPERTY_GET_TYPE (property) == ECMA_PROPERTY_TYPE_VIRTUAL' failed at jerryscript/jerry-core/ecma/base/ecma-helpers.c(ecma_is_property_configurable):1058.
Error: ERR_FAILED_INTERNAL_ASSERTION
Backtrace
bt
#0  0xf7fd5079 in __kernel_vsyscall ()
#1  0xf77fc832 in raise () from /lib/i386-linux-gnu/libc.so.6
#2  0xf77fdcc1 in abort () from /lib/i386-linux-gnu/libc.so.6
#3  0x5657ac6f in jerry_port_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at jerryscript/jerry-port/default/default-fatal.c:30
#4  0x565fd872 in jerry_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at jerryscript/jerry-core/jrt/jrt-fatals.c:58
#5  0x565fd8b3 in jerry_assert_fail (assertion=0x566ca400 "ECMA_PROPERTY_GET_TYPE (property) == ECMA_PROPERTY_TYPE_NAMEDDATA || ECMA_PROPERTY_GET_TYPE (property) == ECMA_PROPERTY_TYPE_NAMEDACCESSOR || ECMA_PROPERTY_GET_TYPE (property) == ECMA_PROPERTY_TYPE_VI"..., file=0x566c93c0 "jerryscript/jerry-core/ecma/base/ecma-helpers.c", function=0x5668fba0 <__func__.5687.lto_priv.11> "ecma_is_property_configurable", line=1058) at jerryscript/jerry-core/jrt/jrt-fatals.c:82
#6  0x566483f1 in ecma_is_property_configurable (property=0 '\000') at jerryscript/jerry-core/ecma/base/ecma-helpers.c:1056
#7  0x565ca30e in ecma_builtin_object_frozen_or_sealed_helper (obj_p=0xf5f015a0, mode=79) at jerryscript/jerry-core/ecma/builtin-objects/ecma-builtin-object.c:504
#8  0x565cb50d in ecma_builtin_object_dispatch_routine (builtin_routine_id=79, this_arg=4126148259, arguments_list_p=0xffffc3e0, arguments_number=1) at jerryscript/jerry-core/ecma/builtin-objects/ecma-builtin-object.c:976
#9  0x5665787a in ecma_builtin_dispatch_routine (builtin_object_id=ECMA_BUILTIN_ID_OBJECT, builtin_routine_id=79, this_arg_value=4126148259, arguments_list_p=0xffffc3e0, arguments_list_len=1) at jerryscript/jerry-core/ecma/builtin-objects/ecma-builtins.c:1019
#10 0x56657adb in ecma_builtin_dispatch_call (obj_p=0xf5f00550, this_arg_value=4126148259, arguments_list_p=0xffffc674, arguments_list_len=1) at jerryscript/jerry-core/ecma/builtin-objects/ecma-builtins.c:1044
#11 0x56629224 in ecma_op_function_call (func_obj_p=0xf5f00550, this_arg_value=4126148259, arguments_list_p=0xffffc674, arguments_list_len=1) at jerryscript/jerry-core/ecma/operations/ecma-function-object.c:734
#12 0x565d996e in opfunc_call (frame_ctx_p=0xffffc6f0) at jerryscript/jerry-core/vm/vm.c:582
#13 0x565ebc83 in vm_execute (frame_ctx_p=0xffffc6f0, arg_p=0x0, arg_list_len=0) at jerryscript/jerry-core/vm/vm.c:3702
#14 0x565ec586 in vm_run (bytecode_header_p=0xf4f03c80, this_binding_value=4126149459, lex_env_p=0xf5d007b0, parse_opts=0, arg_list_p=0x0, arg_list_len=0) at jerryscript/jerry-core/vm/vm.c:3822
#15 0x565d8bf6 in vm_run_global (bytecode_p=0xf4f03c80) at jerryscript/jerry-core/vm/vm.c:282
#16 0x5666d813 in jerry_run (func_val=4126148547) at jerryscript/jerry-core/api/jerry.c:595
#17 0x56669f89 in main (argc=2, argv=0xffffcb24) at jerryscript/jerry-main/main-unix.c:739

Found by Fuzzinator with grammarinator.

@rerobika rerobika added the bug Undesired behaviour label Oct 31, 2019
rerobika added a commit to rerobika/jerryscript that referenced this issue Oct 31, 2019
This patch fixes jerryscript-project#3267.

JerryScript-DCO-1.0-Signed-off-by: Robert Fancsik [email protected]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Undesired behaviour
Projects
None yet
Development

No branches or pull requests

2 participants