From 9d3ed07849fe0aa6c0bec01cf9f639d560ee81e5 Mon Sep 17 00:00:00 2001
From: Nick Vatamaniuc <vatamane@gmail.com>
Date: Sun, 28 May 2023 01:50:46 -0400
Subject: [PATCH] Test only for stack overflow in CVE-2023-31922

Don't merge this is only the test from PR https://github.com/quickjs-ng/quickjs/pull/157
---
 tests/test_builtin.js | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/tests/test_builtin.js b/tests/test_builtin.js
index 33552d6e3..55cb8e5a1 100644
--- a/tests/test_builtin.js
+++ b/tests/test_builtin.js
@@ -707,6 +707,25 @@ function test_generator()
     assert(v.value === undefined && v.done === true);
 }
 
+/* CVE-2023-31922 */
+function test_proxy_is_array()
+{
+  for (var r = new Proxy ([],{}) , y = 0 ; y < 331072 ; y ++ )
+      r = new Proxy (r, {});
+
+  try {
+    /* Without ASAN */
+    assert(Array.isArray(r));
+  } catch(e) {
+    /* With ASAN expect InternalError "stack overflow" to be raised */
+    if (e instanceof InternalError) {
+      assert(e.message, "stack overflow", "Stack overflow error was not raised")
+    } else {
+      throw(e);
+    }
+  }
+}
+
 test();
 test_function();
 test_enum();
@@ -724,3 +743,4 @@ test_map();
 test_weak_map();
 test_weak_set();
 test_generator();
+test_proxy_is_array();