Assertion ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p) in ecma_free_string_list

[renatahodovan]

JerryScript revision

901e57c

Build platform

Linux-4.15.0-88-generic-x86_64-with-Ubuntu-18.04-bionic

Build steps

./tools/build.py --clean --debug --compile-flag=-fsanitize=address \
--compile-flag=-m32 --compile-flag=-fno-omit-frame-pointer \
--compile-flag=-fno-common --compile-flag=-g \
--strip=off --system-allocator=on --logging=on \
--linker-flag=-fuse-ld=gold --error-messages=on --profile=es2015-subset

Test case

var obj = {
    get source() {
        return "Iam"
    },
    [Symbol.match]: true
}
RegExp(obj)

Output

ICE: Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at jerryscript/jerry-core/ecma/base/ecma-literal-storage.c(ecma_free_string_list):75.
Error: ERR_FAILED_INTERNAL_ASSERTION

Backtrace

(gdb) bt
#0  0xf7fd5079 in __kernel_vsyscall ()
#1  0xf77fc832 in raise () from /lib/i386-linux-gnu/libc.so.6
#2  0xf77fdcc1 in abort () from /lib/i386-linux-gnu/libc.so.6
#3  0x5657b5b7 in jerry_port_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at /home/reni/work/sut/jerryscript/jerry-port/default/default-fatal.c:30
#4  0x56639e87 in jerry_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at /home/reni/work/sut/jerryscript/jerry-core/jrt/jrt-fatals.c:63
#5  0x56639ec8 in jerry_assert_fail (assertion=0x56707f00 "ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)", file=0x56707e80 "/home/reni/work/sut/jerryscript/jerry-core/ecma/base/ecma-literal-storage.c", 
    function=0x566c4a80 <__func__.5687.lto_priv.780> "ecma_free_string_list", line=75) at /home/reni/work/sut/jerryscript/jerry-core/jrt/jrt-fatals.c:87
#6  0x56678a9e in ecma_free_string_list (string_list_cp=4124051312) at /home/reni/work/sut/jerryscript/jerry-core/ecma/base/ecma-literal-storage.c:75
#7  0x56678cd1 in ecma_finalize_lit_storage () at /home/reni/work/sut/jerryscript/jerry-core/ecma/base/ecma-literal-storage.c:121
#8  0x56677882 in ecma_finalize () at /home/reni/work/sut/jerryscript/jerry-core/ecma/base/ecma-init-finalize.c:92
#9  0x5669d4f3 in jerry_cleanup () at /home/reni/work/sut/jerryscript/jerry-core/api/jerry.c:239
#10 0x5669b422 in main (argc=2, argv=0xffffd1a4) at /home/reni/work/sut/jerryscript/jerry-main/main-unix.c:994

^{Found by Fuzzinator with grammarinator.}

[rerobika]

Closed via #3702.