jerryscript-project/jerryscript

Assertion 'ecma_is_value_object (iter_result)' failed

anbu1024 opened this issue · 0 comments

jerryScript version 3.0.0:
commit 05dbbd1

Build platform:
Ubuntu 20.04

Build cmd:

python tools/build.py --debug --profile=es.next --lto=off --compile-flag=-D_POSIX_C_SOURCE=200809 --compile-flag=-Wno-strict-prototypes --stack-limit=15

Test case

function foo() {
    return 0;
}

var obj = {};

function bar() {
    function test() {
        BigInt64Array.next = foo;
        return BigInt64Array;
    }
    return test;
}

function baz(arg) {
    return arg;
}

Object.defineProperty(obj, Symbol.iterator, { configurable: true, enumerable: true, get: bar, set: baz });

async function* trigger() {
    yield* obj;
    return obj;
}

trigger(foo, obj, Symbol, bar)["next"]();

Error message:

ICE: Assertion 'ecma_is_value_object (iter_result)' failed at jerry-core/ecma/operations/ecma-iterator-object.c(ecma_op_iterator_complete):411.
Error: JERRY_FATAL_FAILED_ASSERTION
Aborted (core dumped)