CVE-2021-46337: Assertion 'page_p != NULL' failed at jerryscript/jerry-core/parser/js/js-parser-mem.c(parser_list_get):279. · Issue #4930 · jerryscript-project/jerryscript

JerryScript revision

Commit: a6ab5e9

Version: v3.0.0

Build platform

Ubuntu 18.04.5 LTS (Linux 4.19.128-microsoft-standard x86_64)

Ubuntu 18.04.5 LTS (Linux 5.4.0-44-generic x86_64)

Build steps

python ./tools/build.py --clean --debug --compile-flag=-fsanitize=address --compile-flag=-m32 --compile-flag=-g --strip=off --lto=off --logging=on --line-info=on --error-message=on --system-allocator=on --stack-limit=20

Test casepoc.js

var stringSet;

class JSEtest {
  get #test262() { return 'get string'; }
  set #test262(param) { stringSet = param; }

  getPrivateReference() {
    return this.#test262;
  }

  setPrivateReference(value) {function    this.#test262 = value;
  }
};

var inst = new JSEtest();
assert.sameValue(inst.getPrivateReference(), 'get string');
inst.setPrivateReference('set string');
assert.sameValue(stringSet, 'set string');

​Execution steps & Output

$ ./jerryscript/build/bin/jerry poc.js

ICE: Assertion ‘page_p != NULL’ failed at jerryscript/jerry-core/parser/js/js-parser-mem.c(parser_list_get):279. Error: ERR_FAILED_INTERNAL_ASSERTION [1] 36899 abort jerry poc.js

Credits: Found by OWL337 team.