ChakraCore Version
ch version 1.13.0.0-beta
Steps to reproduce
./build.sh -j --static --sanitize=address,undefined,signed-integer-overflow
Proof of concept
encodeURI(
encodeURI(
encodeURI({}).repeat(322)
).repeat(322)
).repeat(322);
Exception or Error
Additional Context
ChakraCore crashes with a core dump when executing deeply nested encodeURI(...).repeat(...) calls on stringified objects, likely due to memory exhaustion.