ASSERTION: ChakraCore/lib/Backend/GlobOpt.cpp, line 11384

[anbu1024]

ChakraCore version:
commit c3ead3f

Build cmd:

./build.sh --debug --static

Test case:

function foo(){
	const x = /\W\s/gmsy;
	let i = 7;
	do {
		const arr = [4294967297];
		const ttt = arr.splice(4294967297,4294967297,3);
		arr[6] = i;
		const mmm = i.unscopables;
		const nnn = i++;
	} while (i < 0);
	
	return x;
}

for(let i=0; i < 0x100; i++) 
{
	foo();
}

Execute

./ch --bgjit --oopjit ./test.js

Error msg:

ASSERTION 2613452: (ChakraCore/lib/Backend/GlobOpt.cpp, line 11384) block->globOptData.IsTypeSpecialized(varSym)
 Failure: (block->globOptData.IsTypeSpecialized(varSym))
Illegal instruction (core dumped)