[Bug]: Crash when nesting encodeURI with large .repeat() chains
Author: bendrissouCreated Jul 2, 2025Updated Dec 20, 2025
LabelsBy DesignBug
ChakraCore Version
ch version 1.13.0.0-beta
Steps to reproduce
./build.sh -j --static --sanitize=address,undefined,signed-integer-overflow
Proof of concept
encodeURI(
encodeURI(
encodeURI({}).repeat(322)
).repeat(322)
).repeat(322);Exception or Error
Aborted (core dumped)Additional Context
ChakraCore crashes with a core dump when executing deeply nested encodeURI(...).repeat(...) calls on stringified objects, likely due to memory exhaustion.
Source: chakra-core/ChakraCore