#7035·ChakraCore

[Bug]: Crash when nesting encodeURI with large .repeat() chains

Author: bendrissouCreated Jul 2, 2025Updated Dec 20, 2025
LabelsBy DesignBug

ChakraCore Version

ch version 1.13.0.0-beta

Steps to reproduce

./build.sh -j --static --sanitize=address,undefined,signed-integer-overflow

Proof of concept

javascript
encodeURI(
  encodeURI(
    encodeURI({}).repeat(322)
  ).repeat(322)
).repeat(322);

Exception or Error

Aborted (core dumped)

Additional Context

ChakraCore crashes with a core dump when executing deeply nested encodeURI(...).repeat(...) calls on stringified objects, likely due to memory exhaustion.