Assertion 'JERRY_CONTEXT (jmem_heap_allocated_size) == 0' failed at jerryscript/jerry-core/jmem/jmem-heap.c(jmem_heap_finalize):115

[paintedveil5]

JerryScript revision

5020015 (master)
v3.0.0

Build platform

/usr/bin/python3 ./tools/build.py --clean --debug --compile-flag=-m32 --compile-flag=-fno-omit-frame-pointer --compile-flag=-fno-common --lto=off --error-message=on --system-allocator=on --compile-flag=-Wno-uninitialized --compile-flag=-Wno-missing-field-initializers --link-lib="m" --stack-limit=1024 --compile-flag=-fsanitize=address

Build steps

/usr/bin/python3 ./tools/build.py --clean --debug --compile-flag=-m32 --compile-flag=-fno-omit-frame-pointer --compile-flag=-fno-common --lto=off --error-message=on --system-allocator=on --compile-flag=-Wno-uninitialized --compile-flag=-Wno-missing-field-initializers --link-lib="m" --stack-limit=1024 --compile-flag=-fsanitize=address

Test case

new Promise(isFinite.toString).catch(function f() {
  return __proto__= new new Proxy(String, (this, "x", {
  get:!function () {
this.x = 2}
}))(new Promise(isFinite.toString).catch(function f() {
  return __proto__= new new Proxy(String, (this, "x", {
  get:!function () {
this.x = 2}
}))(Function.pr)
}))
})

Execution steps & output

./jerry poc.js 
Aborted (core dumped)

Backtrace

#0  0xf7fc8549 in __kernel_vsyscall ()
#1  0xf7779642 in raise () from /lib32/libc.so.6
#2  0xf777aa61 in abort () from /lib32/libc.so.6
#3  0x56781dc0 in jerry_port_fatal (code=JERRY_FATAL_FAILED_ASSERTION) at /home/lily/jerryscript/jerry-port/common/jerry-port-process.c:41
#4  0x5667b10c in jerry_fatal (code=JERRY_FATAL_FAILED_ASSERTION) at /home/lily/jerryscript/jerry-core/jrt/jrt-fatals.c:63
#5  0x5667b12e in jerry_assert_fail (assertion=0x567ae960 "JERRY_CONTEXT (jmem_heap_allocated_size) == 0", file=0x567ae900 "/home/lily/jerryscript/jerry-core/jmem/jmem-heap.c", 
    function=0x567aeae0 <__func__.7408> "jmem_heap_finalize", line=115) at /home/lily/jerryscript/jerry-core/jrt/jrt-fatals.c:83
#6  0x5667a056 in jmem_heap_finalize () at /home/lily/jerryscript/jerry-core/jmem/jmem-heap.c:115
#7  0x56679e09 in jmem_finalize () at /home/lily/jerryscript/jerry-core/jmem/jmem-allocator.c:171
#8  0x565c5b7b in jerry_cleanup () at /home/lily/jerryscript/jerry-core/api/jerryscript.c:241
#9  0x565c1c1d in main (argc=2, argv=0xffb7d824) at /home/lily/jerryscript/jerry-main/main-desktop.c:270