Out of memory error with JSON.stringify

[renatahodovan]

Jerry version:

Checked revision: abc2b55
Build: debug.linux

OS:

Ubuntu 15.04, x86_64

Description:

Calling JSON.stringify with a not too big (length > 38) array ends in an out of memory error.

Test case:

var a = ["a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a","a"];
print(JSON.stringify(a));
// a.length: 39

[rtakacs]

This happens during ecma_concat_ecma_strings. I think this bug is related to the core.

[ruben-ayrapetyan]

@rtakacs, the bug is related to realloc_list function (ecma-builtin-helpers-json.cpp).

[ruben-ayrapetyan]

Seems that calculation of block sizes and current_p / block_end_p pointers assumes that difference of pointers would be equal to arithmetic difference of addresses. Actually, value is the difference divided by sizeof (void*). Usage of incorrect pointers subsequently leads to overwrite of heap structures.

[rtakacs]

#543 will resolve the bug :)