There is an Assertion in ‘(flags >> CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || (CBC_STACK_ADJUST_BASE – (flags >> CBC_STACK_ADJUST_SHIFT)) <= context_p->stack_depth’ in parser_emit_cbc_backward_branch in JerryScript 2.2.0.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-23319
Reference (s):
- https://github.com/jerryscript-project/jerryscript/issues/3834

