ChakraCore Version

ch version 1.13.0.0-beta

Steps to reproduce

./build.sh -j --static --sanitize=address,undefined,signed-integer-overflow

Proof of concept

encodeURI(
  encodeURI(
    encodeURI({}).repeat(322)
  ).repeat(322)
).repeat(322);

Exception or Error

Aborted (core dumped)

Additional Context

ChakraCore crashes with a core dump when executing deeply nested encodeURI(...).repeat(...) calls on stringified objects, likely due to memory exhaustion.