2019
03.28

A bug in IonMonkeys type inference system when JIT compiling and entering a constructor function via on-stack replacement (OSR) allows the compilation of JITed functions that cause type confusions between arbitrary objects.

No Comment.

Add Your Comment

You must be logged in to post a comment.