JavaScriptCore GetterSetter Type Confusion

JavaScriptCore (JSC) GetterSetter suffers from a type confusion vulnerability during DFG compilation.

Leave a Reply