Subscribe via feed.

JSC DFG ObjectAllocationSinkingPhase Crash

Posted by deepcore on March 3, 2020 – 8:58 am

An issue in JSC leaves the data flow graph inconsistent. While fuzzing JavaScriptCore with fuzzilli, the researcher found a crash condition in JSC.


This post is under “exploit” and has no respond so far.
If you enjoy this article, make sure you subscribe to my RSS Feed.

Post a reply

You must be logged in to post a comment.


« »