JavaScriptCore Crash Proof Of Concept

JavaScriptCore suffers from a crash condition due to an uninitialized register in slow_path_profile_catch. Proof of concept that affects Safari is included.


MD5 | e71c83e4865ffd73fb78888a127c18ef


Related Posts