JavaScriptCore Crash Proof Of Concept
August 19th, 2021 | 🕒
iSpeech.orgJavaScriptCore suffers from a crash condition due to an uninitialized register in slow_path_profile_catch. Proof of concept that affects Safari is
August 19th, 2021 | 🕒
iSpeech.orgJavaScriptCore suffers from a crash condition due to an uninitialized register in slow_path_profile_catch. Proof of concept that affects Safari is
November 7th, 2019 | 🕒
iSpeech The following sample was found by Fuzzilli and then slightly modified. It crashes JSC in debug builds: function main()
November 1st, 2019 | 🕒
https://www.ispeech.org The following JavaScript program, found by Fuzzilli and slightly modified, crashes JavaScriptCore built from HEAD and the current stable
July 30th, 2019 | 🕒
https://www.ispeech.org While fuzzing JSC, I encountered the following JS program which crashes JSC from current HEAD and release (/System/Library/Frameworks/JavaScriptCore.framework/Resources/jsc): //
July 30th, 2019 | 🕒
https://www.ispeech.org While fuzzing JavaScriptCore, I encountered the following (modified and commented) JavaScript program which crashes jsc from current HEAD and
April 1st, 2019 | 🕒
https://www.ispeech.org JavaScriptCore has an issue where createRegExpMatchesArray does not respect inferred types. MD5 | 890d106035374c388ef370b205c1ca00 Download Source: packetstormsecurity.com
Gloss