Home / os / winmobile

Spidermonkey IonMonkey Incorrect Prediction

Posted on 26 June 2019

Spidermonkey IonMonkey incorrectly predicts return type of Array.prototype.pop, leading to type confusion vulnerabilities.

 

TOP