/TurboFan-exploit-for-issue-762874

Exploit for a bug in TurboFan's typing of JSCall nodes for builtins kStringLastIndexOf and kStringIndexOf

Primary LanguageJavaScript

[TurboFan] Incorrect typing of String.lastIndexOf JSCall nodes

JSCall nodes to builtins kStringLastIndexOf and kStringIndexOf are incorrectly typed;

This bug has been found by @_tsuro .

This repository contains a trigger with an explanation of the bug as well as a full exploit.

It is associated to a future doar-e.github.com article.

calc