A bug in IonMonkey leaves type inference information inconsistent, which in turn allows the compilation of JITed functions that cause type confusions between arbitrary objects.
0d0ded10759c5c95d391d24ddcc96e23e393aa708a7bf5a1a78768bd095306ee
© 2022 Packet Storm. All rights reserved.