Microsoft Edge Chakra OP_Memset Type Confusion

Microsoft Edge: Chakra: Type confusion with OPMemset Microsoft Edge: Chakra: Type confusion with OPMemset Since the patch for CVE-2018-8372, it checks all inputs to native arrays, and if any input equals to the MissingItem value which can cause type confusion, it starts the bailout process. But i...