1 matches found
WebKit JIT - 'ByteCodeParser::handleIntrinsicCall' Type Confusion
/ case ArrayPushIntrinsic: ... if staticcastargumentCountIncludingThis = MINSPARSEARRAYINDEX return false; ArrayMode arrayMode = getArrayModemcurrentInstructionOPCODELENGTHopcall - 2.u.arrayProfile, Array::Write; ... This code always assumes that the current instruction is an opcall instruction...
8.8CVSS7.1AI score0.05827EPSS
SaveExploits3
20