#v8 #heap spray #gc #browser #Weakmap #render #hash table #Object.assign

#Jerryscript #NaN bug #JS engine #heap spray #gc #memory corrupt

#v8 #wasm #sandbox escape #type confusion

#Fuzz #protobuf #libprotobuf-mutator #libfuzzer #AFL++

#AFL #Fuzz #llvm

#iot #强网拟态

#v8 #TheHole

#v8 #ctf

#Deadsec #sandbox #wasm

#chrome #v8 #Maglev，Complier