Attacking Client-Side JIT Compilers

Attacking Client-Side JIT Compilers

Black Hat via YouTube Direct link

Bug Categories

11 of 39

11 of 39

Bug Categories

Class Central Classrooms beta

YouTube videos curated by Class Central.

Classroom Contents

Attacking Client-Side JIT Compilers

Automatically move to the next video in the Classroom when playback concludes

  1. 1 Intro
  2. 2 JavaScript Values
  3. 3 JIT Compilers
  4. 4 JavaScript
  5. 5 Type Information
  6. 6 Example
  7. 7 Speculation Guards
  8. 8 Speculation All
  9. 9 JIT Compiler Pipeline
  10. 10 Summary
  11. 11 Bug Categories
  12. 12 Lowpass handlers
  13. 13 Takeaway
  14. 14 Optimization
  15. 15 Optimizations
  16. 16 bounds checking
  17. 17 check bounced
  18. 18 range analysis
  19. 19 speed analysis
  20. 20 bounce check
  21. 21 what could go wrong
  22. 22 NVH
  23. 23 Exploit
  24. 24 More examples
  25. 25 What is redundancy
  26. 26 How would you do this
  27. 27 The function
  28. 28 Shape guards
  29. 29 Arrays
  30. 30 Objects
  31. 31 Pseudocode
  32. 32 Abstract Interpreter
  33. 33 CreateThis
  34. 34 Graph Building
  35. 35 Check Hoisting
  36. 36 Demo
  37. 37 Calculator
  38. 38 KXTed
  39. 39 Conclusion

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.