I wonder whether disabling JavaScript JIT (javascript.options.baselinejit=false) would mitigate any practical exploit here since achieving the required memory layout ...
The Firefox Web browser, built by the Mozilla Foundation and friends is a complicated piece of technology—if you care to look under the hood. It's not obvious where the hood catch is, because the ...