I did a quick audit and I suspect this will either hit the release-assert in `Value::isMagic`, crash at a near-null address, or have correctness bugs.
Bug 1652854 Comment 10 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
I did a quick audit and I suspect this will either hit the release-assert in `Value::isMagic`, crash at a near-null address, or have non-exploitable correctness bugs.