Ivan Fratric 💙💛

@ifsecure · Twitter ·

I found 2 UAF bugs in libxslt with Jackalope, let's find more together! The harness is now included in examples (link below). This also serves as a demo for two not very commonly used modes in Jackalope: grammar mutational fuzzing and sanitizer coverage. https://github.com/googleprojectzero/Jackalope/tree/main/examples/libxslt