Ivan Fratric 💙💛

@ifsecure · Twitter · 2025-04-08 07:59 UTC

I shared an example earlier for fuzzing libxslt with Jackalope's grammar mutator. But Firefox has its own XSLT implementation, how do we fuzz browser code? The following .patch demonstrates how to do that. It is the setup that resulted in CVE-2025-1932. https://github.com/googleprojectzero/p0tools/tree/master/FirefoxJackalope