Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
taspeotis
on Sept 19, 2018
|
parent
|
context
|
favorite
| on:
iOS 12 Safari Array reverse bug
I would be most grateful if someone could please explain to me what "butterfly" is meant to be ... a metaphor of some sort I assume.
detaro
on Sept 19, 2018
|
next
[–]
Internal data structure of JavaScriptCore representing objects, presumably called a butterfly because it starts in the middle and spreads in both directions in memory. One side is properties of the object, the other members of its array aspect.
See e.g.
http://phrack.org/papers/attacking_javascript_engines.html
section 1.2
panic
on Sept 19, 2018
|
prev
[–]
This presentation has some nice illustrations:
http://www.filpizlo.com/slides/pizlo-dls2017-vmil2017-jscvm-...
(under “JSC Object Model”).
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
