# ion

Published articles for ion.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## A journey into IonMonkey: root-causing CVE-2019-9810.

DevFeed: [A journey into IonMonkey: root-causing CVE-2019-9810.](<https://devfeed.tech/articles/a-journey-into-ionmonkey-root-causing-cve-2019-9810-39710.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2019/06/17/a-journey-into-ionmonkey-root-causing-cve-2019-9810/>)

Author: Axel "0vercl0k" Souchet

Published: 2019-06-17T15:00:00Z

Content type: tutorial

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Exploit](<https://devfeed.tech/topics/exploit.md>), [spidermonkey](<https://devfeed.tech/topics/spidermonkey.md>), [JIT](<https://devfeed.tech/topics/jit.md>), [Optimization](<https://devfeed.tech/topics/optimization.md>), [Compiler](<https://devfeed.tech/topics/compiler.md>), [Firefox](<https://devfeed.tech/topics/firefox.md>), [Assembly](<https://devfeed.tech/topics/assembly.md>), [Mozilla](<https://devfeed.tech/topics/mozilla.md>)

Tags: [assembly](<https://devfeed.tech/tags/assembly.md>), [browser](<https://devfeed.tech/tags/browser.md>), [cve](<https://devfeed.tech/tags/cve.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [exploitation](<https://devfeed.tech/tags/exploitation.md>), [firefox](<https://devfeed.tech/tags/firefox.md>), [ion](<https://devfeed.tech/tags/ion.md>), [ionmonkey](<https://devfeed.tech/tags/ionmonkey.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [jit](<https://devfeed.tech/tags/jit.md>), [mozilla](<https://devfeed.tech/tags/mozilla.md>), [optimization](<https://devfeed.tech/tags/optimization.md>), [spidermonkey](<https://devfeed.tech/tags/spidermonkey.md>)

### AI overview

This article examines the root cause of CVE-2019-9810, an IonMonkey issue in Mozilla's speculative JIT engine. It describes the author's investigation of Ion's codebase, including the issue's alias information and the related AliasAnalysis optimization pass.

### Source excerpt

A journey into IonMonkey: root-causing CVE-2019-9810. Introduction In May, I wanted to play with BigInt and evaluate how I could use them for browser exploitation. The exploit I wrote for the blazefox relied on a Javascript library developed by @5aelo that allows code to manipulate 64-bit integers. Around the same ...