Redundancy Elimination Reducer in V8 and 34C3 CTF V9

1 · 2019 · Aug. 28, 2019, midnight
Summary
0x00 Overview RedundancyElimination reducer is used to remove nodes that are not necessary, such as redundant kCheckXXX node. For example, if there is already a kCheckXXX before another kCheckXXX, the later kCheckXXX may be removed if we are sure this check will never be violated. However, if this assumption is wrong, vulnerability may arise. V9 in 34C3 CTF is an example for this. 0x01 Search As I covered in previous articles, GraphReducer reduces the graph using depth-first-search, starting fro...