GitHub repository: IMULMUL/unshift-racy
Primary language: JavaScript
Description: Webkit JavascriptCore Array unshift function had a race condition, it leads to RCE.