OPTIMIZED FUZZING IOKIT IN IOS

Experimental Results(IV)
Vulnerability Case 1
IODataQueue
void IODataQueue::free()
{
if (dataQueue) {
IOFreeAligned(dataQueue, round_page(dataQueue->queueSize +
DATA_QUEUE_MEMORY_HEADER_SIZE));
dataQueue = NULL;
}
if (notifyMsg) {
IOFree(notifyMsg, sizeof(mach_msg_header_t));
notifyMsg = NULL;
}
super::free();
}
return;