CVE-2017-2388

This is a working proof-of-concept exploit for CVE-2017-2388, a NULL pointer dereference in IOFireWireUserClient on macOS. It triggers a denial of service by calling setAsyncRef_IsochChannelForceStop with a NULL handle.

This exploit triggers a NULL pointer dereference in IOFireWireUserClient::setAsyncRef_IsochChannelForceStop by creating an isochronous channel and then forcing it to stop. The vulnerability leads to a kernel panic, resulting in a denial of service (DoS).