BigBuffer TOCTOU – DevToolsSession::ValidateMessage

This page is the (simulated) compromised renderer's tab. The CDP driver attaches to it as a flattened-mode child session and sends one Runtime.enable; the patched renderer then fires the shared-memory DispatchProtocolNotification race described in the report.