Seriously, how do people go about finding bugs like these ? looks like they start from assembly code then try to trigger that code in javascript. Any one test

Seriously, how do people go about finding bugs like these ? looks like they start from assembly code then try to trigger that code in javascript. Any one tested this ?