Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages (googleprojectzero.blogspot.com)

I'm always impressed by the skills and perseverance required to do this type of work.