Re:Exploitable vulnerabilities found in Kaspersky Anti-Virus
by x0x0 on Tuesday September 22, 2015 @04:22PM
(#10261431)
so it's easy enough and fast to have c++ calling rust, so you can spot replace pieces of an extant codebase?
Re:Exploitable vulnerabilities found in Kaspersky Anti-Virus
by kuschku on Tuesday September 22, 2015 @06:57PM
(#10262265)
Yes. And that’s what mozilla has started to do recently.
Re:Exploitable vulnerabilities found in Kaspersky Anti-Virus
by MaulingMonkey on Wednesday September 23, 2015 @12:45AM
(#10263353)
Any idea where I can find such commits?
Re:Exploitable vulnerabilities found in Kaspersky Anti-Virus
by bzbarsky on Friday September 25, 2015 @12:45PM
(#10279201)
They aren't checked in yet, but https://bugzilla.mozilla.org/show_bug.cgi?id=1161350 has some patches (marked obsolete) and https://bugzilla.mozilla.org/show_bug.cgi?id=1151899 has a work-in-progress patch.
Re:Exploitable vulnerabilities found in Kaspersky Anti-Virus
by MaulingMonkey on Saturday September 26, 2015 @12:36AM
(#10282115)
Nifty. Thanks for the links!
Though Kapersky would have been better off even using C++/CLI and "It Just Works" to hook into code written in, say, C#. The IJW stuff is cute, as it seamlessly brings the CLR in-process and lets you transition from native to managed without noticing. (And MSVC's C++->CLI targeting is good enough to compile MS Office except producing MSIL instead of native code, fwiw.)