News for hackers. Stuff that matters.

A comment on CVE-2015-8126: Multiple buffer overflows in libpng. Parent comment

Re:CVE-2015-8126: Multiple buffer overflows in libpng by tedunangst on Saturday November 14, 2015 @05:15PM (#10567502)
Most libraries are not sane. API breaks are common, and often security updates are only available in new, incompatible releases.
[ Parent | on HN ]
Re:CVE-2015-8126: Multiple buffer overflows in libpng by zanny on Saturday November 14, 2015 @06:54PM (#10567831)
Then don't use those libraries! How can you trust a third party library to provide functionality to your software if they cannot even release sanely with ABI stability? Its a disservice to you and your users to risk security vulnerabilities like this.
[ Parent | on HN ]
Re:CVE-2015-8126: Multiple buffer overflows in libpng by throwaway2048 on Saturday November 14, 2015 @09:40PM (#10568263)
with tons of functionality there is no realistic alternative.
[ Parent | on HN ]
Re:CVE-2015-8126: Multiple buffer overflows in libpng by librarian42 on Sunday November 15, 2015 @09:46AM (#10569722)
Simplify the interface. Don't combine unrelated functionality in a single library.
[ Parent | on HN ]