Re:The Rustonomicon: The Dark Arts of Advanced and Unsafe Ru...
by XMPPwocky on Sunday July 10, 2016 @03:14PM
(#12066802)
For example:
I found a trivially exploitable buffer overrun in the Source game engine. The cause? Somebody used strcpy instead of strncpy... when adding an animated ellipsis at the end of a string.
You really have to try in Rust to get pwned adding an ellipsis to a string.
(And yes, tools should (and probably would) have caught that bug. But they either weren't used, or didn't catch it, so...)
I found a trivially exploitable buffer overrun in the Source game engine. The cause? Somebody used strcpy instead of strncpy... when adding an animated ellipsis at the end of a string.
You really have to try in Rust to get pwned adding an ellipsis to a string.
(And yes, tools should (and probably would) have caught that bug. But they either weren't used, or didn't catch it, so...)