Linux Kernel Use-After-Free Remote Code Execution Vulnerability

Re:Linux Kernel Use-After-Free Remote Code Execution Vulnera... by Hydraulix989 on Wednesday October 05, 2016 @01:23AM (#12641721)

If anything, security vulnerabilities are precisely the kind of bugs that easily sneak by unit tests.

[ Parent | on HN ]

Re:Linux Kernel Use-After-Free Remote Code Execution Vulnera... by IgorPartola on Wednesday October 05, 2016 @10:07AM (#12643892)

Try reading my comment in the most sarcastic tone you can manage.

Unit testing for security vulnerabilities has been discussed to death on HN and is generally agreed that it doesn't work. Yet, every time there is any kind of vulnerability, a comment like mine shows up, except in ernest.

[ Parent | on HN ]

Re:Linux Kernel Use-After-Free Remote Code Execution Vulnera... by drvdevd on Wednesday October 05, 2016 @07:17AM (#12642921)

I propose a new name: a dijkstranbug. Kinda like a heisenbug except specifically for unit tests.

[ Parent | on HN ]