News for hackers. Stuff that matters.

A comment on Curl is C. Parent comment

Re:Curl is C by greenhouse_gas on Monday March 27, 2017 @12:51PM (#13969363)
>You're conflating the issues of running untrusted code with running trusted code on untrusted input. JS is untrusted code that you run on your computer. Your other examples generally do not fall into this camp.

No. The issue is that in C (or "release (not debug) rust" (someone here left a comment that rust programs in release mode don't check for array overflows)) untrusted input leads to untrusted code (through buffer-overflow).

So you can compromise a computer through a bug in imagemagick.

>Java being an allegedly safe server-side language has nothing to do with it being a very difficult language to sandbox when running untrusted code

Java was (in the 90s) advertised as safe client-side, hence applets.

[ Parent | on HN ]
Re:Curl is C by steveklabnik on Monday March 27, 2017 @01:02PM (#13969495)
No, release Rust does not do this. That is, the integer may overflow, but the buffer will not, unless you specifically go out of your way to use the unsafe unchecked access functions.
[ Parent | on HN ]