News for hackers. Stuff that matters.

A comment on EU to fund bug bounty programs for open-source projects. Parent comment

Re:EU to fund bug bounty programs for open-source projects by progval on Sunday December 30, 2018 @05:37AM (#18788475)
> which have records of bugs have causing them problems

even glibc?

> I can't see how VLC can be as mission critical as Kafka.

VLC can run on public screens

[ Parent | on HN ]
Re:EU to fund bug bounty programs for open-source projects by CJefferson on Sunday December 30, 2018 @06:11AM (#18788559)
A friend of mine spent last Christmas debugging an issue in memcpy in glibc (on Intel 32-bit CPUs). Glibc is less well tested than I expected, and has ASM implementations of many functions for many CPUs, some of which are (obviously) less well supported than others.
[ Parent | on HN ]
Re:EU to fund bug bounty programs for open-source projects by int0x80 on Sunday December 30, 2018 @06:29AM (#18788622)
IA32 is probably not getting all the focus from devs and users this days, still surprising whoever... Do you have a link to the issue, out of curiosity?
[ Parent | on HN ]
Re:EU to fund bug bounty programs for open-source projects by CJefferson on Sunday December 30, 2018 @04:13PM (#18791365)
https://github.com/fingolfin/memmove-bug
[ Parent | on HN ]
Re:EU to fund bug bounty programs for open-source projects by int0x80 on Sunday December 30, 2018 @06:45PM (#18792040)
Wow thats scary indeed... They where using x86 signed compare instead of unsigned (jg vs ja)... Thanks for the link btw!
[ Parent | on HN ]