Re:Serious Chrome zero-day
by viraptor on Thursday March 07, 2019 @03:59AM
(#19326567)
I'm not sure how you'd even search for those, because deserialisation doesn't have an exact, common equivalent in C land. There are almost no cases of arbitrary/named types being constructed from arbitrary inputs at runtime. You have to take into account the really low prior probability for the counts to make sense.
[ Parent
| on HN ]
There are no comments on this comment yet.