News for hackers. Stuff that matters.
Re:Serious Chrome zero-day by viraptor on Thursday March 07, 2019 @03:59AM (#19326567)
I'm not sure how you'd even search for those, because deserialisation doesn't have an exact, common equivalent in C land. There are almost no cases of arbitrary/named types being constructed from arbitrary inputs at runtime. You have to take into account the really low prior probability for the counts to make sense.

There are no comments on this comment yet.