News for hackers. Stuff that matters.

A comment on Serious Chrome zero-day. Parent comment

Re:Serious Chrome zero-day by sureaboutthis on Thursday March 07, 2019 @08:16AM (#19327735)
> you can't write safe C++ in a codebase this complex.

And yet they did. And it worked great for more than a decade. Until just today when someone found...one.

[ Parent | on HN ]
Re:Serious Chrome zero-day by throwawaymath on Thursday March 07, 2019 @09:41AM (#19328346)
A cursory look at Chrome security disclosures shows many memory corruption vulnerabilities.

The most recent release fixed twelve use after free vulnerabilities: https://chromereleases.googleblog.com/2019/01/stable-channel....

Go take a look at how many have been found in previous releases.

[ Parent | on HN ]