Re:Warning: Implicit Backdoor
by firebacon on Wednesday September 11, 2019 @09:45AM
(#20940124)
> Though this is contingent on arithmetic bugs in caller code elsewhere in the hypothetical program
That was my point. The article claims to show how easy it is to introduce such a bug in the second snippet, but that isn't true. You need to introduce more bugs to get a security vulnerability.
That was my point. The article claims to show how easy it is to introduce such a bug in the second snippet, but that isn't true. You need to introduce more bugs to get a security vulnerability.