Re:Why Did ArchLinux Embrace Systemd? (2016)
by slrz on Monday October 21, 2019 @01:58PM
(#21315239)
As long as the allocation size is bounded (due to alloca/VLAs lacking any mechanism to signal allocation failure), what's the problem with that?
[ Parent
| on HN ]
Re:Why Did ArchLinux Embrace Systemd? (2016)
by kevin_thibedeau on Monday October 21, 2019 @11:19PM
(#21320084)
The problem is that 1) you can't assume what the available stack space is and 2) you don't let tainted user input determine allocation sizes which is what Systemd did in the CVE disclosed earlier this year.