News for hackers. Stuff that matters.

A comment on Team Fortress 2 source code has leaked. Parent comment

Re:Team Fortress 2 source code has leaked by swixmix on Thursday April 23, 2020 @12:08AM (#22952707)
the typical buffer overflow would have been caught by OpenBSD's protective malloc.

> [...] OpenSSL adds a wrapper around malloc & free so that the library will cache memory on it's own, and not free it to the protective malloc. [...] So then a bug shows up which leaks the content of memory mishandled by that layer. [...]

https://marc.info/?l=openbsd-misc&m=139698608410938&w=2

[ Parent | on HN ]
Re:Team Fortress 2 source code has leaked by sgillen on Thursday April 23, 2020 @05:41PM (#22961840)
I don’t think the vulnerability was in malloced memory, it was some buffer on the stack. I’ve actually patched OpenSSL to stop heart bleed as an excersice and iirc the fix was in fact just preventing a typical buffer overflow.
[ Parent | on HN ]
Re:Team Fortress 2 source code has leaked by selestify on Thursday April 23, 2020 @12:41AM (#22952863)
Seems like that commenter is also saying that it would’ve been caught as a regular buffer overflow bug?

> OpenSSL is not developed by a responsible team.

[ Parent | on HN ]