How expensive is integer-overflow trapping in C++?

Re:How expensive is integer-overflow trapping in C++? by asveikau on Thursday September 24, 2020 @10:09AM (#24578741)

> If you don't abort then you probably have an arbitrary code execution vulnerability.

There are some patterns in which that is totally true, for example if an integer product is passed to malloc or realloc. Those cases tend to get extra scrutiny in security reviews because it is a well known class of issues. However, it is certainly not the case that every case is exploitable.

[ Parent | on HN ]

Re:How expensive is integer-overflow trapping in C++? by lmm on Thursday September 24, 2020 @07:58PM (#24585074)

Not every case is exploitable, but people are bad at reasoning about which cases are exploitable; a lot of DoS bugs that are initially thought to be harmless turn out to be exploitable. So I think it's important to treat any UB as exploitable until proven otherwise.

[ Parent | on HN ]