News for hackers. Stuff that matters.

A comment on Heap-based buffer overflow in Sudo. Parent comment

Re:Heap-based buffer overflow in Sudo by roblabla on Tuesday January 26, 2021 @07:33PM (#25922774)
Compile it for wasm and use a wasm runtime built in a memory-safe language? I believe some wasm runtimes allow for making raw syscalls.
[ Parent | on HN ]
Re:Heap-based buffer overflow in Sudo by kaba0 on Tuesday January 26, 2021 @07:57PM (#25922934)
It would not stop these sort of exploits if I’m not mistaken (ok, it could help since rewriting return addresses is not possible I think), but memory errors that cause logic bugs are still possible.
[ Parent | on HN ]
Re:Heap-based buffer overflow in Sudo by roca on Tuesday January 26, 2021 @08:30PM (#25923180)
Yes, that's exactly right.
[ Parent | on HN ]