Re:Heap-based buffer overflow in Sudo
by jart on Wednesday January 27, 2021 @12:59AM
(#25924814)
Wow he changed two million lines of the sudo codebase over the project history and made 10,548 commits. That's bonkers. Sudo is clearly doing a lot more under the hood than I thought it did. A simple security critical command shouldn't have that much churn. It should arc towards immutability like TeX, which has had like twelve changes in the last 40 years.
[ Parent
| on HN ]
Re:Heap-based buffer overflow in Sudo
by masklinn on Wednesday January 27, 2021 @01:28AM
(#25924981)
> Sudo is clearly doing a lot more under the hood than I thought it did.
There’s a number of reasons openbsd dropped it, and all of them are fundamentally rooted in size and complexity: https://flak.tedunangst.com/post/doas
OpenBSD is a fabulous project. I've been working on tool called Cosmopolitan which helps Mac/Linux/Windows/FreeBSD developers write software that's compatible with OpenBSD: https://github.com/jart/cosmopolitan/blob/master/libc/sysv/s... As you can see, I've studied these systems a lot and I've got to say that OpenBSD is the closest to the Bell Labs roots I've seen from community distros. It takes a certain degree of judiciousness to maintain that authenticity and the clairvoyance w.r.t sudo should be all the proof we need that OpenBSD is up to something good.
Re:Heap-based buffer overflow in Sudo
by breakingcups on Wednesday January 27, 2021 @03:52AM
(#25925791)
Sidebar: Wonderful post, but what an awful fake loading bar. Every time I switch from the tab / window to something else and switch back to continue reading I'm interrupted by it for no reason.