Re:Heap-based buffer overflow in Sudo
by roca on Wednesday January 27, 2021 @04:44PM
(#25934412)
You can definitely implement sudo and similar tools without writing any new unsafe code.
You will use existing libraries that contain unsafe code, but you should be able to stick to popular well-tested libraries, which means it will be very difficult for an attacker to find a new exploitable bug in those libraries to attack your tools.
You will use existing libraries that contain unsafe code, but you should be able to stick to popular well-tested libraries, which means it will be very difficult for an attacker to find a new exploitable bug in those libraries to attack your tools.