News for hackers. Stuff that matters.

A comment on Prossimo – Memory safety for the Internet's most critical infrastructure. Parent comment

Re:Prossimo – Memory safety for the Internet's most critical... by topspin on Friday June 18, 2021 @01:58PM (#27553031)
Here[1] is the ongoing list of "curl security problems." Note the several memory safety related issues. The two most recent are:

    May 26, 2021  CWE-416: Use After Free
    May 26, 2021  CWE-457: Use of Uninitialized Variable
There are numerous others that follow including out-of-bounds reads, overflows, etc. I can't imagine where you got the idea that this somehow "hasn't ever really been" a problem for curl.

[1] https://curl.se/docs/security.html

[ Parent | on HN ]

There are no comments on this comment yet.