Re:size_t-to-int vulnerability in Linux’s filesystem layer
by saagarjha on Tuesday July 20, 2021 @05:04PM
(#27899304)
> I think bugs like this are easily prevented by simply imposing sane limits
In general, no. Attackers are clever and can usually find their way around arbitrary limits when a bug exists. Sometimes such a restriction might stop them, but more often than not they’ll bypass it some other way.
In general, no. Attackers are clever and can usually find their way around arbitrary limits when a bug exists. Sometimes such a restriction might stop them, but more often than not they’ll bypass it some other way.