News for hackers. Stuff that matters.

A comment on size_t-to-int vulnerability in Linux’s filesystem layer. Parent comment

Re:size_t-to-int vulnerability in Linux’s filesystem layer by codedokode on Tuesday July 20, 2021 @07:30PM (#27900532)
Yes, this can be caught by a static analyzer and it is sad that Linux doesn't use it. I wonder, is it because the code quality is low and there would be too many warnings?
[ Parent | on HN ]
Re:size_t-to-int vulnerability in Linux’s filesystem layer by SolarNet on Wednesday July 21, 2021 @04:23PM (#27911646)
They do use them, but only in a narrow fashion. A lot of people have tried to make default kernel wide static analyzers but they are mostly not useful.

And it's because the kernel does a lot of non-standard things, mostly because it has to. It is not a normal program.

[ Parent | on HN ]