Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on An Empirical Study of Vulnerabilities in Cryptographic Libraries. Parent comment
Long before folks understood the security implications of a buffer overflow, we've been parsing ASN.1.
Most of the vulnerabilities stem from the basic problem of trusting length fields. Any binary encoding is going to have similar issues.
There are no comments on this comment yet.
Long before folks understood the security implications of a buffer overflow, we've been parsing ASN.1.
Most of the vulnerabilities stem from the basic problem of trusting length fields. Any binary encoding is going to have similar issues.