News for hackers. Stuff that matters.

A comment on This shouldn't have happened: A vulnerability postmortem. Parent comment

Re:This shouldn't have happened: A vulnerability postmortem by asdfasgasdgasdg on Wednesday December 01, 2021 @03:11PM (#29408560)
Is it idiomatic go to memcpy into a struct? I would think that this whole paradigm would be impossible in safe golang code.
[ Parent | on HN ]
Re:This shouldn't have happened: A vulnerability postmortem by slownews45 on Wednesday December 01, 2021 @03:36PM (#29408822)
That's what I'm trying to understand.

Let's ignore idiomatic code, people do crazy stuff all the time.

What's the go example that gets you from for example an overflow to exploit? That's what I'm trying to follow (not being an expert).

[ Parent | on HN ]
Re:This shouldn't have happened: A vulnerability postmortem by asdfasgasdgasdg on Wednesday December 01, 2021 @03:39PM (#29408856)
I am skeptical that you could do it without either using the assembler or the unsafe package, but we will see what Julian says.
[ Parent | on HN ]