Linux: Vulnerabilities in nf_tables cause privilege escalation, information leak

Re:Linux: Vulnerabilities in nf_tables cause privilege escal... by grnmamba on Tuesday March 29, 2022 @03:19AM (#30839746)

C# has a compiler flag for checked arithmetic, i.e. overflow will throw an exception. You can't use c# for kernel development of course, but the idea has existed for decades (for much longer than c# existed).

That flag is not set by default in the new project templates for whatever reason. There's also an escape hatch, the unchecked keyword, for the rare cases where you need to overflow, e.g. when implementing hash tables.

[ Parent | on HN ]

Re:Linux: Vulnerabilities in nf_tables cause privilege escal... by pjmlp on Tuesday March 29, 2022 @04:42AM (#30840241)

> You can't use c# for kernel development of course

Midori team kind of disagreed with that, and most of System C# features keep landing on regular C# a bit per version, but I digress.

[ Parent | on HN ]

Re:Linux: Vulnerabilities in nf_tables cause privilege escal... by viraptor on Tuesday March 29, 2022 @05:48AM (#30840616)

> Midori team kind of disagreed with that

Also Singularity https://en.wikipedia.org/wiki/Singularity_(operating_system) and a few random attempts like SharpOs https://sourceforge.net/projects/sharpos/ and Cosmos.

[ Parent | on HN ]

Re:Linux: Vulnerabilities in nf_tables cause privilege escal... by pjmlp on Tuesday March 29, 2022 @09:09AM (#30842054)

Singularity actually uses a micro-kernel in C++, with everything else in Sing#.

An approach similar to what Meadows has taken with NuttX.

I haven't mentioned, because I expected it as a possible reply that Singularity wasn't 100% pure Sing#.

[ Parent | on HN ]

Re:Linux: Vulnerabilities in nf_tables cause privilege escal... by gpderetta on Tuesday March 29, 2022 @04:11AM (#30840057)

-fsanitize=signed-integer-overflow produces rather decent code with GCC.

[ Parent | on HN ]