Re:Rsync client-side arbitrary file write vulnerability
by trasz on Tuesday August 02, 2022 @01:28PM
(#32321725)
If you wrote a code that contains some bug, usually your your tests won’t catch it either. You’d need a fuzzer instead. But then again, it just doesn’t work this way - you can’t write perfect code, you need to follow the principle of least privilege, ie use compartmentalisation.
[ Parent
| on HN ]
Re:Rsync client-side arbitrary file write vulnerability
by e12e on Tuesday August 02, 2022 @06:36PM
(#32325154)
Well, using a fuzzer would probably be a good idea? See eg:
> Fuzzing 100+ open source projects with OSS-Fuzz - lessons learned. (2021)
https://adalogics.com/blog/fuzzing-100-open-source-projects-...
Short hn discussion of post (but project has been featured many times):