News for hackers. Stuff that matters.

A comment on WhatsApp Remote Code Execution in Video Call. Parent comment

Re:WhatsApp Remote Code Execution in Video Call by orangepurple on Tuesday September 27, 2022 @02:36PM (#32999262)
"sketchy c code" is a tautology
[ Parent | on HN ]
Re:WhatsApp Remote Code Execution in Video Call by yjftsjthsd-h on Tuesday September 27, 2022 @07:06PM (#33002280)
No, OpenBSD and sqlite exist; "sketchy c code" is only mostly redundant.
[ Parent | on HN ]
Re:WhatsApp Remote Code Execution in Video Call by j-krieger on Wednesday September 28, 2022 @05:20AM (#33006027)
Sqlite has had multiple CVEs featuring use-after-free, heap overflows, usage of null pointers, use of uninitialized memory, and array bounds overflows. [1]

Those could all be avoided by not using C.

[1]: https://www.sqlite.org/cves.html

[ Parent | on HN ]