News for hackers. Stuff that matters.

A comment on SHA-3 Buffer Overflow.

Re:SHA-3 Buffer Overflow by all_these_years on Thursday October 20, 2022 @09:24PM (#33283086)
SHA-3 in Ruby:

    $ gem install sha3
    $ irb
      > require 'sha3'
      > s = SHA3::Digest::SHA224.new
      > s.update("\x00")
      > s.update("\x00" * 4294967295)

    [ Segmentation fault... ]
Tested with Ruby 3.1.2

Gem's code (including C native extension): https://github.com/johanns/sha3

[ Parent | on HN ]
Re:SHA-3 Buffer Overflow by abraham on Thursday October 20, 2022 @11:31PM (#33284177)
Just over half a million total downloads. So some use but not particularly popular.
[ Parent | on HN ]
Re:SHA-3 Buffer Overflow by johannsg on Monday October 24, 2022 @03:10AM (#33313765)
Released a fix earlier today (Oct 23rd) (v1.0.5)
[ Parent | on HN ]