Re:Stranger Strings: An exploitable flaw in SQLite
by fps-hero on Tuesday October 25, 2022 @12:18PM
(#33332651)
The bug relies on undefined behaviour in the C language, but it’s exploitable is due to the way memory access operations are written in C.
Equivalent Rust code would not be exploitable at a language level because that type of raw pointer array access isn’t possible with resorting to unsafe blocks. The undefined behaviour that caused the bug also doesn’t not exist in Rust.
[ Parent
| on HN ]
There are no comments on this comment yet.