News for hackers. Stuff that matters.

A comment on Why did the OpenSSL punycode vulnerability happen. Parent comment

Re:Why did the OpenSSL punycode vulnerability happen by tester756 on Wednesday November 02, 2022 @07:43PM (#33444471)
But why?

Parsers executes safe code fragments in order based on the input

How safe operations result in unsafe results?

I'm not talking about side channels here.

[ Parent | on HN ]
Re:Why did the OpenSSL punycode vulnerability happen by alserio on Wednesday November 02, 2022 @07:47PM (#33444514)
Well, I see two ways it might be: the operations are not really safe in an absolute sense or the operations composition does not preserve safety. Or you could say that an operation can be safe in a context but ops+context does not compose as well as we would like to guarantee the preservation of safety
[ Parent | on HN ]