News for hackers. Stuff that matters.

A comment on Why CVE-2022-3602 was not detected by fuzz testing. Parent comment

Re:Why CVE-2022-3602 was not detected by fuzz testing by klqwr on Monday November 21, 2022 @06:50PM (#33699877)
I find it quite brave to trust the OpenBSD guys by default. Historically, they have way too many forked huge projects (Apache, gcc, patched clang, ...) to understand them in depth.

OpenSMPTD had its fair share of exploits. sudo had its fair share of exploits.

[ Parent | on HN ]

There are no comments on this comment yet.