News for hackers. Stuff that matters.

A comment on OpenBSD – pinning all system calls. Parent comment

Re:OpenBSD – pinning all system calls by petee on Tuesday December 12, 2023 @08:46AM (#38611965)
Then report the bug like an adult instead of acting like you found some huge published vulnerability in code that was posted for peer review. Thats why the code is there, so others can identify issues; congrats, you did.

People make mistakes in every project. So grow up

[ Parent | on HN ]
Re:OpenBSD – pinning all system calls by tiffanyh on Tuesday December 12, 2023 @11:40AM (#38614565)
Would a code analyzer have detected this bug?

(E.g. Valgrind, Flexelint, cppcheck, clang static analyzer, etc.)

If yes, then why aren't code analyzers used on all OpenBSD code submissions, given their stance on having correct code & security focused.

[ Parent | on HN ]
Re:OpenBSD – pinning all system calls by ori_b on Wednesday December 13, 2023 @12:14PM (#38630502)
No, probably not. It requires a crafted binary to be executed.
[ Parent | on HN ]