Re:Initial details about why CrowdStrike's CSAgent.sys crashed
by throw0101d on Sunday July 21, 2024 @10:33PM
(#41030402)
>> Number one was Out-of-bounds Write (CWE-787)
> Surely many of these originate from deserialization of untrusted data (e.g., trusting a supplied length).
Then they would presumably be classified under "Deserialization of Untrusted Data", number fifteen.
Re:Initial details about why CrowdStrike's CSAgent.sys crashed
by stouset on Monday July 22, 2024 @03:10AM
(#41031646)
That’s entirely my point. If a vulnerability happens due to writing out of bounds during untrusted deserialization, which category would you file it under?
“Deserialization of untrusted data” isn’t even a security bug like an out of bounds write is. Every meaningful program deserializes external input. It’s a common area where bugs occur, but it’s not a type of bug in and of itself. Every bug in that category “belongs” in a more proximate category.
Surely many of these originate from deserialization of untrusted data (e.g., trusting a supplied length). It’s probably documented but I’m passively curious how they disambiguate these cases.