Alpine Linux Security advisory: OpenSSH-server password authentication bypass

Re:Alpine Linux Security advisory: OpenSSH-server password a... by _flux on Thursday November 05, 2026 @02:24PM (#50383248)

Well they would use `unwrap` if they were lazy, but at least that would be quite visible in the code and would not result in undefined behavior due to operating on a null value. And there might be a group of developers who first choose to use .unwrap. I hope it is the minority.

Given how easy it is to just forward that error to the caller, I think most Rust developers would just choose to do that.

[ Parent | on HN ]

Re:Alpine Linux Security advisory: OpenSSH-server password a... by uecker on Thursday November 05, 2026 @02:46PM (#50383526)

While dereferencing a null pointer is technically UB, it practice it leads to a safe trap. So .unwrap is the right comparison. If you always forward the error to the caller, it will also just lead to some random error message at some point, not really different to a crash.

[ Parent | on HN ]