News for hackers. Stuff that matters.

A comment on Nginx security advisory (CVE-2013-2028). Parent comment

Re:Nginx security advisory (CVE-2013-2028) by lysium on Tuesday May 07, 2013 @04:18PM (#5670510)
Why is length stored with a signed integer in the first place?
[ Parent | on HN ]
Re:Nginx security advisory (CVE-2013-2028) by tptacek on Tuesday May 07, 2013 @06:24PM (#5671222)
It's (mis)using off_t, which allows for negative offsets (for obvious reasons). You also don't need signed integers to have integer overflows.
[ Parent | on HN ]