News for hackers. Stuff that matters.

A comment on Nginx security advisory (CVE-2013-2028). Parent comment

Re:Nginx security advisory (CVE-2013-2028) by tptacek on Tuesday May 07, 2013 @06:24PM (#5671222)
It's (mis)using off_t, which allows for negative offsets (for obvious reasons). You also don't need signed integers to have integer overflows.
[ Parent | on HN ]

There are no comments on this comment yet.