News for hackers. Stuff that matters.

A comment on Nginx security advisory (CVE-2013-4547).

Re:Nginx security advisory (CVE-2013-4547) by nly on Tuesday November 19, 2013 @09:03PM (#6765905)
Call be a cynic, but isn't this why people should use parser generators instead of handrolling this stuff?

I mean, would you want to audit this file? -> http://trac.nginx.org/nginx/browser/nginx/src/http/ngx_http_...

[ Parent | on HN ]
Re:Nginx security advisory (CVE-2013-4547) by BobVerg on Tuesday November 19, 2013 @11:43PM (#6766344)
Parser generators? What's next? Java/C# instead of C?
[ Parent | on HN ]
Re:Nginx security advisory (CVE-2013-4547) by taspeotis on Wednesday November 20, 2013 @01:23AM (#6766622)
http://pragprog.com/the-pragmatic-programmer/extracts/tips

    Write Code That Writes Code
    Code generators increase your productivity and help avoid duplication.
[ Parent | on HN ]
Re:Nginx security advisory (CVE-2013-4547) by viraptor on Wednesday November 20, 2013 @06:19AM (#6767392)
Next we'll use mix twice and partially evaluate a compiler generator ;)
[ Parent | on HN ]
Re:Nginx security advisory (CVE-2013-4547) by csmuk on Wednesday November 20, 2013 @04:47AM (#6767137)
You've obviously never heard of yacc and lex then or bison?
[ Parent | on HN ]