Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R...
by mmainguy on Thursday September 10, 2009 @08:43PM
(#816534)
You know, I just don't get it, Microsoft is reputed to hire pretty smart people, but somehow this slips through? This is on the border of professionally negligent. I can see if my foomatic open source project allows someone to run remote code (hell, even IIS or maybe apache for that matter), but the TCPIP stack itself? sheesh....
[ Parent
| on HN ]
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R...
by swolchok on Thursday September 10, 2009 @09:41PM
(#816613)
It's hard to find this sort of thing statically in C code, especially if your static analysis tool is configured to treat C typecasts as necessarily correct because there's no syntax in C for expressing how dangerous a cast you intended, unlike C++. Of course, I don't know whether this code is C or C++.