News for hackers. Stuff that matters.
Re:Proving that Android’s, Java’s and Python’s sorting algor... by scythe on Tuesday February 24, 2015 @02:25PM (#9102890)
libc++ doesn't use randomized quicksort so that bug is irrelevant. It is an attack on a clever pivot selection method, but the exploit derives from the fact that the pivot isn't actually random, but deterministically pseudorandom. A truly random quicksort isn't vulnerable (since the pivots will be chosen in a different order every time).

The real problem with random quicksort is that randomness is really, really hard, and good RNGs are slow. Also, timsort is adaptive, while quicksort is not.

There are no comments on this comment yet.