3 ms·
Well, if you can somehow inject arbitrary code, then you can inject an infinite loop. So a program will only halt on all inputs if you can not inject an infinit
by yk 11y ago
Well, if you can somehow inject arbitrary code, then you can inject an infinite loop. So a program will only halt on all inputs if you can not inject an infinite loop.
- radarsat1 11y agoSure.. so how is an infinite loop a security vulnerability?
- JadeNB 11y agoIf you are performing data processing on user-supplied inputs (as online compilers do), then an infinite loop can amount to a DoS attack.
- yk 11y agoThe argument is the other way around, if a program halts on all inputs, then there is no possibility to inject arbitrary code. ( There may still be important security vulnerabilities, but there are some limits. Consider a debugger that executes the first 10 000 operations of a program, it would halt, but 10 000 operations is a lot of space to do something malicious.)
- coldtea 11y agoSecurity doesn't end with "privilege escalation". "Killing" (DoS) a system is also an attack.