3 ms·
Part of my day job is reviewing vulnerability reports for a load of software written mostly in C/C++. Bugs leading to memory corruption vulnerabilities are the
by sechax 9y ago
Part of my day job is reviewing vulnerability reports for a load of software written mostly in C/C++.
Bugs leading to memory corruption vulnerabilities are the most common mistake I see. So things like, not doing proper bounds checks before accessing an array, using memory after it's been freed, not initializing memory properly before using it, type confusions causing values to be treated as pointers, etc.