3 ms·
> Food for thought for those who claim memory safety is unimportant in graphics code. I have never heard anyone claiming that. Why would anyone say such a thin
by hannob 9y ago
> Food for thought for those who claim memory safety is unimportant in graphics code.
I have never heard anyone claiming that. Why would anyone say such a thing? Graphics libraries are a constant source of memory safety bugs.
- M2Ys4U 9y agoI was in a meeting today where somebody dismissed a video codec having vulnerabilities as being a problem as it isn't "on the internet like a web server".
- pcwalton 9y agoUsually, but not always, I hear this from game developers. To be fair, of course, I'm not doubting that they're correct when the libraries are used in games. The problem is that increasingly graphics libraries get used in security-critical contexts like browsers.
- evmar 9y agoI bet there are a few security vulns lurking in games that involve user-provided data (e.g. maybe you can customize your clan by uploading a logo). The boundary between trusted and untrusted in games with mods is especially porous ( e.g. https://security.gerhardt.link/RCE-in-Factorio/ https://security.gerhardt.link/RCE-in-Factorio/ ).